CVE-Scanner

CVE-Scanner 🔍 CVE-Scanner es una herramienta diseñada para escanear y explotar vulnerabilidades asociadas con CVE-2021-42287, CVE-2021-42278 y otros problemas de seguridad. Este proyecto tiene como objetivo proporcionar a profesionales e investigadores de seguridad un método sencillo para...

rootOS

rootOS Intenta usar varios CVEs para obtener acceso sudo o root. Todos los exploits tienen el objetivo final de agregar ALL ALL=ALL NOPASSWD: ALL a /etc/sudoers permitiendo que cualquier usuario ejecute comandos sudo. Ejecutar root@kitploit: python root.py Exploits Nombre| CVE| Fecha| Enlaces...

VcenterKiller

VcenterKiller -1. Atención Compañeros que construyen un entorno de vulnerabilidad localmente, al usar vckiller para verificar log4j, generalmente fallará, porque en el entorno de Vmware con modo NAT, la tarjeta de red de salida en el módulo de verificación se determina como 127.0.0.1, por lo que ...

drupwn

Drupwn v1.0.4 Descripción Drupwn afirma proporcionar una forma eficiente de recopilar información de Drupal. Enumeración Explotación Más explicaciones en nuestro artículo de blog Versiones probadas compatibles Drupal 7 Drupal 8 Modo de ejecución Drupwn se puede ejecutar usando dos modos separados...

hichipreset

bueno, necesito agregar algunas cosas aquí, es un exploit de CVE, ¿podemos considerar esto como un exploit? no lo creo, es más que un "explotador" de CVE, no me gusta llamarlo así. úsalo solo con fines educativos, por supuesto...

CVE-2026-8461

cve-id ⚡ Uso Simple Use este proyecto solo en entornos seguros y autorizados como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Configuración de ejemplo: root@kitploit: git clone cd Project use python follow...

CVE-2025-67038

cve-id ⚡ Uso simple Utilice este proyecto únicamente en entornos seguros y autorizados, tales como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizados Configuración de ejemplo: root@kitploit: git clone cd Project use pyth...

internal-privesc-poc

Internal Privilege Escalation POC Library This library provid...

eCPPT-Penetration-Testing-Reports

eCPPT Penetration Testing Reports Penetration testing lab rep...

Oracle Java SE <= 8u451-b50 Security Update (Jul 2025) - Windows

Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Androxgh0st Malware Compromises Servers Worldwide for Botnet Attack

By Deeba Ahmed Veriti Research exposes surge in Androxgh0st attacks, exploiting CVEs and building botnets for credential theft. Patch systems, monitor for web shells, and use behavioral analysis to protect yourself. This is a post from HackRead.com Read the original post: Androxgh0st Malware...

CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

CISA and the Multi-State Information Sharing & Analysis Center MS-ISAC has updated joint Cybersecurity Advisory AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite, originally released August 16, 2022. The advisory has been updated to include additional Malware...

CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

CISA and the Multi-State Information Sharing & Analysis Center MS-ISAC have updated joint Cybersecurity Advisory AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite, originally released August 16, 2022. The advisory has been updated to include additional detection...

CVE-2021-37291

creationtimestamp| type| source ---|---|--- 2022-04-11 22:16:13+00:00| seen| https://t.me/cibsecurity/40497 2025-01-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-02 2025-01-13 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-13...

Keep Attackers Out of VPNs: NSA, CISA Offer Guidance

Unsecured VPNs can be a hot mess: Just ask Colonial Pipeline which got pwned by the REvil ransomware crooks with an old VPN password or the 87,000 at least Fortinet customers whose credentials for unpatched SSL-VPNs were posted online earlier this month. Vulnerabilities in VPN servers are like...

CVE-2020-3580

creationtimestamp| type| source ---|---|--- 2021-04-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=577 2021-06-24 13:34:08+00:00| published-proof-of-concept| https://t.me/ptswarm/48 2021-06-25 18:25:12+00:00| exploited| https://t.me/cibsecurity/25709 2021-06-26...

Exploit for CVE-2020-1938

CVE-2020-1938TomcatAjpScanner Batch scanning of Tomcat AJP v...

CVE-2019-2000

creationtimestamp| type| source ---|---|--- 2019-02-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46356...

CVE-2017-10688

creationtimestamp| type| source ---|---|--- 2017-07-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42299...

konqueror3.5-latest.txt

On Fri, Oct 13, 2006 at 01:11:24PM -0400, Josh Bressers wrote: Use CVE- for this issue. the redhat persons means for THIS: the png is well formed, but the redhat person wasn't elligible to know it. ------------------- IMG, DIV width: 16394px; height: 262160px; position: absolute; f3c...