Lucene search
+L

21634 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/24 11:42 p.m.•27 views

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests, allowing a malicious actor to perform unauthorized modifications to the server’s data.

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...

8.5CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/24 11:41 p.m.•40 views

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

7.7CVSS5.7AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/09/24 10:41 p.m.•12 views

CVE-2025-6934-PoC

🔓 CVE-2025-6934 Exploit Tool Unauthenticated Administrator Account Creation in WordPress Plugin Opal Estate Pro Created and developed fully by mejbankadir SMH tech and Mejban HackSheild Under NexoAmicus 📋 Description CVE-2025-6934 is a critical vulnerability in the WordPress Opal Estate Pro plugi...

9.8CVSS6AI score0.27875EPSS
SaveExploits12
Kitploit
Kitploit
•added 2026/09/24 10:07 p.m.•21 views

ParrotNG

ParrotNG ParrotNG is a tool capable of identifying Adobe Flex applications SWF vulnerable to CVE-2011-2461. For more details, please refer to the slides of our Troopers 2015 talk. Download the latest release from HERE. Features Written in Java, based on swfdump One JAR, two flavors: command line...

4.3CVSS6.2AI score0.07689EPSS
SaveExploits5References1
Kitploit
Kitploit
•added 2026/09/24 9:47 p.m.•19 views

Uchihash

Uchihash Uchihash is a small tool that can save malware analysts the time of dealing with embedded hash values used for various things such as: Dynamically importing APIs especially in shellcode Checking running process used by analysts Anti-Analysis Checking VM or Antivirus artifacts Anti-Analys...

6.2AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/24 9:43 p.m.•135 views

auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 9:18 p.m.•10 views

deREferencing

deREferencing deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins e.g: PEDA, GEF, pwndbg, etc. Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 9:06 p.m.•18 views

PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 9:02 p.m.•11 views

libtalloc

libtalloc libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" talloc. An introduction is about talloc can be found here: https://talloc.samba.org/talloc/doc/html/index.html libtalloc was inspired by other gdb python scripts for analyzing heaps like...

6AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 8:24 p.m.•9 views

Kam1n0-Community

What Is Kam1n0 v2?...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 8:18 p.m.•102 views

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

5.9AI score
SaveExploits0References2
NVD
NVD
•added 2026/09/24 8:17 p.m.•5 views

CVE-2026-97324

A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoOrderPaid of the file yudao-module-pay/src/main/java/cn/iocoder/yudao/module/pay/controller/admin/demo/PayDemoOrderController.java of the component Demo-order Payment Callback...

7.5CVSS
SaveExploits0References4
NVD
NVD
•added 2026/09/24 8:17 p.m.•6 views

CVE-2026-97325

A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vulnerability is the function validOAuthClientFromCache of the file yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/service/oauth2/OAuth2ClientServiceImpl.java of the compone...

5.3CVSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/24 7:55 p.m.•10 views

dotNIET

.NIET .NIET is an IDA Pro plugin. Its purpose is to import missing symbols usually few thousands which are resolved at runtime by .NET Native compiled binaries. These symbols lie in SharedLibrary.dll and are not exported by this one. .NIET has been tested on IDA Pro 7.5 using python 3.8 on the...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 7:55 p.m.•8 views

bip

Bip Bip is a project which aims to simplify the usage of python for interacting with IDA. Its main goals are to facilitate the usage of python in the interactive console of IDA and the writing of plugins. In a more general way the goal is to automate recurrent tasks done through the python API. B...

5.9AI score
SaveExploits0
CVE
CVE
•added 2026/09/24 7:30 p.m.•7 views

CVE-2026-97325

A security flaw exists in YunaiV/zhijiantianya ruoyi-vue-pro (up to version 2026.08) within the OAuth2 Client component. Specifically, the validOAuthClientFromCache function in yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/service/oauth2/OAuth2ClientServiceImpl.java is vulnerab...

5.3CVSS5AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 7:30 p.m.•4 views

EUVD-2026-86444

A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vulnerability is the function validOAuthClientFromCache of the file yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/service/oauth2/OAuth2ClientServiceImpl.java of the compone...

5.3CVSS5AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/24 7:24 p.m.•6 views

CVE-2026-93289 OS command injection in Eufy Omni C20, Omni X10 Pro

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...

9CVSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 7:24 p.m.•11 views

CVE-2026-93289

The Eufy Omni C20 and Omni X10 Pro are vulnerable to an OS command injection attack. This vulnerability allows an unauthenticated attacker to execute arbitrary system commands during the pairing process . While the specific root cause is not detailed in the provided documents, the impact is signi...

9CVSS6.1AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/24 7:17 p.m.•4 views

CVE-2026-97321

A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function GoViewDataServiceImpl.getDataBySQL of the file yudao-module-report/src/main/java/cn/iocoder/yudao/module/report/service/goview/GoViewDataServiceImpl.java of the component GoVie...

6.5CVSS
SaveExploits0References4
Rows per page
Query Builder