CVE-2023-23752

CVE-2023-23752 Informazioni Questo exploit è un bypass dell'autenticazione che perde nome utente e password dell'amministratore e anche la configurazione MySQL nome utente, password, host e database Versione vulnerabile solo 4.00 = 4.28 Usage root@kitploit: usage: exploit.sh -h -u URL -t TARGETS...

CVE-2022-21894

baton drop CVE-2022-21894: Vulnerabilidade de Bypass do Recurso de Segurança do Secure Boot As Aplicações de Inicialização do Windows permitem a configuração truncatememory para remover blocos de memória contendo intervalos "persistentes" de dados serializados do mapa de memória, levando a um...

IG-Detective

IG-Detective 🕵️‍♂️📸 Creato da@shredzwho | 💖 Sponsorizza questo progetto IG-Detective è uno strumento di Open Source Intelligence OSINT ad alte prestazioni basato su Python per Instagram. Offre una shell interattiva premium per eseguire analisi approfondite sugli account Instagram, estrarre la...

Craftcms-PoC-CVE-2026-31266

CVE-2026-31266 - Craft CMS Autorização Ausente Informações do CVE Campo| Valor ---|--- ID do CVE| CVE-2026-31266 Fornecedor| Pixel & Tonic Produto| Craft CMS Versões Afetadas| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; Prova de Conceito root@kitploit: Com allowAdminChanges=false cu...

CVE-2024-55591

FortiGate CVE-2024-55591 1Scan neueste Version https://github.com/0x7556/1Scan Betroffene Versionen root@kitploit: FortiOS 7.0.0 bis 7.0.16 FortiProxy 7.0.0 bis 7.0.19 FortiProxy 7.2.0 bis 7.2.12 POC Einzelprüfung root@kitploit: ./poc 10.10.1.1 ./poc http://10.10.1.1 1Scan Batch root@kitploit:...

SneakyEXE

SneakyEXE root@kitploit: /$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$$$$$$$ /$$ $$ | $$ | $$/| $$ / $$| $$/ | $$ / /$$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$ /$$ /$$| $$ | $$/ $$/| $$ | $$$$$$ | $$ $$ /$$ $$ | $$| $$ /$$/| $$ | $$| $$$$$ \ $$$$/ | $$$$$ \ $$| $$ \ $$| $$$$$$$$ /$$$$$$$| $$$$$$/ | $$ | $$| $$/ $$ $$ ...

CrushFTP-auth-bypass-CVE-2025-31161

CrushFTP प्रमाणीकरण बाईपास - CVE-2025-31161 CVE-2025-31161 का शोषण करने के लिए एक व्यापक टूलकिट, जो CrushFTP में एक प्रमाणीकरण बाईपास भेद्यता है जो अनधिकृत उपयोगकर्ता खाता निर्माण की अनुमति देता है। 🔍 CVE-2025-31161 क्या है? CVE-2025-31161 CrushFTP में एक महत्वपूर्ण प्रमाणीकरण बाईपास भेद्यता है ज...

CVE-2026-11387

CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ Escalatazione dei Privilegi non autenticata tramite Reset della Password Arbitrario ☆ === Beelze === 📋 Informazioni sulla Vulnerabilità Campo| Dettagli ---|--- CVE ID| CVE-2026-11387 Punteggio CVSS| 9.8 Critical Vettore CVSS|...

CVE-2021-40346

CVE-2021-40346: HAProxy HTTP Request Smuggling - ACL-Umgehung Übersicht Dieses Projekt demonstriert CVE-2021-40346 , eine kritische Integer-Overflow-Schwachstelle in HAProxy, die HTTP-Request-Smuggling-Angriffe zur Umgehung von Sicherheitskontrollen ermöglicht. CVSSv3 Bewertung: 7.5 Hoch...

CVE-2024-10924

CVE-2024-10924 एक्सप्लॉइट - WordPress Really Simple SSL प्लगइन 2FA बाईपास अवलोकन इस रिपॉजिटरी में CVE-2024-10924 के लिए एक एक्सप्लॉइट है, जो WordPress के Really Simple SSL प्लगइन में एक भेद्यता है। यह एक हमलावर को टू-फैक्टर ऑथेंटिकेशन 2FA ऑनबोर्डिंग को बाईपास करने और एक WordPress साइट तक अनधिकृत...

