6279 matches found
MemShellParty
MemShellParty 中文 | English !WARNING This tool is intended only for security researchers, network administrators, and related technical personnel for authorized security testing, vulnerability assessment, and security auditing. Using this tool for any unauthorized network attack or penetration tes...
oob_entry
oobentry: Authorized iOS kernel exploit research for tfp0 access Visit releases: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip A calm, careful space for researchers to document, discuss, and share knowledge about iOS kernel concepts related to tfp0 access. This...
CVE-2017-7921-Research-Toolkit
CVE-2017-7921 Research Toolkit Security Statement: This tool is intended for authorized security research and vulnerability verification only. Table of Contents Legal and Ethical Statement Project Description Features Installation Usage Output Defense and Remediation Recommendations Technical...
KingOfBugBountyTips
KingOfBugBountyTips The Ultimate Bug Bounty Reconnaissance Arsenal "In the shadows we hunt, in the code we trust" Telegram | Twitter | YouTube | LinkedIn DoD VDP Scope DoD Vulnerability Disclosure Program | KingRecon DOD Full DoD Scope - 19 Domains root@kitploit: BBRF Scope - All DoD Domains bbrf...
mec
mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...
Minio-CVE-2023-28432
Minio-CVE-2023-28432 Minio-CVE-2023-28432 정보 유출 탐지 도구입니다. 학습 및 승인된 테스트 목적으로만 사용하세요. 개인 분석https://lhxhl.github.io/2023/04/03/minio2023/ 사용 방법 golang 언어 환경이 필요합니다 root@kitploit: go build main.go ./main -h //使用帮助 ./main -u url //单个url检测 ./main -f file.txt //批量检测 오류 정보는 err.txt에 기록됩니다. 배치 감지 시 성공한 결과...
usbrip
usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...
CVE-2026-64600
CVE-2026-64600 기부 PayPal 또는 아래 QR 코드 스캔을 통해 이 프로젝트의 유지보수를 지원해 주세요. ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 승인된 환경에서만 사용하세요: 로컬 가상 머신 Docker 컨테이너 격리된 실습 환경 승인된 침투 테스트 환경 설정 예시: root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual...
CVE-2019-14530
CVE-2019-14530 OpenEMRプロジェクトにおけるパストラバーサルおよびDoS脆弱性 ファイル内の脆弱な関数: /openemr/custom/ajaxdownload.php 条件: 1. 任意の認可されたユーザー 2. DoSのケース: サーバー上にディレクトリ "/sites/default/documents/cqmqrda/" が存在する必要があります("unlink" 関数のロジック上、 ファイルへのパスは既存のディレクトリとその中のファイルのみで構成されている必要があります)。 影響を受けるバージョン: 5.0.2未満、5.0.2で修正済み。 説明...
EUVD-2026-82597
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...
EUVD-2026-82588
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...
CVE-2026-85887
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network...
CVE-2026-85885
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...
CVE-2026-85887
CVE-2026-85887 is an information disclosure vulnerability in M365 Copilot caused by an incorrect permission assignment on a critical resource. An attacker with low privileges (authorized access) can disclose information over a network. The CVSS 3.1 score is 7.7 (HIGH) with a changed scope and hig...
CVE-2026-85878
CVE-2026-85878 is an improper authorization vulnerability in Azure Database for PostgreSQL that allows an authorized attacker to elevate privileges over a network. Microsoft's CNA rates it CVSS 3.1 9.9 (CRITICAL) with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a low-complexity ne...
CVE-2026-87701
Azure Cosmos DB is affected by an injection vulnerability (improper neutralization of special elements in output used by a downstream component) that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 9.6 (CRITICAL) , with a vector of AV:N/AC:L/PR:L/UI:N/S:...
CVE-2026-85885
Microsoft 365 Copilot is affected by a command injection vulnerability, classified as improper neutralization of special elements used in a command. An authorized attacker (low privileges required) can exploit this over the network without user interaction to elevate privileges , with the attack ...
CVE-2026-33017
CVE-2026-33017 CVE 2026-33017에 대한 간단한 개념 증명 승인된 환경에서만 사용하십시오...