CVE-2017-7529

CVE-2017-7529 Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Installation $ git clone...

scanginx

Scanginx Escáner para Nginx - Vulnerabilidad de desbordamiento de entero remoto Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a la vulnerabilidad de desbordamiento de entero en el módulo de filtro de rango de nginx, lo que resulta en una fuga de información...

graphql-cop

GraphQL Cop - Utilidad de Auditoría de Seguridad para GraphQL Acerca de GraphQL Cop es una pequeña utilidad de Python para ejecutar pruebas de seguridad comunes contra APIs de GraphQL. GraphQL Cop es perfecto para ejecutar verificaciones CI/CD en GraphQL. Es ligero y cubre problemas de seguridad...

CVE-2018-13379

🛡️ CVE-2018-13379 - Fortinet SSL VPN Vulnerability 🔍 Overview CVE-2018-13379 is a critical path traversal vulnerability in Fortinet FortiOS SSL VPN. It allows attackers to download VPN web session files and extract sensitive information. Impact: Information disclosure usernames, session tokens...

CVE-2023-27587-PoC

CVE-2023-27587-PoC The simple PoC of CVE-2023-27587 What is ReadToMyShoe? ReadtoMyShoe RTMS is a web application rust, yew and axum that lets you upload articles via URL or via directly pasting and listen to them later. Impact If an error occurs when adding an article, the website shows the user ...

CVE-2019-19653

CVE-2019-19653 Chevereto information disclosure = 3.13.5 Core. Log files for the bulk importer are available for anyone to see and are easily enumerated root@kitploit: /app/importer/jobs/9/process.txt /app/importer/jobs/9/errors.txt...

djangohunter

Djangohunter Herramienta diseñada para ayudar a identificar aplicaciones Django mal configuradas que están exponiendo información sensible. https://www.reddit.com/r/django/comments/87qcf4/28165thousanddjangorunningserversareexposed/ https://twitter.com/6ix7ine/status/978598496658960384?lang=en Us...

-Exploit-CVE-2017-7529

-Exploit-CVE-2017-7529 CVE-2017-7529: Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Usage python3 cve-2017-7529.py...

CVE-2025-26318

TSplus Remote Access - CVE-2025-26318 Insecure Permissions Information Disclosure 📌 Description TSplus is, by default, vulnerable to the disclosure of information from users currently connected to the domain on TSplus. 🔍 Vulnerability Details CVE ID : CVE-2025-26318 Vendor : TSplus Affected...

WordPress-Exploit-CVE-2024-1071

WordPress CVE 2024-1071 SQL Exploit This exploit, which runs on WordPress versions 2.1.3 to 2.8.2, allows unauthenticated attackers to add additional SQL queries to existing queries that can be used to pull sensitive information from the database. Dork: body="/wp-content/plugins/ultimate-member" ...

google-dorks-bug-bounty

Google Dorks para Bug Bounty Una lista de Google Dorks para Bug Bounty, Seguridad de Aplicaciones Web y Pentesting Herramienta en vivo Búsqueda amplia de dominio con búsqueda negativa root@kitploit: site:example.com -www -shop -share -ir -mfa Extensión PHP con parámetros root@kitploit:...

system_prompts_leaks

Visto en The Washington Post: Descubre las reglas ocultas detrás de la IA. Luego úsalas para reescribir este artículo. 11 de mayo de 2026 Filtraciones de System Prompts El propósito de este repositorio es documentar las instrucciones de System Prompt de todos los chatbots de IA existentes: Claude...

DBconfigReader

Database Configuration Information Disclosure Vulnerability in the Weaver ecology OA System Interface /mobile/DBconfigReader.jsp http://x.x.x.x:8090/mobile/DBconfigReader.jsp Fortify Code Audit Detected - Weak Encryption Algorithm SecretKey key =...

CVE-2025-11749

CVE-2025-11749 AI Engine = 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation ⚠️ AI Engine = 3.1.3 — Unauthenticated Sensitive Information Exposure → Privilege Escalation GitHub: Nxploited Telegram: @KNxploited IMPORTANT NOTICE: Many unethical individuals attempt to...

CVE-2023-30458

CVE-2023-30458 Exploit Title: Medicine Tracker System 1.0 - Observable Discrepancy: Username enumeration via response timing Date: April, 22 2023 Exploit Author: William David Mathisen d34dun1c02n Vendor Homepage:...

CVE-2024-44313

Exploit 🛠️ Case Study: CVE-2024-44313 and EPSS in Vulnerability Prioritization This case study was developed for a talk on EPSS Exploit Prediction Scoring System, demonstrating how the score can influence vulnerability prioritization in practice. The CVE-2024-44313 vulnerability, found in...

cve-2022-44268

CVE-2022-44268 ImageMagick es un paquete de software multiplataforma gratuito y de código abierto para visualizar, convertir y editar imágenes rasterizadas y vectoriales. Puede leer y escribir más de 200 formatos de archivo de imagen. ImageMagick está bajo la licencia Apache 2.0. Está disponible...

CVE-2025-30208-ViteVulnScanner

CVE-2025-30208-ViteVulnScanner Yo, this is a dope multi-threaded Python script by keklick1337 to hunt down domains vulnerable to CVE-2025-30208 in Vite. Basically, it checks if you can snag random files via the @fs endpoint with ?raw?? or ?import&raw?? — think /etc/passwd leaks and other juicy...

CVE-2024-24919

CVE-2024-24919 Exploit Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID : CVE-2024-24919 Severity : Critical Table of Contents Vulnerability-detail...

CVE-2023-21742

CVE-2023-21742 PoC Attention: It's only a PoC to leak the attribute/property, not RCE EXP. root@kitploit: POST /vtibin/webpartpages.asmx HTTP/1.1 Host: splab13 SOAPAction: http://microsoft.com/sharepoint/webpartpages/ConvertWebPartFormat Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0...