CVE-2022-20186_CTXZ

Exploit per CVE-2022-20186 Il write-up si trova qui. Si tratta di un bug nel driver del kernel Arm Mali che ho segnalato a gennaio 2022. Il bug può essere utilizzato per ottenere l'esecuzione arbitraria di codice nel kernel dal dominio delle app non fidate, che viene poi usata per disabilitare...

CVE-2026-69129

KubePi , a Kubernetes multi-cluster management panel by 1Panel-dev, contains an authorization flaw in versions up to and including 2.0.0 . Cluster-scoped APIs do not consistently validate per-cluster access, meaning an authenticated user granted management rights over one cluster can, under certa...

CVE-2024-54916

CVE-2024-54916: Bypass dell'autenticazione su Telegram apk Un problema nella classe SharedConfig di Telegram Android APK v.11.7.0 consente a un attaccante fisicamente vicino di bypassare l'autenticazione e aumentare i privilegi manipolando il valore restituito dal metodo checkPasscode. Tipo di...

CVE-2026-5524-PoC

CVE-2026-5524 — تنفيذ أوامر عن بُعد RCE غير مصادَق عليه في Divi Form Builder مجموعة أدوات استغلال جماعي لـ CVE-2026-5524 ، وهي ثغرة رفع ملفات تعسفي غير مصادَق عليها في إضافة ووردبريس Divi Form Builder = 5.1.8 تؤدي إلى تنفيذ أوامر عن بُعد. الحقل| القيمة ---|--- CVE| 2026-5524 CVSS| 9.8 Critical...

BypassFuzzer

Bypass Fuzzer मूल 403fuzzer.py : ==नोट: यह मेरे नए, चमकीले burp एक्सटेंशन के लिए हटा दिया गया है जो 1000000% बेहतर है। मेरे टूल्स का उपयोग करने के लिए धन्यवाद!== आप यहां एक्सटेंशन पा सकते हैं: https://github.com/intrudir/BypassFuzzer-Burp Fuzz 401/403ing endpoints for bypasses हेडर, पथ सामान्यीकर...

CVE-2024-47533-PoC

CVE-2024-47533 – Bypass autenticazione Cobbler XMLRPC → Reverse Shell RCE non autenticato 📌 Riepilogo Questo repository contiene un exploit Proof-of-Concept PoC per CVE-2024-47533 , un bypass critico dell'autenticazione nell'API XMLRPC di Cobbler che porta a esecuzione remota di codice RCE non...

GoRedOps

GoRedOps Telegram: https://t.me/ebytelabs GoRedOps ist eine Sammlung von Golang-Projekten, die speziell für Red Teamer und offensive Sicherheitsoperationen entwickelt wurden. Dieses Repository stellt verschiedene Werkzeuge und Techniken bereit, die für Penetrationstests, Exploitation und...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 è una vulnerabilità nel modulo tarfile di Python che consente scritture arbitrarie di file al di fuori della directory di estrazione quando si estraggono archivi tar non attendibili. Il problema si verifica quando si utilizza TarFile.extract o TarFile.extractall co...

CVE-2019-16098

CVE-2019-16098 Der Treiber in Micro-Star MSI Afterburner 4.6.2.15658 auch bekannt als RTCore64.sys und RTCore32.sys erlaubt jedem authentifizierten Benutzer das Lesen und Schreiben in beliebige Speicherbereiche, I/O-Ports und MSRs. Dies kann für Privilegieneskalation, Codeausführung mit hohen...

CVE-2017-15715-httpd

CVE-2017-15715-httpd مهمة حاوية whs الدفعة الرابعة ملخص Apache HTTPD هو خادم HTTP شائع الاستخدام يمكنه تشغيل صفحات PHP عبر modphp. من الإصدار 2.4.0 حتى 2.4.29، توجد ثغرة في تحليل الصيغة Parsing، حيث إذا كان اسم الملف ينتهي بـ .php، يتم التعرف عليه كملف PHP بصيغة 1.php\x0A، مما يسمح للمهاجم بتجاوز...