react

Dumping data from React internals This tool is a quick and dirty userscript for Tampermonkey that digs a couple of levels into any React page and searches for one or more phrases provided by the user. The tool makes it easy to find the right spot in the DOM where React attaches large chuncks of...

CVE-2019-11932

CVE-2019-11932 The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: root@kitploit: notroot@osboxes:/Desktop/gif$ make...

CVE-2018-7690

CVE-2018-7690 The SSC REST API contains Insecure Direct Object Reference IDOR vulnerabilities that allow authenticated users access to arbitrary details of the Local and LDAP users via POST method and to arbitrary details of other user's Fortify projects via GET method. Exploit-DB publication at...

CVE-2025-11371

CVE-2025-11371 In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet...

djangohunter

Djangohunter Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information. https://www.reddit.com/r/django/comments/87qcf4/28165thousanddjangorunningserversareexposed/ https://twitter.com/6ix7ine/status/978598496658960384?lang=en Usage...

CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read

CVE-2025-2539 - File Away WordPress Plugin Arbitrary File Read 📋 Executive Summary CVE ID: CVE-2025-2539 Plugin: File Away Versions = 3.9.9.0.1 Vulnerability Type: Authenticated Arbitrary File Read CVSS Score: 8.5 High Exploit Availability: Public PoC Available Impact: Unauthorized file disclosur...

-CVE-2019-9053

CVE-2019-9053 This repository contains the corrected code for CVE: 2019-9053 How to use this? Inside the terminal you can deploy this by root@kitploit: python3 exploit2019.py this will ask you to add the URL etc.. after it starts running u can follow those steps to run it and get the Username and...

CVE-2026-91714

A flaw was found in Google Chrome. A remote attacker, leveraging social engineering, could exploit an observable discrepancy in fonts by tricking a user into visiting a specially crafted HTML page. This vulnerability could lead to the leakage of sensitive information...

wphunter

WPHunter Tool ☣ WPHunter A Wordpress Vulnerability Scanner You can use this tool on your wordpress website to check the security of your website by finding the vulnerability in your website. Over 75 million websites run on WordPress. which is now powers 26% of the Web. Remarkably enough thousands...

Identificador-CVE-2018-11759

Other language git - pt-BR Check if your instances are expose the CVE 2018-11759 The archive main are a script in bash for exploiting. The urls shall use the protocol and complete addres, example: https://test.site.com.br For more urls in one consult, can be used the here-document, example:...

Public_Poc

0xmrsecurity.github.io Personal Blog web Page Thoughts I learn and write the public proof of concepts for the better understanding of hacking and programming skills...

CVE-2013-1081

This script takes advantage of a local file inclusion lfi tht exists in the Novell zenworks mobile device management. Metasploit Modules - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options Module options auxiliary/scanner/http/novellmdmcreds: Name Current...

CVE-2024-39722

Ollama CVE-2024-39722 Exploit Tool This tool is designed to exploit CVE-2024-39722, a model existence disclosure vulnerability in Ollama versions up to and including 0.1.45. It allows users to check if an Ollama server is vulnerable and attempt to discover existing models on the server...

CVE-2020-15931

CVE-2020-15931 Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability Vulnerbility Overview Netwrix Account Lockout Examiner ALE before 5.1 allows an unauthenticated, remote adversary to trigger a connection to an attacker-controlled system and capture the...

CVE-2015-6668

CVE-2015-6668 - Job Manager IDOR A small Rust CLI that reproduces the information-disclosure pattern associated with CVE-2015-6668 Job Manager //filename.ext. Attack pattern: brute-force / enumerate common year/month folders and filename variants to locate accessible files. Indicators: HTTP 200...

cve-2025-4664

CVE-2025-4664 This repository contains a PoC for exploiting CVE-2025-4664, a vulnerability where Chromium-based browsers leak sensitive URL parameters through Link header preload requests. Resources For a detailed explanation of how this exploit works, read the blog post:...

CVE-2023-23752

CVE-2023-23752 - Recurrence of Joomla Unauthorized Access Vulnerability Script Usage Install python libraries pip install -r requirements.txt Vulnerability Verification python3 CVE-2022-26134check.py -u url -c whoami Batch Scan python3 CVE-2023-23752.py -f urlpart.txt Affected Versions 4.0.0 =...

CVE-2023-47459

CVE-2023-47459 Description A vulnerability was discovered in Knovos Discovery v.22.67.0 that allows a remote attacker to access confidential information using the components: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName,...

CVE-2020-16270

CVE-2020-16270 Suggested description : OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s...

graphql-cop

GraphQL Cop - Utilidad de Auditoría de Seguridad para GraphQL Acerca de GraphQL Cop es una pequeña utilidad de Python para ejecutar pruebas de seguridad comunes contra APIs de GraphQL. GraphQL Cop es perfecto para ejecutar verificaciones CI/CD en GraphQL. Es ligero y cubre problemas de seguridad...