Chankro

Chankro Your favourite tool to bypass disablefunctions and openbasedir in your pentests. How it works PHP in Linux calls a binary sendmail when the mail function is executed. If we have putenv allowed, we can set the environment variable "LDPRELOAD", so we can preload an arbitrary shared object...

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC for Responsive Filemanager 9.12.0 bypass upload restrictions lead to RCE Where's vuln? When uploading new file we go through function fixfilename: https://github.com/trippo/ResponsiveFilemanager/blob/9a7411f3eab3b7d8e2c78dcf40b4325bde2c548d/filemanager/upload.phpL112 In thi...

ipsourcebypass

Este script de Python se puede usar para eludir las restricciones de fuente IP usando cabeceras HTTP. Características 17 cabeceras HTTP. Multihilo. Exportación JSON con --json outputfile.json. Detección automática de las soluciones más exitosas...

CVE-2023-44061

Bypass de restricciones de carga de archivos...

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 La CVE-2020-35489 se descubrió en el plugin de WordPress Contact Form 7 5.3.1 y versiones anteriores. Al explotar esta vulnerabilidad, los atacantes podían simplemente cargar archivos de cualquier tipo, evitando todas las restricciones impuestas sobre los...

CVE-2024-40725

Herramienta de Detección de HTTP Request Smuggling Este repositorio contiene una herramienta basada en Python para detectar vulnerabilidades de HTTP Request Smuggling, dirigida específicamente a CVE-2024-40725. La herramienta intenta explotar esta vulnerabilidad en el servidor HTTP Apache enviand...

CVE-2020-29607

CVE-2020-29607-Exploit Exploit Title: Pluck CMS 4.7.13 - File Upload Remote Code Execution Authenticated CVE description: A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality,...

EUVD-2026-79987

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. Chromium security severity: Medium...

CVE-2022-24112-POC

CVE-2022-24112-POC Apache APISIX 2.12.1 Remote Code Execution by IP restriction bypass and using default admin AIP token Full walkthrough https://kavigihan.medium.com/apache-apisix-2-12-1-remote-code-execution-5f920b22ccff...

CVE-2026-12910

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to bypass SAML SSO sign-in restrictions and authenticate without SSO due to missing...

CVE-2026-48785

Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix matching to the limit container paths directive in apptainer.conf, so an allowed path such as /data/safe also authorizes a sibling path such as /data/safe-but-unsafe. A local...

CVE-2025-29927_Scanner

CVE-2025-29927 Checker 📌 Introducción Este script verifica la vulnerabilidad CVE-2025-29927 en servidores Next.js, probando múltiples payloads en el encabezado x-middleware-subrequest para detectar accesos no autorizados. ❓ ¿Qué es CVE-2025-29927? CVE-2025-29927 es una vulnerabilidad que permite...

CVE-2026-84551

CVE-2026-84551 affects Apple's iOS 27 , iPadOS 27 , macOS Golden Gate 27 , visionOS 27 , and watchOS 27 . It stems from a logic issue addressed through improved validation, which may allow an app to bypass network restrictions . The NVD-assigned CVSS 3.1 score is 4.4 (Medium) with a local attack ...

CVE-2026-55073

WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive urlfetcher and pass attacker-influenced values to HTML.writepdf can have the restriction bypassed through the xmpmetadata or stylesheets options. In weasyprint/pdf/init.py...

Apache-APISIX-CVE-2022-24112

Apache APISIX Remote Code Execution CVE-2022-24112 Exploit Summary An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. When the admin key w...

CVE-2022-31813

Launch the Range docker compose up --build Normal Access root@kitploit: GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

CVE-2021-21014

PoC Limited CVE-2021-21014 Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Affected version: = Magento 2.4.1 User...

CVE-2026-87548

A flaw was found in the Installer component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper state validation could allow the attacker to bypass system access restrictions, potentially leading to...

dnsresolver

dnsresolver A Lightning-Fast DNS Resolver Table of Contents Installation Usage Basic Usage Resolving Hosts with Ports Virtual Host Enumeration Using Unresolved Domains Using Localhost Demonstrations Feedback License Installation Make sure you have rust installed, then run the following command to...

CVE-2026-88046

A flaw was found in rclone, a command-line program for syncing files. This vulnerability allows an attacker to bypass configured directory restrictions by including parent-directory segments e.g., '..' in source object names. When a specially crafted source object is uploaded or copied, it can...