SearchIPOwner

SearchIPOwner - h3x0v3rl0rd - Example Usage: Single IP Query: root@kitploit: python3 SearchIPOwner.py 8.8.8.8 Multiple IPs from a file: root@kitploit: python3 SearchIPOwner.py iplist.txt Save to CSV: root@kitploit: python3 SearchIPOwner.py iplist.txt -csv...

CVE-2024-7514

CVE-2024-7514 WordPress Comments Import & Export = 2.3.7 - 已验证（作者以上权限）通过目录遍历实现任意文件读取 描述 WordPress 的 Comments Import & Export 插件在评论导入过程中，因文件路径验证不足，导致存在任意文件读取漏洞，影响版本至 2.3.7（含）。这使得经过身份验证的攻击者（拥有作者及以上权限）能够读取任意文件内容 Info root@kitploit: Type: plugin CVSS Score: 6.5 CVE: CVE-2024-7514 Link:...

CVE-2024-11396

CVE-2024-11396 Event monster = 1.4.3 - Exposición de información mediante la exportación de la lista de visitantes Descripción El plugin Event Monster – Gestión de eventos, reserva de entradas, próximos eventos para WordPress es vulnerable a la exposición de información en todas las versiones has...

CVE-2024-54262

CVE-2024-54262 Exploit CVE-2024-54262: Arbitrary File Upload in Import Export for WooCommerce Overview This script exploits a vulnerability in the "Import Export for WooCommerce" WordPress plugin. The vulnerability allows unauthorized users to upload arbitrary files, leading to potential remote...

CVE-2022-0219

CVE-2022-0219 Jadx is vulnerable to Improper Restriction of XML External Entities CWE-611 when exporting a malicious APK file via the -e option containing a crafted AndroidManifest.xml / strings.xml to gradle. It can lead to local file disclosure when using it from the CLI. When used as a library...

CVE-2026-19501-poc

CVE-2026-19501 Poc Description: Sureforms is vulnerabale to a unauthenticated CSV injection vulnerability when attacker can inject a CSV formula when submit a form. This formula will be excuted when admin export CSV file and open it. Step to reproduce: Step 1 : Submit a form and then intercept th...

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC PoC de ejecución remota de código en la herramienta Import/Export Data de pgAdmin 4. Aprovecha la divergencia semántica del escape de barra invertida entre el verificador de paréntesis isqueryparensbalanced y psql para inyectar \copy ... TO...

Password-Strength-Evaluator

Password Strength Evaluator Password Strength Evaluator es una herramienta para evaluar la fortaleza de las contraseñas y proporcionar recomendaciones para mejorar su seguridad. Esta herramienta también comprueba si tu contraseña ha sido expuesta en alguna filtración de datos mediante la API de...

HashDump-BypassEDR

1 Resumen del proyecto Mediante el uso extendido del programa de confianza del sistema Reg.exe, se sortean hábilmente los puntos de interceptación del antivirus, logrando el objetivo de evadir el EDR para realizar un DumpHash. Según las pruebas reales, este método es eficaz contra los sistemas de...

CVE-2021-46365

CVE-2021-46365：Magnolia CMS 中的不安全 XML 解析 Magnolia v6.2.3 及以下版本的导出功能存在一个问题，允许攻击者通过精心构造的 XLF 文件执行 XML 外部实体攻击。 供应商披露： 该漏洞的供应商披露及修复方案可参阅此处。 前提条件： 此漏洞需要： 有效的用户凭据 概念验证： 更多详情及利用过程可参阅此 PDF。...

CVE-2026-4813

A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode FEATURESECUREPROCESSING, allowing Java extension functions to be...

EUVD-2026-69014

A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode FEATURESECUREPROCESSING, allowing Java extension functions to be...

Masscan-Report

Masscan 报告生成器 一个 Python 工具，可基于 masscan 的 JSON 输出生成交互式 React 驱动的 HTML 可视化报告，包含 D3.js 力导向网络图。 截图 功能特性 交互式网络图 力导向 D3.js 可视化 ，展示网络拓扑结构 层级结构 ：互联网 → A 类 /8 → B 类 /16 → C 类 /24 → 主机 → 端口 拖拽与缩放 ，自由探索网络 按节点类型颜色编码 （主机、端口、网段） 搜索与过滤 实时搜索 - 输入即过滤主机和端口 端口搜索前缀 - 使用 : 仅搜索端口（例如 :443） 通配符支持 - 使用 进行模式匹配（例如...

CVE-2023-6289

CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - 授权缺失导致未认证设置导出 描述 Swift Performance Lite WordPress 插件在所有版本（包括 2.3.6.14）中，由于通过 admininit 函数挂载的功能缺少权限检查，导致存在未授权访问数据的风险。这使得未认证攻击者能够导出插件设置，其中可能包含 Cloudflare API 令牌。 root@kitploit: Severity: medium CVE ID: CVE-2023-6289 CVSS Score: 5.3 CVSS Metrics:...

CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC

CVE-2025-60852: Inyección CSV en Instant Developer Foundation 25.0.9600 – Prueba de Concepto PoC 📌 Descripción general Este repositorio contiene una Prueba de Concepto PoC para una vulnerabilidad de Inyección CSV Inyección de Fórmulas CVE-2025-60852 que afecta a aplicaciones creadas con el...

PT-2026-84142

Name of the Vulnerable Software and Affected Versions Lutece Core versions prior to 7.1.8 Description An issue in the XSL export management module allows authenticated administrators to execute arbitrary code on the server. The XML/XSLT processing configuration fails to enable secure processing...

activemq-cve-lab

ActiveMQ Message Broker Overview ActiveMQ message broker application with message import/export functionality. Version: 5.11.1 Features Message queue management Queue statistics and monitoring Message file import/export Real-time broker status Quick Start Docker root@kitploit: docker-compose up -...

CVE-2026-77353

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar properties and events into their exported .ics feed by embedding raw CRLF sequences in subscription names or notes. Because the input...

EUVD-2026-66216

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route reportprojectviewexport. The authorization guards are attached to the sibling invoke method rather than at the class level, so the export route inherits no authorization checks. Any...

CVE-2026-77353 Wallos: iCalendar Injection via CRLF in Subscription Name/Notes Export

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar properties and events into their exported .ics feed by embedding raw CRLF sequences in subscription names or notes. Because the input...