95872 matches found
CVE-2022-22965
CVE-2022-22965 2022.04.02 16:44 Se optimizó el POC, ya no es una verificación de una sola vez. POC optimizado, ya no es una validación de una sola vez. Advertencia: este programa destruirá la integridad de la información de los registros, ¡haga una copia de seguridad de los datos del servidor!...
CVE-2017-9822
CVE-2017-9822 Deserialización de cookies de DotNetNuke - Ejecución remota de código RCE Las versiones de DotNetNuke DNN entre 5.0.0 y 9.3.0 están afectadas por una vulnerabilidad de deserialización que conduce a la ejecución remota de código RCE. DotNetNuke utiliza la cookie DNNPersonalization pa...
huntr-com-bug-bounties-collector
huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File...
CVE-2019-10092_Docker
CVE-2019-10092 Docker - Apache HTTP Server Using root@kitploit: $ docker-compose up Using from Docker Hub root@kitploit: $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master ·...
fb-phisher-python
Facebook Phishing Original Author : Arslan Mughal BY : arjunindia original repository : https://github.com/arslanmughal5566/facebookphishing About Script : With this script you can perform Facebook login credentials stealing with some social engineering skills. requirements : 1 : Python3.x 2 :...
dirtypipe
reF: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 Diagnose A vulnerability detection script has been developed to determine if your system is currently affected by this flaw. To verify the authenticity of the script, you can download the detached OpenPGP signature as well...
CVE-2019-19393
Rittal CMC PU III – Stored XSS PoC Application: Rittal CMC PU III Web management Devices: CMC PU III 7030.000 Software Revision: From V3.11.002 to V3.15.704 Hardware Revision: From V3.00 to V6.01 Attack type: Stored XSS Solution: Update to Software Revision V3.17.10 or later Summary: Web...
dirtyfrag
Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...
Byepervisor
Byepervisor Summary PS5 hypervisor exploit for = 2.xx firmware. Two vulnerabilities and exploit chains are contained in the repo, they are independent of each other and either can be used. One exploit is provided mainly just for preservation /oldjumptableexploit, only the primary exploit chain...
CVE-2021-46366
CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery CSRF in order to brute force and exfiltrate users'...
CVE-2019-10092
CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point t...
Exploit_CVE-2020-0688
CVE-2020-0688 Exploitation Script for CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability" Usage: root@kitploit: powershell -exec bypass -file .\CVE-2020-0688.ps1 -xaml -uri Example: This is an example of vulnerability validation by seting header in response...
publications
Publications from Trail of Bits Publications from Trail of Bits Academic Papers White Papers Guides and Handbooks Conference Presentations Automated bug finding and exploitation Blockchain Compilers Cryptography Engineering Education Infrastructure Machine Learning Mobile security Programming Sid...
publications
Publicaciones de Trail of Bits Publicaciones de Trail of Bits Artículos académicos Libros blancos Guías y manuales Presentaciones de conferencias Detección y explotación automatizada de bugs Blockchain Compiladores Criptografía Ingeniería Educación Infraestructura Aprendizaje automático Seguridad...
firecrawl-mcp-server
Firecrawl MCP Server A Model Context Protocol MCP server that brings Firecrawl to MCP-compatible AI agents — search, scrape, and interact with the live web for clean, agent-ready context. Big thanks to @vrknetha, @knacklabs for the initial implementation! Features Search the web and get full page...
CVE-2026-48908
CVE-2026-48908 — SP Page Builder Joomla Unauthenticated RCE Proof-of-concept exploit for CVE-2026-48908 , a critical CVSS 4.0 = 10.0 unauthenticated remote-code-execution vulnerability in the SP Page Builder component comsppagebuilder for Joomla, by JoomShaper...
CVE-2024-1065
CVE-2024-1065 — Page Cache Exploitation PoC Proof-of-concept exploit for CVE-2024-1065, a physical page use-after-free in the ARM Mali GPU kernel driver. The exploit demonstrates page cache exploitation : racing a freed MIGRATEMOVABLE page into the in-memory code image of a SUID binary, then...
CVE-2026-48908-joomla-sp-page-builder-detection
CVE-2026-48908 — Joomla SP Page Builder Validation and Detection Laboratory validation of CVE-2026-48908 in the Joomla SP Page Builder component, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in which the SP...
CVE-2025-6563
MikroTik Hotspot Login Page Reflected XSS Vulnerability Advisory Overview A reflected Cross-Site Scripting XSS vulnerability was discovered in the MikroTik RouterOS Hotspot login page. The vulnerability is triggered via the dst URL parameter, which improperly sanitizes input, allowing malicious...