CVE-2026-20242

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

CVE-2026-20242

CVE-2026-20242 affects the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software . The root cause is insecure deserialization of a user-supplied Java byte stream. An unauthenticated, remote attacker who controls a host in the configured external database acces...

EUVD-2026-81109

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

XXEinjector

XXEinjector XXEinjector automatiza la recuperación de archivos utilizando métodos directos y fuera de banda. El listado de directorios solo funciona en aplicaciones Java. Para otras aplicaciones, se debe utilizar el método de fuerza bruta. Opciones: root@kitploit: --host Mandatory - our IP addres...

tinyfilemanager-wh1z-edition

Tiny File Manager WH1Z-Edition Te presentamos Tiny File Manager WH1Z-Edition, la solución compacta y eficiente para gestionar tus archivos y carpetas con funciones mejoradas de privacidad y seguridad. Se acabaron los días de depender de recursos externos: he reducido el código a su núcleo,...

CVE-2025-58360

CVE-2025-58360 The vulnerability in question is CVE-2025-58360 CVSS score: 8.2, an unauthenticated XML External Entity XXE flaw that affects all versions prior to and including 2.25.5, and from versions 2.26.0 through 2.26.1. It has been patched in versions 2.25.6, 2.26.2, 2.27.0, 2.28.0, and...

external_tcpdump_CVE-2018-14469

tcpdump To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the file CONTRIBUTING in the tcpdump source tree root. TCPDUMP 4.x.y Now maintained by "The Tcpdump...

morty

Morty Proxy de saneamiento de contenido web como servicio Morty reescribe páginas web para excluir etiquetas y atributos HTML maliciosos. También reemplaza referencias a recursos externos para evitar filtraciones de información a terceros. El objetivo principal de morty es proporcionar un proxy d...

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

keycloak-services: keycloak-services: Broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2025-58360

CVE-2025-58360 From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity XXE vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap Exploit1: root@kitploit: python3 CVE-2025-58360 -u http://example.com...

bitchat-android

!WARNING This software has not received external security review and may contain vulnerabilities and may not necessarily meet its stated security goals. Do not use it for sensitive use cases, and do not rely on its security until it has been reviewed. Work in progress. bitchat for Android A secur...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Proof-Of-Concept A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests...

armory

root@kitploit: dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM...

CVE-2026-51564

CVE-2026-51564 Security Advisory for CVE-2026-51564 Description An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request. Affected Components: App/Route.php, publichtml/index.php Mitigation At the time of...

plecost

Plecost Escáner Profesional de Seguridad para WordPress Primero asíncrono, amigable con bibliotecas, sin API externa requerida. Tabla de Contenidos ¿Qué es Plecost? Plecost vs WPScan Inicio Rápido Instalación Base de Datos de CVE Motor de Detección de CVE Escaneo Módulos de Detección...

CVE-2019-2888

CVE-2019-2888 Vulnerabilidad XXE en WebLogic EJBTaglibDescriptor https://www.oracle.com/security-alerts/cpuoct2019.html fernflower.jar weblogic.jar/weblogic/servlet/ejb2jsp/dd/EJBTaglibDescriptor.class root@kitploit: ╭─root@jas502n /var ╰─ find ./ |grep EJBTaglibDescriptor  ✔  8388  18:32:43...

EasyEASM

EasyEASM Herramienta de gestión de superficie de ataque de costo cero presentada en Black Hat Arsenal 2023 y Recon Village @ DEF CON 2023. Descripción Easy EASM es eso... la herramienta más fácil de configurar para dar a tu organización visibilidad sobre sus activos externos. La industria está...