Chrome-and-Edge-Version-Dumper

Chrome-and-Edge-Version-Dumper Script de Powershell que vuelca la versión de Chrome y Edge a un archivo de texto para determinar si necesitas actualizar debido a CVE-2022-1096 Asegúrate de editar las rutas antes de usar Y crea la carpeta donde se almacenará la salida...

CVE-2019-0708-Check-Device-Patch-Status

CVE-2019-0708-Vulnerability-Scanner Powershell script to run and determine if a specific device has been patched for CVE-2019-0708. This checks to see if the termdd.sys file has been updated appropriate and is at a version level at or greater than the versions released in the 5/14/19 patches. All...

meltdown-aws-scanner

meltdown-aws-scanner Script de shell sencillo para verificar el estado del parche de Meltdown CVE-2017-5754 en instancias EC2 Requisitos aws cli con una configuración funcional Uso del script Escanear todas las instancias EC2 en la cuenta y región predeterminadas root@kitploit: $ ./checkmeltdown....

cosmicsting-validator

一个 Cosmicsting POC，附带一个 bash 脚本，用于检查我们所有托管的站点以确认补丁已应用。 此仓库用于帮助商店所有者/托管方确认补丁已应用到商店。在 check.bash 中，将域名添加到 SITES 列表。 https://www.sdj.pw/posts/magento2-cosmic-sting-check/ 在线验证器 https://cosmicsting.samdjames.uk/ 安装 root@kitploit: Create a python virtual environment for the project python -m venv venv...

Detecting-the-patch-of-CVE-2018-1010

Detección-del-parche-de-CVE-2018-1010 Este código C++ desarrollado en Visual Studio 2017. Este programa funciona con los comandos de cmd. En este programa primero comprobamos la versión de su sistema operativo y, según la notificación de Microsoft, comprueba si ha instalado el parche para la...

code-shield

protocol-remediator Es un MVP que normaliza los hallazgos de vulnerabilidades en código C/C++ de protocolos y plataformas como evidencia reproducible, y valida parches candidatos en una copia aislada. code-shield era un nombre de trabajo con riesgo de colisión, por lo que se usó un nombre interno...

CVE-2026-41089-Detector

Herramienta de detección CVE-2026-41089 Este es un script de detección CVE-2026-41089 para inspecciones de defensa. Esta vulnerabilidad es una vulnerabilidad de ejecución remota de código en Windows Netlogon revelada por Microsoft en la actualización de seguridad de mayo de 2026. El script no env...

CVE-2021-21985

CVE202121985 Descripción Este script comprueba la vulnerabilidad CVE-2021-21985 y el parche en vCenter Server. Requisitos Python3 Biblioteca estándar de Python3 Instalación root@kitploit: git clone https://github.com/mauricelambert/CVE202121985.git ./ Ejemplo Para comprobar las IP 10.0.0.2,...

Exploit for CVE-2026-65058

Trezor Safe Calldata Confirmation-Binding Bypass — CVE-2026-65...

Exploit-Databases

💥 Exploits Database & PoC Resources Koleksi exploit databas...

FortiClient EMS 7.4.6 Detection Scanner

FortiClient EMS CVE-2026-35616 Detection Scanner is a non-destructive security assessment module designed to identify whether Fortinet hotfix protections for CVE-2026-35616 are properly applied on FortiClient EMS servers. The scanner performs safe behavioral validation by comparing server respons...

Most Remediation Programs Never Confirm the Fix Actually Worked

Security teams have never had better visibility into their environments and never been worse at confirming what they fix stays fixed. Mandiant's M-Trends 2026 report puts the mean time to exploit at an estimated negative seven days. The Verizon 2025 DBIR puts median time to remediate edge device...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 Copy Fail Detection Tool A comprehensive det...

Jervis Has a JWT Algorithm Confusion Vulnerability

Vulnerability https://github.com/samrocketman/jervis/blob/157d2b63ffa5c4bb1d8ee2254950fd2231de2b05/src/main/groovy/net/gleske/jervis/tools/SecurityIO.groovyL244-L249 The code doesn't validate that the JWT header specifies "alg":"RS256". Impact Depending on the broader system, this could allow JWT...

Exploit for CVE-2025-37164

CVE-2025-37164 A remote code execution issue exists in HPE O...

Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities

CISA has released Emergency Cisco Directive 25-03 Implementation Guidance to assist federal agencies in addressing critical vulnerabilities in Cisco Adaptive Security Appliances ASA and Firepower devices. Emergency Directive 25-03: Identify and Mitigate Potential Compromise of Cisco Devices, issu...

PT-2025-43490

Name of the Vulnerable Software and Affected Versions MmsProvider.java affected versions not specified Description A path traversal error exists in multiple functions within MmsProvider.java, potentially allowing arbitrary file deletion affecting telephony, SMS, and MMS functionalities. This coul...

web.vietsingle.com Cross Site Scripting vulnerability OBB-3953367

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

shop.oji-salmon.co.jp Cross Site Scripting vulnerability OBB-3952822

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cellaredbeerfesr.bpt.me Cross Site Scripting vulnerability OBB-3952593

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...