COPY-FAIL

Copy Fail -- CVE-2026-31431 为红队和授权渗透测试操作而强化的C语言实现。 ⚠️ 法律声明： 本工具仅用于授权的安全研究、授权的渗透测试和防御性分析。仅可在您拥有或获得明确书面授权测试的系统上使用。未经授权访问计算机系统是违法的。 🚀 主要开发已迁移至GitLab。 此仓库在此处积极维护。如有问题或贡献，请使用GitLab。 目录 概述 原始研究 我们的改进 架构 构建 使用 模块 操作安全 检测与缓解 致谢 许可证 概述 本项目是CVE-2026-31431 （"Copy Fail"）本地权限提升漏洞的一个强化、生产就绪的C语言移植版本，最初由Theori...

fockcache

fockcache FockCache - Minimalized Test Cache Poisoning Detail For Cache Poisoning : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tries to make cache poisoning by trying X-Forwarded-Host and X-Forwarded-Scheme headers on web pages. After successful result, it...

nexphisher

Project not maintained anymore. UseZPhisher Installation : apt update apt install git -y git clone git://github.com/htr-tech/nexphisher.git cd nexphisher SETUP : bash setup SETUP TERMUX : bash tmuxsetup Run : bash nexphisher Single Command : root@kitploit: apt update ; apt install git -y ; git...

CVE-2022-41445

CVE-2022-41445 教师记录管理系统中的跨站脚本漏洞（使用CodeIgniter） 建议描述 在使用CodeIgniter 1.0的记录管理系统中存在一个跨站脚本（XSS）漏洞，攻击者可以通过在“添加科目”页面注入精心构造的有效载荷来执行任意Web脚本或HTML。 附加信息 概念验证：https://phpgurukul.com/teachers-record-management-system-using-codeigniter/ 漏洞类型 跨站脚本（XSS） 产品供应商 Phpgurukul 受影响产品代码库 使用CodeIgniter的教师记录管理系统 - 1.0 受影响...

CVE-2026-78685

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

fb-phisher-python

Facebook钓鱼 原作者 ：Arslan Mughal 提供者 ：arjunindia 原始仓库 ：https://github.com/arslanmughal5566/facebookphishing 关于脚本： 通过该脚本，你可以利用一些社会工程学技巧窃取Facebook登录凭据。 要求： 1：Python3.x 2：Flask 安装Flask：打开终端并输入以下命令： user@repo pip3 install flask 确保在安装flask之前已经安装了python 3，如果你使用的是Windows或macOS，请先下载并安装python3 使用方法：...

CVE-2026-78685 Le-yan｜Medical Practice Management System - Remote Code Execution

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

EUVD-2026-65270

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

CVE-2026-78685

CVE-2026-78685 affects the Le-yan Medical Practice Management System , a web-based application for managing medical practices. The vulnerability is a Remote Code Execution (RCE) flaw that allows unauthenticated remote attackers to execute arbitrary OS commands by serving a crafted HTML page that ...

tetragon-dirtyfrag

tetragon-dirtyfrag 在运行时使用 Cilium Tetragon TracingPolicy 阻止 DirtyFrag Linux 权限提升利用链（CVE-2026-43284 / CVE-2026-43500 ）。该策略在其套接字设置步骤将公开的概念验证程序 SIGKILL，使其无法到达会赋予 root 权限的页缓存写入操作。 这是什么。 一份实验报告。我第一次搭建 Tetragon，想看看它是否真的能阻止一个真实的、当前内核的权限提升漏洞。它做到了。本文档精确记录了我运行了什么、触发了什么，以及同样重要的是，它所证明的局限。这不能 替代打补丁。 文件：本...

CVE-2026-76846

Grav before 2.0.16 contains an incomplete default denylist in its Twig sandbox configuration. Attackers with page-edit permission can leverage config.get() or config.toArray() within Twig templates to exfiltrate sensitive system configuration secrets (e.g., system.cache.redis.password) when confi...

EUVD-2026-65220

Grav before 2.0.16 contains an incomplete default denylist in the Twig sandbox configuration that fails to block access to system configuration secrets. Attackers with page-edit permission can use config.get or config.toArray in Twig templates to retrieve sensitive values like...

EUVD-2026-65205

Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks. Attackers can place the shortcode in published pages to...

SecurityNotFound

404 Página No Encontrada Webshell 📼 ¡Clóname! Clona o descarga el proyecto: root@kitploit: git clone --depth=1 https://github.com/CosasDePuma/SecurityNotFound.git 📦 "Instalación" El archivo src/404.php debe ubicarse en el servidor objetivo y debe tener la capacidad de ejecutar archivos .php. Aquí...

CVE-2025-2294

Exploit CVE-2025-4403 Detalles Publicado : 27 de marzo de 2025 Actualizado : 28 de marzo de 2025 Severidad : Crítica Puntuación CVSS: 9.8 CWE : CWE-22: CWE-22 Limitación incorrecta de un nombre de ruta a un directorio restringido 'Path Traversal' Versiones afectadas : Todas las versiones desde n/...

CVE-2024-39031

CVE-2024-39031 : Silverpeas Core 在 Mes Agendas 中的存储型XSS漏洞 信息 描述： 在 Mes Agendas 中，用户可以创建新事件并将其添加到日历中。此外，用户可以邀请同一域中的其他人（包括管理员）参与这些事件。标准用户可以在创建事件时向“Titre”和“Description”字段注入XSS负载，然后将管理员或任何用户添加到该事件中。当被邀请的用户（受害者）查看自己的个人资料时，负载将在其浏览器中执行，即使他们并未点击该事件。 受影响版本： alert"XSS-Titre" 以及 alert"XSS-Description" 步骤 2...

django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)

Summary The CMS page cache key ignores the request headers that plugins declare via getvarycacheon. The header is added to the response Vary header, but the CMS's own cache key does not incorporate the header values, so the first visitor's variant is served to all subsequent visitors regardless o...

CVE-2026-78555

RansomLook embedded complete API keys in hidden HTML form fields on the authenticated /admin/apikeys administration page, while the UI displayed only a shortened representation. The full tokens were included in forms for enable/disable, private-access, and delete actions, making them recoverable ...

huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File...

burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...