ATutor-Instructor-Backup-Arbitrary-File

ATutor-Instructor-Backup-Exploit Exploit Title: ATutor 2.2.4 'Backup' Remote Command Execution CVE-2019-12170 Google Dork: inurl:/ATutor/login.php Date: 5/13/2019 Exploit Author: liquidsky Joseph McPeters Vendor Homepage: https://atutor.github.io/ Software Link:...

kaiju

CERT Kaiju Marco de Análisis Binario para GHIDRA CERT Kaiju es una colección de herramientas de análisis binario para Ghidra. Se trata de una implementación en Ghidra/Java de algunas características de CERT Pharos Binary Analysis Framework, particularmente las herramientas de hashing de funciones...

cve-2026-32746

CVE-2026-32746 - telnetd LINEMODE SLC Buffer Overflow Pre-authentication buffer overflow in GNU InetUtils telnetd's LINEMODE SLC Set Local Characters handler. CVSS 3.1: 9.8 Critical | CWE: CWE-120, CWE-787 Overview The addslc function in telnetd/slc.c appends 3 bytes per SLC triplet to a fixed...

CVE-2018-20343

CVE-2018-20343 This is a PoC for CVE-2018-20343, a vulnerability in Ken Silverman's Build Engine. The generated .map file triggers a buffer overflow and overwrites the stack as shown below: Open Watcom under DosBox 0.74-2: the analyst controls the stack Under FreeDos 1.2: the analyst controls EIP...

EUVD-2026-88436

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library Free quote instead of rejecting it. The value is then concatenated directly into an unquoted ORDER BY clause, a position where quoting provides no protection at all. Reaching the vulnerable code path requires two...

CVE-2026-101110

The Book Library (Free) Joomla Extension by ordasoft.com (versions

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 PoC Slight modified for English translation and detection of https://github.com/chaosec2021/Spring-cloud-function-SpEL-RCE/blob/main/SpelRCEPOC.py . By default whoami is executed on the target and a file vulnerable.txt is created with the URLs that are vulnerable. Mo...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

powercat

powercat Netcat: The powershell version. Powershell Version 2 and Later Supported Installation powercat is a powershell function. First you need to load the function before you can execute it. You can put one of the below commands into your powershell profile so powercat is automatically loaded...

replica

REPLICA TAME THE DRAGON ✨Features ⚡ Disassemble missed instructions - Define code that Ghidra's auto analysis missed ⚡ Detect and fix missed functions - Define functions that Ghidra's auto analysis missed ⚡ Fix 'undefinedN' datatypes - Enhance Disassembly and Decompilation by fixing 'undefinedN'...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 checker - Golang Ps.: This version supports dpkg, rpm, pacman and MacOS Install root@kitploit: ▶ go install github.com/gustavorobertux/CVE-2024-2093@latest Basic Usage root@kitploit: ./CVE-2024-2093 Checking system for CVE-2024-3094 Vulnerability...

FstHook

FstHook A library for intercepting native functions by hooking KiFastSystemCall Note: KiFastSystemCall hooking only works on the following systems: Windows XP Service Pack 3 32-bit Windows Vista 32-bit Windows 7 32-bit...

VivisectION

VivisectION Emulation-Driven Reversing Toolset VivisectION is the cross-section of GUI Reversing, Emulation and Debugging, with an emphasis on using Emulation and other powerful Vivisect toys to aid in Reverse Engineering and Vulnerability Research. Among other things, VivisectION aka Ion is a...

CVE-2026-14871

CVE-2026-14871 - BOLA / IDOR in osTicket ajax.tickets.php Broken Object Level Authorization BOLA: Insecure Direct Object Reference IDOR include/ajax.tickets.php → viewField function Reported by @JF0x0r · March 27, 2026 Status: PATCHED - Fix released in osTicket v1.17.8 / v1.18.4 At a Glance...

CVE-2021-2471

CVE-2021-2471 - XXE in MySQL Connector/J Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and prior. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access ...

CVE-2025-55183_POC

CVE-2025-55183 - Next.js RSC Server Function Source Code Disclosure A source code disclosure vulnerability in Next.js React Server Components RSC. A malicious HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function when the argument is...

xnuspy

xnuspy Output from the kernel log after compiling and running example/open1hook.c xnuspy is a pongoOS module that installs a new system call, xnuspyctl, which allows you to hook kernel functions from userspace. It supports iOS 13.x, iOS 14.x, and iOS 15.x on checkra1n 0.12.2 and up. 4K devices ar...

CVE-2024-48208

CVE-2024-48208 The repo contains all the work surrounding the development of the PoC for how a simple OOBOut-of-bound read can result in jail escapes as well as broken access control. About the Vulnerability The orginial CVE Description is as follows: The Github PR on the official repo details ou...

drvtrace

tracedrv Tiny WinDbg extension to trace transitions from a debugged driver into other modules i.e. to trace function calls. Usage root@kitploit: !tracedrv 4000 trace for 4000 instructions...

peach

Peach Fuzz - Vulnerability Scanning Framework This tool aims to look through files in a given directory to detect any unsafe, vulnerable, or dangerous function calls. It is designed to be extensible and easy to understand; you can "plug-and-play" modules that specify criteria on which types of...