extrude

extrude Analyse binaries for missing security features, information disclosure and more. 🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE Windows binaries will be supported soon. Usage root@kitploit: Usage: extrude flags file Flags: -a, --all...

CVE-2026-89141 AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.7 via the 'mediaId' parameter due to missing validation on a user controlled key. This makes it possible for authenticated...

CVE-2026-89141

CVE-2026-89141 affects the AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin in all versions up to and including 3.7.7 . The vulnerability is an Insecure Direct Object Reference (IDOR) via the mediaId parameter, caused by missing validation on a user-controlled key. Authenticated a...

CVE-2022-2414

EN GenXMLExternalEntityExploit es un script PoC para demostrar la explotación de una vulnerabilidad de Inclusión de Entidades Externas XML XXE. El script aprovecha cargas útiles XML para leer archivos confidenciales de un servidor objetivo. Puede ser útil para pruebas de seguridad, pruebas de...

CVE-2022-24716

CVE-2022-24716 漏洞利用程序：Icinga Web 2 中的任意文件泄露漏洞（版本 2.8.6, 2.9.6, 2.10） 免责声明：此脚本用于审计系统安全性。请仅在您自己的系统或已获得书面授权进行利用测试的系统上使用此脚本。...

CVE-2019-7642

CVE-2019-7642 具有mydlink功能的D-Link路由器存在一些无需认证的Web界面。攻击者可远程获取用户的DNS查询日志和登录日志。 受影响的目标包括但不限于以下最新固件版本：DIR-817LW A1-1.04、DIR-816L B1-2.06、DIR-850L A1-1.09 和 DIR-868L A1-1.10。 PoC1: http://target/mydlink/getLogDnsQuery.asp PoC2: http://target/mydlink/getTriggedEventHistory.asp...

CVE-2026-18232

The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning its content through one of its public AJAX actions, allowing unauthenticated attackers to read draft and unapproved listings belonging to other users...

CVE-2026-16592

The WP Directory Kit WordPress plugin through 1.5.7 does not check authorization or listing visibility in one of its shortcodes, allowing users with a role as low as Contributor to disclose non-public listing content, including password-protected and hidden fields, belonging to other users...

EUVD-2026-78281

The WP Directory Kit WordPress plugin through 1.5.7 does not check authorization or listing visibility in one of its shortcodes, allowing users with a role as low as Contributor to disclose non-public listing content, including password-protected and hidden fields, belonging to other users...

CVE-2026-16592 WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via Shortcodes

The WP Directory Kit WordPress plugin through 1.5.7 does not check authorization or listing visibility in one of its shortcodes, allowing users with a role as low as Contributor to disclose non-public listing content, including password-protected and hidden fields, belonging to other users...

CVE-2026-18232 WP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindow

The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning its content through one of its public AJAX actions, allowing unauthenticated attackers to read draft and unapproved listings belonging to other users...

EUVD-2026-78282

The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning its content through one of its public AJAX actions, allowing unauthenticated attackers to read draft and unapproved listings belonging to other users...

ctl_ctloutput-leak

ctlctloutput-leak La función ctlctloutput en macOS High Sierra 10.13 ignora el valor de retorno de una llamada a sooptcopyin, lo que abre una ventana de carrera para filtrar datos no inicializados del heap del kernel al espacio de usuario. ctlctloutput-leak es un exploit de prueba de concepto que...

libget_user_exploit

这个库利用CVE-2013-6282漏洞读取内核内存。...

CVE-2021-42013

CVE-2021-42013 Poc CVE-2021-42013 - 未启用CGI的Apache 2.4.50 用法： root@kitploit: chmod -x CVE-2021-42013.sh ./CVE-2021-42013.sh http://ip:port/ /etc/passwd 参考来源 https://nvd.nist.gov/vuln/detail/CVE-2021-42013 https://vulners.com/cve/CVE-2021-42013...

keepass_dump

Keepass-Dumper 这是我对 CVE-2023-32784 的概念验证实现。 我的版本是 @vdohney 的 PoC 的 Python 移植，并做了一些更改和额外功能。 变更 一项变更是使用转储文件中可找到的已知字符串，以便更准确地跳转至主密钥字符所在位置。这减少了假阳性字符，并大大缩短了扫描文件所需的时间。如果转储文件中未找到这些字符串，扫描将从文件开头开始。此选项默认启用，但若希望执行完整扫描，可使用 --full-scan。对于此类情况，我还添加了 --skip 标志以加快扫描速度。原理是通过偏移指针跳过接下来的 1000...

CVE-2023-27703

CVE-2023-27703 CVE-2023-27703 Una vulnerabilidad de fuga de interfaz de depuración de elementos en la versión para Android de pikpak versión V1.29.2 corregido en pikpak 1.30.1 Descripción sugerida Se descubrió que la versión para Android de pikpak v1.29.2 contiene una fuga de información a través...

Prommetrix

Info: Prommetrix is a free software tool to obtain relevant information from the instances of 'Node Exporter' executed by 'Prometheus'. Prometheus is an open-source, metrics-based event monitoring and alerting solution for cloud applications. It is used by nearly 800 cloud-native organizations...

WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure

WordPress Modern Events Calendar Lite before 5.16.5 does not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format. id: CVE-2021-24146 info: name: WordPress Modern Events Calendar Lite 5.16.5 - Sensitive Information Disclosure...

Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure

Automad 2.0.0-alpha.1 to 2.0.0-beta.27 contains a broken access control vulnerability caused by publicly accessible /api/user-collection/create-first-user endpoint returning full serialized user data, letting unauthenticated attackers retrieve bcrypt password hashes of all administrator accounts,...