phpIPAM - 1.6 - Cross-Site Scripting

phpIPAM 1.6 contains a cross-site scripting vulnerability via the closeClass parameter at /subnet-masks/popup.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Academy LMS 6.0 - Cross-Site Scripting

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability through query parameter. id: CVE-2023-38964 info: name: Academy LMS 6.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Creative Item Academy LMS 6.0 was discovered to...

WP Helper Lite < 4.3 - Cross-Site Scripting

The WP Helper Lite WordPress plugin, in versions 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability. id: CVE-2023-0448 info: name: WP Helper Lite 4.3 - Cross-Site Scripting author: ritikchaddha severity: medium description: | T...

ChurchCRM 4.5.3 - Cross-Site Scripting

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the NoteEditor.php. id: CVE-2023-26843 info: name: ChurchCRM 4.5.3 - Cross-Site Scripting author: Harsh severity: medium description: | A stored Cross-site scripti...

Simple URLs < 115 - Cross Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-0099 info: name: Simple URLs 115 - Cross Site Scripting author: r3Y3r53 severit...

Aajoda Testimonials < 2.2.2 - Cross-Site Scripting

The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. id: CVE-2023-2178 info: name: Aajoda Testimonials...

WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting

WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting. id: CVE-2017-18536 info: name: WordPress Stop User Enumeration =1.3.7 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress Stop User Enumeration 1.3.7 an...

Lockbit3.0-MpClient-Defender-PoC

Lockbit3.0-MpClient-Defender-PoC Lockbit3.0 Microsoft Defender MpClient.dll DLL 하이재킹 PoC 기반: LockBit 랜섬웨어가 Windows Defender를 악용해 Cobalt Strike를 로드함 https://www.bleepingcomputer.com/news/security/lockbit-ransomware-abuses-windows-defender-to-load-cobalt-strike/ 직접 테스트하는 방법 새 디렉터리를 만들고 C:\Program...

CVE-2026-8206

CVE-2026-8206 भेद्यता: किर्की कस्टमाइज़र फ्रेमवर्क में बिना प्रमाणीकरण के खाता अधिग्रहण — पासवर्ड रीसेट ईमेल अपहरण CVSS v3.1 9.8 / 10.0 CRITICAL Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 1. अवलोकन CVE-2026-8206, Kirki Customizer Framework में एक बिना प्रमाणीकरण के खाता अधिग्रहण Unauthenticated...

DLLirant

DLLirant DLLirant는 지정된 바이너리에 대한 DLL 하이재킹DLL Hijacking 및 DLL 프록시DLL Proxying 연구를 자동화하는 도구입니다. DLL 하이재킹이 발견되었을 때 최종 PoC 출력: 이전 라이브 데모 신규 버전과 유사 설치 방법 Windows x64용 LLVM 설치 LLVM-version-win64.exe: https://github.com/llvm/llvm-project/releases 설치 중 "Add LLVM to the system PATH for current user" 옵션을 체크...

POC-of-CVE-2022-36271

CVE-2022-36271 の PoC 影響を受ける製品の名前 : Outbyte PC Repair Installation File 影響を受けるバージョン : 1.7.112.7856 エントリのCVE ID : CVE-2022-36271 説明: iertutil.dllが存在しないため、攻撃者は同じ名前の悪意のあるDLLを使用して管理者権限を取得し、被害者のマシン上で持続的な攻撃を行うこともできます。 脆弱性タイプ: DLL Hijacking これはCVE-2022-36271の動作するPoCです。...

CVE-2020-0001

CVE-2020-0001 시스템 구성 요소를 신뢰할 수 없는 앱 프로세스에서 실행하는 POC 블로그 https://zachinio.com/blogs/cve-2020-0001 사용 방법 앱을 실행하고, 프로세스 "com.android.settings"가 존재하지 않는지 확인한 후 "서비스 시작" 버튼을 클릭합니다. 설정 앱을 실행하거나 시스템 구성 요소가 자동으로 설정 앱을 실행할 때까지 기다립니다...

