snowpick

snowpick is a ServiceNow exposure scanner that finds misconfigured widget ACLs, REST API access controls, and unauthenticated data exposure. ServiceNow exposes data through two common public surfaces: Service Portal widgets and the Table REST API. When access controls on either surface are...

ChurchCRM - SQL Injection

A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a time-based blind SQL Injection vulnerability in the EditEventTypes functionality. The newCountName parameter is directly concatenated into an SQL query without proper...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

CVE-2026-80626

A flaw was found in the Linux kernel's powerpc/perf component. An issue in the fslembpmudel function can lead to a preempt count underflow. This occurs when the function attempts to decrement a preemption counter without a corresponding increment, specifically when event-hw.idx is negative. On...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

Detection-struts-cve-2017-5638-detector

🚨 Real-Time Anomaly Detection for Apache Struts CVE-2017-5638 Zero-Day Exploit Detection Based on Streaming Analytics & Probabilistic Data Structures 📌 Project Description This project is a real-time anomaly detection system designed to detect RCE Remote Code Execution exploits on Apache Struts...

cve-2025-24985

cve-2025-24985 Compute the number of cluster of a VHD file to detect overflow. Supportted boot sectors: MBR GPT Usage root@kitploit: python -m cve202524985 -f Setup Nix root@kitploit: With direnv: direnv allow Or Without direnv: nix develop Peotry WIP Docker WIP TODO: Auto build libvhdi with poet...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

kernel: netfilter: nf_tables: don't skip expired elements during walk

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't skip expired elements during walk There is an asymmetry between commit/abort and preparation phase if the following conditions are met: 1. set is a verdict map "1.2.3.4 : jump foo" 2. timeouts are enabl...

CVE-2026-71257

Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload. If the request body has already been consumed by another component, Commons FileUpload returns no items and Wicket falls back to reading the upload throu...

cve-2026-23111-poc

CVE-2026-23111 For more details, see notes.md Description CVE Description from NIST An inverted logical check in nftmapcatchallactivate causes nftchain-use reference count to not be restored when a DELSET operation is aborted. This allows triggering UAF, and can be abused to obtain local privileg...

EUVD-2026-68486

Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload. If the request body has already been consumed by another component, Commons FileUpload returns no items and Wicket falls back to reading the upload throu...

CVE-2025-54782

Basic Usage: 1.use root@kitploit: python posttest.py urls.txt 2. Custom Command: 2.command root@kitploit: python posttest.py urls.txt -c "whoami" python posttest.py urls.txt -c "ls -la /tmp" python posttest.py urls.txt -c "cat /etc/passwd" 3. Specify Thread Count: root@kitploit: python...

CVE-2011-3192

CVE-2011-3192 Run it using python 3.7 or 3.10 tested on it 1. git clone https://github.com/futurezayka/CVE-2011-3192.git 2. cd ./CVE-2011-3192 3. pip install -r requirements.txt 4. python3 exploit.py host tasks example python3 exploit.py https://example.com 50...

basalt

...

EUVD-2026-68458

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...

CVE-2026-19873

HTML::FormFu (Perl), versions through 2.08 , is vulnerable to resource exhaustion via an unbounded repeat count in Repeatable elements . When counter_name is set, the process method reads the count from the query string, validates only that it is a positive integer, and deep-clones the child subt...

CVE-2026-19873

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...

Sassy Social Share <= 3.3.3 - Cross-Site Scripting

The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateorssssharingcount' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for...