30948 matches found
TEx
Welcome to Telegram Explorer About The Project TEx is a Telegram Explorer tool created to help Researchers, Investigators and Law Enforcement Agents to Collect and Process the Huge Amount of Data Generated from Criminal, Fraud, Security and Others Telegram Groups. ⚠️ BETA VERSION ⚠️ Please note...
BinProxy
Overview BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem. Installation Prerequisites Ruby 2.3 or later A C compiler, Ruby headers, etc., are needed to compile several dependencies. On Ubuntu, sudo apt install build-essential ruby-dev...
CVE-2018-10933
Reproducir y mejorar el escenario de CVE-2018-10933 Explicación root@kitploit: Esto tiene fines educativos sobre CVE-2018-10933, que es la omisión de autenticación de libSSH. Las versiones de libssh 0.6 y superiores tienen una vulnerabilidad de omisión de autenticación en el código del servidor. ...
Spring-Kafka-POC-CVE-2023-34040
Spring Kafka Deserialización POC Requisitos Java 11 Maven Docker o Kafka Uso Primero inicia la instancia Kafka dockerizada. Esto arrancará Kafka y lo dejará disponible en el puerto 29092. root@kitploit: docker-compose up Inicia la aplicación consumidora. root@kitploit: cd spring-kafka-consumer mv...
CVE-2018-10933
Bypass de Autenticación en Código del Servidor CVE-2018-10933 Versiones 0.7.6 a 0.8.4 Descripción Las versiones de libssh 0.6 y superiores tienen una vulnerabilidad de bypass de autenticación en el código del servidor. Al presentar al servidor un mensaje SSH2MSGUSERAUTHSUCCESS en lugar del mensaj...
pmkidcracker
PMKID WPA2 破解器 本程序是一个用 Python 编写的工具，用于恢复 WPA2 WiFi 网络的预共享密钥，无需任何去认证，也无需网络上有任何客户端。它针对的是某些接入点在 EAPOL 消息 1 中通告 PMKID 值的弱点。 程序用法 root@kitploit: python pmkidcracker.py -s -ap -c -p -w -t 注意： apmac、clientmac、pmkid 必须是十六进制字符串，例如 b8621f50edd9 PMKID 的计算方式 获取 PMKID 的两个主要公式如下： 1. 成对主密钥（PMK）计算： 口令 + 盐值ssid =...
CVE-2023-40933-PoC
CVE-2023-40933 The sqlmap payload to exploit CVE-2023-40933 Payload Required Information: Valid Username and Password Domain and path of hosted instance root@kitploit: sqlmap -D nagiosxi -T xiusers -u...
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
A flaw was found in OpenSSL's Cryptographic Message Services CMS AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity...
cve-2023-34040
CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution root@kitploit: POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0.0...
heartbleed
Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...
CVE-2021-30146
CVE-2021-30146 Seafile 7.0.5 Persistent XSS Suggested description: Application Server Version: 7.0.5 Seafile is vulnerable to Persistent XSS via share library functionality. Additional Information: Seafile is an open source, self-hosted file sync and share solution with high performance and...
CVE-2026-84600
CVE-2026-84600 Atajos Impacto: Un atajo malicioso podría enviar mensajes sin la confirmación del usuario Descripción: Se solucionó un problema de autorización con una gestión de estado mejorada. CVE-2026-84600: Owen Pawling @owenpawling Versiones de seguridad support.apple.com/149038...
CVE-2018-10933
CVE-2018-10933 - SSH Authentication Bypass PoC Description CVE-2018-10933 is an authentication bypass vulnerability in the server-side implementation of libssh. The flaw allows an attacker to send a SSH2MSGUSERAUTHSUCCESS message without any prior authentication, gaining unauthorized access...
VanCleef
VanCleef Manipulación de parámetros web en Rancher 2.1.4 CVE-2019-11881 root@kitploit: ./vancleef.rb rancherip rancherport messagetodisplay double-quoted Example: ./vancleef.rb 192.168.0.1 8080 "Rancher is outdated. Please update following the instructions at http://192.168.0.25/rancher-updating"...
EUVD-2026-85729
A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...
CVE-2026-96680
A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...
CVE-2026-96680 ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization
A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...
CVE-2026-96680
The ByteDance Coze Scraper Extension (up to version 2.0.2 ) contains a vulnerability in the External Message Handler component. Specifically, the chrome.runtime.onMessageExternal.addListener function within the static/background/index.js file fails to perform proper authorization when handling sp...
CVE-2021-40352
CVE-2021-40352 Opnemr Version 6.0.0 Has a security vulnerability where an attacker who has Physician Access can read messages with were sent to others members including admin messages the vulnerability exits in the print message feature = "pnotesprint.php?noteid=16" changing the "noteid=" to any...