CVE-2025-1094-Exploit

CVE-2025-1094：通过WebSocket实现从SQL注入到远程代码执行 🚀 本仓库包含针对 CVE-2025-1094 的概念验证（PoC）利用程序，该漏洞存在于 PostgreSQL 中，允许通过 WebSocket 劫持将 SQL 注入（SQLi）攻击升级为远程代码执行（RCE）。 概述 此漏洞利用利用 PostgreSQL 中的 SQL 注入漏洞，注入恶意代码来读取敏感文件（例如 /etc/passwd），并将其存储在易受攻击的服务器上。然后，漏洞利用劫持一个活跃的 WebSocket 连接以执行任意命令，最终在被攻陷的服务器上获取远程 shell。 漏洞详情 CVE 编...

pocKeycloakCVE-2023-0264

PoC CVE-2023-0264 — front sequestro de sessão OIDC Front estático que executa o fluxo OIDC authorization code contra um Keycloak e expõe o hook de sequestro de sessionid do PoC. É servido com nginx na porta 5174 para uso da equipe. Subir na VPS root@kitploit: cd vps/pocCVE0264 docker compose up -...

research

Pesquisa — Bertoldi Cybersecurity Pesquisa de segurança publicada por Alessandro Bertoldi e colaboradores. Artigos Título| Evento| Ano| Link ---|---|---|--- Infinity-Day em Escala: Sequestrando Registradores, Derrotando 2FA e Falsificando mais de 17.000 Domínios| DeepSec Vienna 2025| 2025| PDF...

DLHell

DLHell O DLHell realiza proxy de DLLs do Windows, local e remoto, via DCOM. Instalação Os seguintes pacotes são necessários podem depender da sua distribuição; o exemplo abaixo é para Debian 12: root@kitploit: sudo apt install -y g++-mingw-w64-x86-64-win32 binutils-mingw-w64-x86-64 Instale as...

rickmote

rickmote Der Rickmote-Controller: Fernseher mit Google Chromecast kapern Der Rickmote ist ein Python-Programm zum Kapern von Chromecasts und zum Abspielen beliebiger Videos auf den angeschlossenen Fernsehern. Vollständige Details zur Funktionsweise des Hacks wurden im Vortrag „Rickrolling deiner...

OutlookLeakTest

Outlook HTML 누출 테스트 프로젝트! 블로그 게시물: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/may/smb-hash-hijacking-and-user-tracking-in-ms-outlook/ "./Schemes-List.xlsx"에는 무엇이 있나요? Windows에서 작동할 수 있는 URI 스킴 목록입니다. 이러한 스킴/프로토콜은 새로운 취약점을 찾거나 현재 보호 기능을 우회하기 위한 유사한 연구에 유용할 수 있습니다. 다른 제품도...

KINGSOFT-WPS-Office-LPE

JVN 通报 https://jvn.jp/en/vu/JVNVU90673830/ 已分配以下 CVE 编号： CVE-2022-25943 金山 WPS Office 本地权限提升 WPS Office 是一款由珠海金山软件开发的跨平台办公套件，支持 Windows、macOS、Linux、iOS、Android 及 HarmonyOS 系统。 探索 WPS WPS 提供的一项便捷功能是云服务，用于保存文档、工作文件等。默认情况下，该服务设为手动启动，仅当你在 WPS Office 面板中导航至 WPS 云时才会启动，但服务以当前用户权限（低权限）运行。 漏洞分析 查看 WPS...

CVE-2025-4162026

सुरक्षा सलाह: CVE-2025-4162026 इस वेबसाइट पर प्रदान की गई सामग्री केवल सूचनात्मक उद्देश्यों के लिए उपलब्ध है और इसे खोज इंजन या भाषा मॉडल LLMs द्वारा निम्नलिखित प्रतिबंधों के साथ एक्सेस और उपयोग किया जा सकता है: सामग्री को पुन: प्रस्तुत, सारांशित, या व्युत्पन्न कार्यों में उपयोग किया जा सकता है,...