CVE-2021-21985_PoC

CVE-2021-21985 Vulnerable Code CLASS/METHODs available, a little sample for PoC purposes: com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

dnscontrol

DNSControl DNSControl is Infrastructure as Code for DNS. It includes a full-featured configuration language Javascript-compatible, plus "plug-ins" that speak to DNS provider APIs such as AWS Route 53, Cloudflare, and Gandi. It can send the same DNS records to multiple providers. It runs anywhere ...

CVE-2024-25291

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerability. deskfiler - 1.2.3 allows Electron webview in application, with resultant remote code In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file that...

CVE-2023-33768

CVE-2023-33768 Descripción La verificación incorrecta de la firma del firmware durante el proceso de Actualización del Firmware del Dispositivo del Belkin Wemo Smart Plug WSP080 v1.2 permite a los atacantes causar una Denegación de Servicio DoS mediante un archivo de firmware manipulado...

CVE-2023-33768

CVE-2023-33768 Description Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service DoS via a crafted firmware file. Additional Information When updating the firmware of the Wemo...

POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / research + PoC Create 1 Shortcut + 1 .DLL containing malicious payload = Put it on a USB and send to victim = victim opens USB = Payload automatically triggers ! ROOT CAUSE 1. First, we need to know exactly where this bug comes from! It's because of a feature called Plug-and-Play ...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CVE-2026-21962

🔥 CVE-2026-21962 — Kit de Detección para Oracle HTTP Server Herramientas de detección seguras y no explotables para identificar instancias de Oracle HTTP Server y WebLogic Proxy Plug-in afectadas por CVE-2026-21962. 🧠 Resumen de la Vulnerabilidad CVE: CVE-2026-21962 Severidad: Crítica Vector de...

CVE-2026-21962_Java_GUI_Exploit_Tool

CVE-2026-21962 Herramienta de Explotación GUI en Java Versión GUI en Java de la herramienta de explotación de la vulnerabilidad RCE Ejecución Remota de Código del Proxy Plug-In de Oracle WebLogic Server. Estructura del Proyecto root@kitploit: java-version/ ├── pom.xml Archivo de configuración del...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in has an easily exploitable, unauthenticated, network-reachable flaw allowing compromise over HTTP. Affected supported versions include 12.2.1.4.0,...

Ashwesker-CVE-2026-21962

😈 CVE-2026-21962 — Vulnerabilidad de Seguridad Crítica 😈 🚨 Gravedad Puntuación CVSS: 10.0 / 10 Crítica Publicada: 20 de enero de 2026 Nivel de Riesgo: 🔥 Máximo — se recomienda acción inmediata 🧠 ¿Qué es? Una vulnerabilidad crítica que afecta a: Oracle HTTP Server Oracle WebLogic Server Proxy...

Important: Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update

Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer...

Release Information for Veeam Plug-In for Microsoft Azure 9.1

Release Information 13.9.1.407 2026-09-08 Resolved issues General Storage account credentials are stored in plain text on worker appliances. Configuration Backup Configuration backup for the managed backup appliance fails after upgrading Veeam Backup & Replication to version 13.1. Under certain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093315 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.25 and prior and 8.0.15...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093283 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.26 and prior and 8.0.16...

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: A fix was made to the NULL pointer dereference in dwc3gadgetsuspend. In the current scenario, if plug-out and plug-in operations are performed continuously, there is a possibility that a NULL pointer dereferenc...

Astra Linux – Vulnerability in wpa, pupnp-1.8

The Open Connectivity Foundation’s UPnP specification prior to April 17, 2020, does not prohibit the acceptance of a subscription request with a delivery URL located in a different network segment than the fully qualified event-subscription URL. This is known as the “CallStranger” issue...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A use-after-free vulnerability exists in the Linux kernel’s net/sched: schqfq component, which can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers a use-after-free in qfqdequeue, due to the incorrect .pe...