179991 matches found
CVE-2026-18964 Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button <= 3.5.9 - Reflected Cross-Site Scripting
The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.5.9 due to insufficient input sanitization and...
EUVD-2026-75931
The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.5.9 due to insufficient input sanitization and...
EUVD-2026-75928
The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...
CVE-2026-12215
OTP Login & Register Woocommerce (WordPress plugin) is vulnerable to unauthenticated authentication bypass via OTP brute force in all versions up to and including 2.7.2 . The root cause is threefold: the OTP rate-limit counter is keyed exclusively on the attacker-controlled xoo_ml_user_ip_data co...
CVE-2026-12215 OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force
The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...
firefox_tunnel
firefoxtunnel 使用 Firefox 建立隧道以进行远程通信的方法。 有效载荷的输入输出使用 cookie.sqlite 和带有自动提交功能的 HTML 与 JavaScript，浏览器以隐藏模式运行。 阅读文档： https://medium.com/code-fighters/firefox-tunnel-to-bypass-any-firewall-bc6f8b432980 运行 PoC 的步骤：...
CVE-2026-45034
🧨 Explotación de Deserialización Phar de PHPSpreadsheet Bypass deprohibitWrappers + Ejecución Remota de Código RCE en phpoffice/phpspreadsheet Este repositorio proporciona un exploit de prueba de concepto PoC para una vulnerabilidad crítica en la popular librería PHP PHPSpreadsheet. El ataque...
nginxpwner
Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: root@kitploit: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker root@kitploit: git clone...
MeterPwrShell
非活跃工具 - 原因：忙于其他事务 root@kitploit: . . . / \ / | \ \ / /| | | | | | \ \ / \ / / \ / \ \ | / / | \ \ | | / | | | | / / / Y \ /| | \ /| | / | \ / | | / | Y \ /| || |/ \ | /\ | \ | || // || / /|| /\ /| / / / / / / / / MeterPwrShell2 自动化工具，可生成能在 Metasploit 上创建 Meterpreter Shell 的...
CFUnmitigate
CFUnmitigate Bypass de UAM solo mediante solicitudes de CloudScraper. Instalación root@kitploit: git clone https://github.com/Mrakovic-ORG/CFUnmitigate cd CFUnmitigate npm install node CFUnmitigate.js Descargo de responsabilidad No somos responsables de ningún daño causado por este script, ha sid...
CVE-2026-63030
wp2shell — RCE pre-autenticación en el núcleo de WordPress CVE-2026-63030 Confusión de ruta en lote + CVE-2026-60137 Inyección SQL Kit de explotación sin dependencias para la cadena de vulnerabilidades wp2shell en el núcleo de WordPress. Una única solicitud HTTP anónima logra la ejecución remota ...
cve-2025-29927-poc
CVE-2025-29927-POC Introducción Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-29927, una vulnerabilidad hipotética que demuestra una falla en el manejo de middleware dentro de una aplicación web. La PoC ilustra cómo una solicitud HTTP especialmente manipulada puede evadir la...
CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack
CVE-2026-23004 – Omisión de autenticación UDS en automoción mediante ataque de repetición Código del programa simulador Python CAN‑UDS root@kitploit: udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def...
widevine-l3-decryptor
弃用警告 该仓库曾包含用于绕过 Windows 机器上 Chrome 浏览器中 Widevine L3 DRM 的代码。 自 2021 年 5 月 31 日起已不再有效，但您可以阅读逆向分析报告。 更新 Google 针对该仓库的大部分分支发出了 DMCA 删除请求。仓库当时的原始内容已归档如下。 Widevine L3 解密器 Widevine 是 Google 旗下的 DRM 系统，被许多流行的流媒体服务（Netflix、Spotify 等）用于保护媒体内容不被下载。 但 Widevine 安全性最低的 L3 级别（大多数浏览器和 PC 所采用的）完全以软件方式实现（即没有硬件...
widevine-l3-decryptor
Deprecation Warning This repository used to contain code to circumvent Widevine L3 DRM in Chrome on Windows machines. It's not working anymore as of May 31st 2021, but you can read the reversing writeup. Update Google issued a DMCA takedown request against most forks of this repository. The...
CVE-2022-21882
CVE-2022-21882 bypass de LPE de win32k CVE-2021-1732 Prueba solo probado en windows 20h2 19042.1415 probado en windows 21H1 no funciona Descarga https://raw.githubusercontent.com/David-Honisch/CVE-2022-21882/main/x64/Release/CVE-2021-1732.exe Muchas gracias a Kalendski. Basado en:...
PowerSploit
本项目已不再支持 PowerSploit 是一组 Microsoft PowerShell 模块，可用于在评估的各个阶段帮助渗透测试人员。PowerSploit 包含以下模块和脚本： CodeExecution 在目标机器上执行代码。 Invoke-DllInjection 将DLL注入到你选择的进程ID中。 Invoke-ReflectivePEInjection 将Windows PE文件（DLL/EXE）反射加载到PowerShell进程中，或者将DLL反射注入到远程进程中。 Invoke-Shellcode...
CVE-2026-89151
Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature...
CVE-2026-88260
Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code Inclusion. This issue affects Zenius EMS 8.0: through OAM Build 109...