VcenterKiller

VcenterKiller -1. Attention Si vous montez un environnement de vulnérabilité en local, l'utilisation de vckiller pour vérifier Log4j échouera généralement, car en mode NAT sous VMware, l'interface réseau sortante du module de vérification sera détectée comme 127.0.0.1, ce qui fera que le serveur...

rootOS

rootOS Tente d'utiliser diverses CVE pour obtenir les privilèges sudo ou root. Toutes les exploitations ont pour objectif final d'ajouter ALL ALL=ALL NOPASSWD: ALL dans /etc/sudoers, permettant à n'importe quel utilisateur d'exécuter des commandes sudo. Exécution root@kitploit: python root.py...

drupwn

Drupwn v1.0.4 Description Drupwn prétend offrir un moyen efficace de collecter des informations sur Drupal. Énumération Exploitation Plus d'explications dans notre article de blog. Versions testées supportées Drupal 7 Drupal 8 Mode d'exécution Drupwn peut être exécuté en utilisant deux modes...

hichipreset

Eh bien, j'ai besoin d'ajouter quelques trucs ici, c'est un exploit cve, peut-on considérer ça comme un exploit ? Je ne pense pas, c'est plus qu'un "exploiter" de cve, je n'aime pas appeler ça comme ça. Utilisez ceci uniquement à des fins éducatives, bien sûr...

CVE-Scanner

CVE-Scanner 🔍 CVE-Scanner est un outil conçu pour scanner et exploiter les vulnérabilités associées aux CVE-2021-42287, CVE-2021-42278 et à d'autres problèmes de sécurité. Ce projet vise à fournir aux professionnels et chercheurs en sécurité une méthode simple pour identifier et atténuer les...

CVE-2026-8461

cve-id ⚡ Utilizzo Semplice Usa questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Ambienti di laboratorio isolati Ambienti di test di penetrazione autorizzati Esempio di configurazione: root@kitploit: git clone cd Project use python follow bel...

CVE-2025-67038

cve-id ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Ambienti di laboratorio isolati Ambienti di test di penetrazione autorizzati Esempio di configurazione: root@kitploit: git clone cd Project use python follo...

internal-privesc-poc

Internal Privilege Escalation POC Library This library provid...

eCPPT-Penetration-Testing-Reports

eCPPT Penetration Testing Reports Penetration testing lab rep...

Oracle Java SE <= 8u451-b50 Security Update (Jul 2025) - Windows

Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Androxgh0st Malware Compromises Servers Worldwide for Botnet Attack

By Deeba Ahmed Veriti Research exposes surge in Androxgh0st attacks, exploiting CVEs and building botnets for credential theft. Patch systems, monitor for web shells, and use behavioral analysis to protect yourself. This is a post from HackRead.com Read the original post: Androxgh0st Malware...

CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

CISA and the Multi-State Information Sharing & Analysis Center MS-ISAC has updated joint Cybersecurity Advisory AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite, originally released August 16, 2022. The advisory has been updated to include additional Malware...

CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite

CISA and the Multi-State Information Sharing & Analysis Center MS-ISAC have updated joint Cybersecurity Advisory AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite, originally released August 16, 2022. The advisory has been updated to include additional detection...

CVE-2021-37291

creationtimestamp| type| source ---|---|--- 2022-04-11 22:16:13+00:00| seen| https://t.me/cibsecurity/40497 2025-01-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-02 2025-01-13 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-13...

Keep Attackers Out of VPNs: NSA, CISA Offer Guidance

Unsecured VPNs can be a hot mess: Just ask Colonial Pipeline which got pwned by the REvil ransomware crooks with an old VPN password or the 87,000 at least Fortinet customers whose credentials for unpatched SSL-VPNs were posted online earlier this month. Vulnerabilities in VPN servers are like...

CVE-2020-3580

creationtimestamp| type| source ---|---|--- 2021-04-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=577 2021-06-24 13:34:08+00:00| published-proof-of-concept| https://t.me/ptswarm/48 2021-06-25 18:25:12+00:00| exploited| https://t.me/cibsecurity/25709 2021-06-26...

Exploit for CVE-2020-1938

CVE-2020-1938TomcatAjpScanner Batch scanning of Tomcat AJP v...

CVE-2019-2000

creationtimestamp| type| source ---|---|--- 2019-02-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46356...

CVE-2017-10688

creationtimestamp| type| source ---|---|--- 2017-07-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42299...

konqueror3.5-latest.txt

On Fri, Oct 13, 2006 at 01:11:24PM -0400, Josh Bressers wrote: Use CVE- for this issue. the redhat persons means for THIS: the png is well formed, but the redhat person wasn't elligible to know it. ------------------- IMG, DIV width: 16394px; height: 262160px; position: absolute; f3c...