Pymap-Scanner

Pymap-Scanner Funzionalità root@kitploit: 1-Basic Gui 2-Speed Scan 3-Custom Services 4-User Control 5-Error Control 6-Useful parameters And More. Moduli di installazione root@kitploit: $ Pyqt4 $ Nmap Requisiti Terze parti root@kitploit: +xsltproc...

GHSA-V358-WF77-39XV klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits

Summary In processPercentageRoyaltiesTransfer the royalty pool is collected from the sender by SubFromBalance that is ordered after the split loop and after if royaltiesToPay royaltiesToPay, so a split entry of exactly 100% PercentTransferPercentage = 10000 is a valid config: it drives...

klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits

Summary In processPercentageRoyaltiesTransfer the royalty pool is collected from the sender by SubFromBalance that is ordered after the split loop and after if royaltiesToPay royaltiesToPay, so a split entry of exactly 100% PercentTransferPercentage = 10000 is a valid config: it drives...

CVE-2026-55763

CVE-2026-55763 affects Klever-Go (the Go implementation of the Klever blockchain), prior to version 1.7.19 . In processPercentageRoyaltiesTransfer (core/kapp/accounts/accounts.go), the sender's royalty debit via SubFromBalance is ordered after the split loop and after the royaltiesToPay

CVE-2026-81517

CVE-2026-81517 affects MongoDB Connector for BI (mongosqld) . An unauthenticated network attacker can exhaust storage on the configured log path simply by generating routine connection log activity. When a subsequent log write or rotation fails, the error is not handled , causing the shared mongo...

CVE-2026-81490

MongoDB Connector for BI (mongosqld) contains an improper error handling flaw in its schema-sampling routine. A database user who can create a view in a sampled namespace can define a view whose evaluation reliably fails. The sampling logic misclassifies the resulting server message as transient ...

List-CVE-2025-2026

CVE-2025-69412 - O KDE messagelib anterior à versão 25.11.90 ignora erros SSL para threatMatches:find na API Google Safe Browsing Lookup também conhecida como API de phishing, o que pode permitir ... 2. CVE-2025-69413 - No Gitea anterior à versão 1.25.2, /api/v1/user tem respostas diferentes...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0009 2026-06-01 An mehreren Stellen besteht die Möglichkeit eines Tapjackings aufgrund eines Logikfehlers im Code. Dies könnte zu einer lokalen Rechteausweitung führen, ohne dass zusätzliche Ausführungsrechte erforderlich sind. Eine Benutzerinteraktion ist für die...

boa-cve-2009-4496-analysis

CVE-2009-4496 — Analisi Difensiva della Vulnerabilità Panoramica Questo repository documenta un'analisi difensiva di CVE-2009-4496 , una vulnerabilità storica associata al web server Boa. L'obiettivo di questo progetto è esaminare la vulnerabilità da una prospettiva di sicurezza difensiva...

CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – Seme debole nella correzione degli errori della distribuzione quantistica di chiavi Codice del programma Python root@kitploit: qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived...

CVE-2026-65761

CVE-2026-65761 - Proof-of-concept di SQL injection su EasyStore Pro tramite filtersortby Questo repository fornisce una prova di concetto educativa per CVE-2026-65761, una vulnerabilità di SQL injection non autenticata che interessa le versioni da 1.0.0 a 2.0.2 incluse dell'estensione Joomla...

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Beschreibung Das Plugin Error Log Viewer By WP Guru für WordPress ist in allen Versionen bis einschließlich 1.0.1.3 anfällig für beliebiges Dateilesen Arbitrary File Read über die AJAX-Aktion wpajaxnoprivelvwplogdownload. Dadurch ist es nicht authentifizierten Angreifern...

CVE-2026-54754

Klever-Go (the Go node for the Klever blockchain) has a time-of-check/time-of-use flaw in marketplace settlement (core/kapp/market/market.go). The referral percentage is snapshotted at listing, but the royalty percentage is read live at purchase. An asset owner can raise the royalty via UpdateRoy...

EUVD-2026-67824

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purchase time. An asset owner can create a...

Chromium: CVE-2026-79148 Off-by-one error in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2024-10924-Exploit

CVE-2024-10924-Exploit Really Simple Security Free, Pro e Pro Multisite 9.0.0 - 9.1.1.1 - Bypass di Autenticazione 📖 Descrizione Questo script sfrutta una vulnerabilità nel plugin Really Simple Security versioni 9.0.0 - 9.1.1.1 per WordPress. Il difetto consente il bypass dell'autenticazione a...

CVE-2019-1315

Elevazione dei privilegi tramite spostamento arbitrario di file in Windows Error Reporting Manager Dettagli: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html Avrai bisogno della libreria NtApiDotNet per eseguirlo, oltre a un file Report.wer valido, entrambi da...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - SQLi non autenticato a RCE PoC Solo a scopo educativo e di ricerca sulla sicurezza - Vedi il disclaimer legale sotto Proof of concept di sfruttamento per CVE-2025-57819, una vulnerabilità critica di SQL injection non autenticata in FreePBX che consente l'esecuzione remota...