CVE-2022-34265

CVE-2022-34265 Uso iniciar root@kitploit: docker-compose build docker-compose up -d detener root@kitploit: docker-compose down Verificación PoC de la vulnerabilidad de Django CVE-2022-34265 Una vulnerabilidad CVE-2022-34265 en Django fue divulgada el 5 de julio de 2022 hora de EE. UU.. Este...

CVE-2026-96756

orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape date default values in new Date calls. Attackers can inject arbitrary expressions through apostrophes in OpenAPI schema defaults to execute code with the privileges of the...

ssl-certificate-expiry-date-checker

sslcertificateexpirydatechecker Descubre qué certificado caducará y necesita renovarse. Obtén diversa información del resultado del escaneo fecha de caducidad, emisor, firma, número de serie... Si eres el administrador de certificados SSL en tu organización, recopila la lista de tus compañeros,...

urlhunter

root@kitploit: o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

WP Hotel Booking <= 2.3.2 - Cross-Site Scripting

The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

uaf-2023-28205

CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability This vulnerability can be exploited through maliciously crafted web content, allowing attackers to execute arbitrary code. Description The code triggers a use-after-free UAF vulnerability by delaying the addition of Map and Date objects,...

CVE-2025-2907

CVE-2025-2907 Exploit Details Published : 2025-04-04 Updated : 2025-03-28 Severity : Critical CVSS Score: 9.8 CWE : CWE-862: CWE-862 Missing Authorization Affected Versions : All versions from n/a through 12.3.1 Researcher :...

pepeScraper

pepeScraper - 4chan scraper A complete scraper for 4chan Now that's fast. pepeScraper is a scraper that uses context for your searches and returns exactly what you want. I'm learning how to make an item look cooler than it actually is Enter keywords, anything you can think of just be careful what...

CVE-2021-30809-OOM

CVE-2021-30809 — Apple WebKit Use-After-Free Vulnerability Crash PoC https://github.com/user-attachments/assets/e81f8a01-d48d-44cc-a38f-ce59b01222d5 Overview This repository contains a minimal crash-inducing harness for CVE-2021-30809, a use-after-free UAF vulnerability in WebKit. The PoC exercis...

tapodate

tapodate Uses https://github.com/hacefresko/CVE-2021-4045 exploit to set the date and other commands to an offline Tapo C200...

news-8.6.0-cve-2026-8726-backport

Security backport for georgringer/news 8.6.0 This repository contains a minimal backport for CVE-2026-8726 / TYPO3-EXT-SA-2026-010 , a high-severity SQL injection vulnerability in the TYPO3 extension georgringer/news. It is intended only for installations that must temporarily remain on news 8.6....

CVE-2022-34265

CVE-2022-34265 Vulnerability Summary This vulnerability is due to improper string processing when executing SQL for the arguments of the functions Trunc and Extract used for date data in Django. By specifying the request parameters as is in the kind argument of Trunc or the lookupname argument of...

active_c2_ioc_public

+OPTIONS: ^: +TITLE: Active C2 IOCs Note Be careful with the firstseen/lastseen dates in each entry. Don't judge based on just an IP address...

Azure-AD-Password-Checker

Azure AD Password Checker In an Azure AD environment, it's possible to determine whether a user has Multi-Factor Authentication MFA disabled without requiring any special privileges. This can be accomplished by analyzing the account's creation date and last password change date. If an account's...

CVE-1999-0524

CVE-1999-0524 Un script Bash para comprobar si los sistemas son vulnerables a la Divulgación de Fecha Remota mediante Solicitud de Marca de Tiempo ICMP CVE-1999-0524. Cómo usar 1. Asegúrate de que hping3 esté instalado y en tu PATH. 2. Crea un archivo que contenga los objetivos, en formato IPv4 y...

CVE-2026-85385 Concrete CMS below 9.5.4 is vulnerable to Stored XSS via User Timezone Field

Concrete CMS below 9.5.4 did not validate the user timezone value uTimezone on write and rendered it without output encoding on the Dashboard user management page, where Date::getTimezoneDisplayName returns any non-IANA value unchanged. A stored cross-site scripting payload saved in this field...

CVE-2023-3519

CVE-2023-3519 NetScaler Citrix ADC CVE-2023-3519 Scanner A simple scanner to find netscalers and look at the las modified date on the HTTP header response this project is a scanner made by me in C using the source-code of mrr3b00t in powershell...

CVE-2026-81925

Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...