Leaked-Credentials

Para pesquisar credenciais vazadas usando o Developer Tools do Google Chrome e regex, siga estes passos rápidos: 1. Abra o DevTools: No Chrome, navegue até o site que você está inspecionando e abra o Developer Tools com Ctrl+Shift+I Windows/Linux ou Cmd+Option+I macOS. 2. Vá para a aba Network:...

CVE-2024-40508

CVE-2024-40508 Vulnérabilité de Cross Site Scripting dans openPetra v.2023.02 via la fonction serverMConference.asmx. Description : Un utilisateur non authentifié peut voler les cookies d'un utilisateur authentifié en exploitant une XSS dans openPetra v.2023.02 via la fonction...

CVE-2024-40510

CVE-2024-40510 openPetra v.2023.02 में serverMCommon.asmx फ़ंक्शन के माध्यम से क्रॉस साइट स्क्रिप्टिंग भेद्यता विवरण : एक अप्रमाणित उपयोगकर्ता, openPetra v.2023.02 में serverMCommon.asmx फ़ंक्शन के माध्यम से XSS का शोषण करके, प्रमाणित उपयोगकर्ता से कुकीज़ चुरा सकता है। संवेदनशील उत्पाद संस्करण :...

CVE-2026-44656

CVE-2026-44656 - Vim Modeline path Option Command Injection Schwachstelle English|中文 Dieses Repository bietet eine Reproduktionsumgebung für CVE-2026-44656. Die Schwachstelle beruht auf einem Fehler in Vims Behandlung von Backtick-Expansionsausdrücken in der path-Option innerhalb von Modelines...

CVE-2024-40507

CVE-2024-40507 क्रॉस साइट स्क्रिप्टिंग भेद्यता openPetra v.2023.02 में serverMPersonnel.asmx फ़ंक्शन के माध्यम से। विवरण : एक अप्रमाणित उपयोगकर्ता, openPetra v.2023.02 में serverMPersonnel.asmx फ़ंक्शन के माध्यम से XSS का शोषण करके प्रमाणित उपयोगकर्ता से कुकीज़ चुरा सकता है। संवेदनशील उत्पाद...

CVE-2022-4556

CVE-2022-4556 - SOGo Webmail में Stored XSS v5.7.1 🧠 सारांश एक Stored Cross-Site Scripting XSS भेद्यता SOGo वेब इंटरफ़ेस के पहचान प्राथमिकताएँ अनुभाग के fullName फ़ील्ड में पाई गई, जो संस्करण 5.7.1 को प्रभावित करती है। एक प्रमाणित हमलावर एक दुर्भावनापूर्ण स्क्रिप्ट इंजेक्ट कर सकता है जो किसी भी...

cryptr

cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation root@kitploit: git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...

CVE-2017-16567

CVE-2017-16567 1. Titolo dell'exploit: Logitech Media Server : Cross Site Scripting XSS persistente 2. Shodan Dork: Cerca Logitech Media Server 3. Data: 11/03/2017 4. Autore dell'exploit: Dewank Pant 5. Homepage del fornitore: www.logitech.com 6. Versione: 7.9.0 7. Testato su: Windows 10, Linux...

CVE-2017-16568

CVE-2017-16568 1. Título do Exploit: Logitech Media Server : injeção e execução de código HTML. 2. Shodan Dork: Pesquisar Logitech Media Server 3. Data: 11/03/2017 4. Autor do Exploit: Dewank Pant 5. Homepage do fornecedor: www.logitech.com 6. Versão: 7.9.0 7. Testado em: Windows 10, Linux POC: 1...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

CVE-2026-79123

A flaw was found in Google Chrome. Improper input validation in the New Tab Page NTP Footer allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved by enticing a user to visit a crafted HTML page...

CVE-2024-2242

CVE-2024-2242 Contact Form 7 hist...

CVE-2017-7089

CVE-2017-7089 Impatto : L'elaborazione di contenuti web creati con intenti dannosi può portare a universal cross-site scripting Descrizione : Esisteva un problema logico nella gestione della scheda principale. Questo problema è stato risolto con una migliore gestione dello stato. Safari 10 Bypass...

generator-burp-extension

Burp Extension Generator Installation First, install Yeoman and generator-burp-extension using npm we assume you have pre-installed node.js. root@kitploit: npm install -g yo npm install -g generator-burp-extension Then generate your new project: root@kitploit: yo burp-extension Burp Extension...

CVE-2026-39107

CVE-2026-39107: Cross-Site Scripting XSS in Kimi AI v1.0 Description Una vulnerabilità di Cross-Site Scripting XSS è presente nella funzionalità 'Preview' dell'interfaccia web di Kimi AI v1.0. L'applicazione non riesce a sanificare o codificare correttamente i payload HTML/JavaScript generati dal...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

CVE-2026-40791-WP-Time-Slots-Booking-Form-XSS

CVE-2026-40791: Um Slot de Reserva para XSS de Administrador Encontrei um XSS armazenado não autenticado no plugin WordPress WP Time Slots Booking Form. Uma submissão pública de reserva controla parte do valor armazenado do horário slot. O plugin posteriormente imprime esse valor na página de...

Astra Linux – Vulnerability in Chromium

The incorrect security UI in the Tab Strip component of Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to perform domain spoofing through a crafted HTML page. Chromium security severity: Low...

CVE-2026-9290

CVE-2026-9290 — Exploit de LFI para RCE no WP User Manager Path Traversal sem autenticação via parâmetro 'tab' → Inclusão Local de Arquivo Visão Geral CVE-2026-9290 é uma vulnerabilidade de Inclusão Local de Arquivo Local File Inclusion — LFI sem autenticação e de alta gravidade CVSS 7.5 no plugi...

smt878u-ionstack-poc

smt878u-ionstack-poc Prova de conceito de re-root assistido por host, em C puro, para Samsung Galaxy Tab S7 SM-T878U / gts7l contra CVE-2026-43499 IonStack / GhostLock. A cadeia em tempo de execução usa apenas componentes nativos em C/ELF. Ela não requer Python, Java, DEX, appprocess ou uma JVM n...