CVE-2017-7522

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:52+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw 2026-09-02 01:03:29+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Quick Start Docker Testing root@kitploit: Unpack src.zip zip -r src.zip src Build an...

nextploiter

nextploiter 针对 NextJS 的漏洞利用工具 使用方法 命令 使用方法 root@kitploit: $ npm install -g nextploiter $ nextploiter COMMAND running command... $ nextploiter --version nextploiter/1.0.0 darwin-arm64 node-v24.12.0 $ nextploiter --help COMMAND USAGE $ nextploiter COMMAND ... 命令 nextploiter help COMMAND nextploiter...

hotpot

Hotpot 🍲 Authy / Google Authenticator for the command line. Hotpot is a simple and secure command-line tool for managing TOTP-based two-factor authentication codes. Hotpot securely stores your 2FA secrets in your system's keyring and generates time-based one-time passwords when you need them. Bui...

Hash-Eye

🔍 HashEye - Advanced Hash Type Detection Tool HashEye is a powerful Python CLI tool for instantly detecting and analyzing hash types. It provides detailed information about hash formats, security levels, entropy analysis, and pattern detection. Powered byIsaac Security Labs 🔗 Links: GitHub:...

vet v1.19.0

Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run vet scan --agent-skill to scan an Agent Skill hosted in a GitHub repository. Why vet? 70-90% of modern software is open source code — how do you know it's safe? Traditional SCA tools drown you in CVE...

CVE-2026-19592

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If a user opens or uses an attacker-prepared repository whose preserved .git/config sets...

CVE-2026-19592

OpenAI Codex CLI (v0.102.0–0.130.0) and Codex Desktop (Windows and macOS) executed a repository-supplied core.fsmonitor helper during background Git metadata collection, outside the command sandbox and without a user-approval prompt. An attacker who delivers a repository with its .git/config inta...

CVE-2026-19591

OpenAI Codex CLI (Windows, macOS, Linux) and Codex Desktop (Windows, macOS) contain an approval-bypass flaw in their command-safety parser. The parser misinterprets PowerShell's stop-parsing token (--%), classifying certain commands as safe when they are not. An attacker who controls a repository...

CVE-2025-20029

CVE-2025-20029: Command Injection in TMSH CLI in F5 BIG-IP A command injection vulnerability exists in the F5 “tmsh” restricted CLI which allows an authenticated attacker to leverage the commands accessible by a low privilege user in order to bypass restrictions, inject arbitrary commands and...

Malicious code in gcphelpit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d The module src/gcphelpit/verify.py runs at import time: it reads the installer's /.zshrc and POSTs the raw file contents to the hardcoded endpoint...

MAL-2026-15810 Malicious code in gcphelpit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d The module src/gcphelpit/verify.py runs at import time: it reads the installer's /.zshrc and POSTs the raw file contents to the hardcoded endpoint...

sec-gemini

Sec-Gemini SDK 与 CLI 此仓库托管用于 Sec-Gemini 的 SDK 和 CLI，Sec-Gemini 是 Google 推出的实验性网络安全 AI。 SDK SDK 适用于以下语言： Python，位于 sec-gemini-python/ TypeScript，位于 sec-gemini-ts/ 我们还提供了一个 Web 组件，以便在您的网站上轻松集成。加载方式如下： root@kitploit: CLI CLI 可安装在 Linux 和 macOS 上： root@kitploit: curl --proto '=https' --tlsv1.2 -LsSf...

CLEANSTART-2026-AX74205 Security fixes in vt-cli 1.1.1-r1

Package vt-cli version 1.1.1-r1 fixes 2 vulnerabilities: CVE-2026-39824, CVE-2026-56852...

CLEANSTART-2026-SX52692 Security fixes in vt-cli 1.0.1-r1

Package vt-cli version 1.0.1-r1 fixes 2 vulnerabilities: CVE-2026-39824, CVE-2026-56852...

CLEANSTART-2026-FA04759 Security fixes in vt-cli 1.3.1-r1

Package vt-cli version 1.3.1-r1 fixes 2 vulnerabilities: CVE-2026-39824, CVE-2026-56852...

React-Next-Scanner

React-Next-Scanner Escáner CLI seguro para CVE-2025-55182 y CVE-2025-66478 Esta herramienta proporciona un escáner de vulnerabilidades ligero y no explotable, centrado en stacks modernos de JavaScript, específicamente: Servicios de API afectados por CVE-2025-55182 Aplicaciones Next.js afectadas p...

CVE-2026-18654

A flaw was found in AWS CLI. This vulnerability, located in the Elastic MapReduce EMR Secure Shell SSH helper commands, involves a lack of entity authentication during key exchange. A remote attacker, positioned between the client and the EMR cluster, could exploit this to intercept SSH sessions...

cve-2025-65099

Proof of Concept for CVE-2025-65099 Further details are provided in the published article. yarnPath Technique A vulnerable environment for yarnPath can be initialized as follows: root@kitploit: docker run --rm -v "$PWD":/poc -it --workdir /poc ubuntu bash -c 'apt-get update -qq &&...

Jenkins-CVE-2024-23897

Jenkins CVE-2024-23897 PoC CVE-2024-23897の概念実証（PoC）です。これは、Jenkinsの組み込みコマンドラインインターフェース（CLI）における任意のファイル読み取りの脆弱性です。Overall/Read権限を持つ認証されていない攻撃者が、Jenkinsコントローラのファイルシステム上の任意のファイルを読み取ることを可能にします。 影響を受けるバージョン Jenkins バージョン = 2.441 Jenkins LTS バージョン = 2.426.2 脆弱なインスタンスのセットアップ docker compose...