CVE-2026-87860

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making...

CVE-2026-86823

The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public subscription action, allowing unauthenticated attackers to redirect users to arbitrary external sites and to disclose a subscriber token that grants access to that subscriber...

CVE-2026-92358

A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a temporary proof is created to validate the link. However, this proof is not properly cleared after the link is established or when the user later manually remov...

vcenter-log4j

VMware vCenter log4j workaround Script to workaround VMware vCenter log4j vulnerability CVE-2021-44228, as per the VMware KB article. 2021-12-13 02:09 UTC - Added Secure Token & Identity Management services 2021-12-13 12:46 UTC - Added PSC Client for 6.5 - see below VMware have released a python...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 Usage This POC is Verified! root@kitploit: curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' ...

CVE-2018-0114

CVE-2018-0114 Exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT. This vulnerability in Cisco's node-jose allows an attacker to forge malicious tokens. JWT allows users to embed public keys using the jwk value inside the header of the token. However,...

CVE-2026-16232

CVE-2026-16232 Overview A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token. This affects Check Point Security Management Server and Multi-Domain Security Management Server MDS. For a full technical analysis,...

SkyWrapper

Overview SkyWrapper is an open-source project which analyzes behaviors of temporary tokens created in a given AWS account. The tool is aiming to find suspicious creation forms and uses of temporary tokens to detect malicious activity in the account. The tool analyzes the AWS account, and creating...

TokenTacticsV2

root@kitploit: / / / / / / / / | \ / / / / /// / \ / / / / / / / / | | / / / / / / / // / , / / / / / / // // / // // / / | |/ / / / // //||// // /,////// |/ TokenTactics v2 This is an updated version of TokenTactics originally written by Stephan Borosh @rvrsh3ll & Bobby Cooke @0xBoku...

token-reverser

Token Reverser Words list generator to crack security tokens. Installation root@kitploit: $ git clone https://github.com/dariusztytko/token-reverser.git Example use case 1. You are testing reset password function 2. Reset password token was sent to your email box e.g...

recipe-blog-encoding

recipe-blog-encoding !WARNING This project is entirely vibe-coded likely partially plagiarized from this repository and the author is a dumb-dumb who just thought the idea was funny Use SEO-gaming recipe preambles as a vehicle for encoding secret messages the prompt can really be anything though,...

PrivFu

PrivFu Kernel mode WinDbg extension and PoCs for testing how token privileges work. There are notable repository and articles about token privilege abuse such Grzegorz Tworek's Priv2Admin. Codes in this repository are intended to help investigate how token privileges work. Table Of Contents PrivF...

CVE-2019-19609

CVE-2019-19609 Strapi Framework Vulnerable to Remote Code Execution well, I didnt found any exploit for CVE-2019-19609 so I wrote one. :/ Usage root@kitploit: python3 exploit.py A video https://youtu.be/alhZJmuUd2s More Information https://hack-fast.herokuapp.com/cve/CVE-2019-19609...

CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field

Security Advisory: Stored Cross-Site Scripting Via Agent Messages Leading To Session Token Theft openclaw-dashboard Title: OpenClaw Dashboard Stored XSS via lastMessage Session Field CVE ID: CVE-2026-66421 https://github.com/tugcantopaloglu/openclaw-dashboard Summary The sessions table on the...

DaaC2

DaaC2 - Discord as a C2 I wrote this because I was bored and wanted to mess around with a Discord bot, see if I could build a line of communication between a C2 server and an agent via Discord. Turns out it works pretty well. Ideally, with more time, I would use this as an initial dropper to then...

CVE-2020-10199-10204

CVE-2020-10199-10204 http://1984-0day.com root@kitploit: python3 poc.py -i 127.0.0.1 -p 8081 -c cookie -csrf csrf-token parse = argparse.ArgumentParser parse.addargument'-i', '--ip', help='ip' parse.addargument'-p', '--port', default='8081', help='port' parse.addargument'-c', '--cookie', help='HT...

lucky13

LUCKY13 Exploit This repository contains a proof-of-concept POC exploit for the LUCKY13 vulnerability CVE-2013-0169, which is a timing attack against certain implementations of the CBC Cipher Block Chaining mode of operation in cryptographic systems. The exploit aims to decrypt a target token by...

CVE-2021-31956-POC

" CVE-2021-31956" WIP PoC code for CVE-2021-31956 in preparation for OSEE. Will improve it further after my OSEE exams and free time. A lot of hardcoded offsets need to be changed if it is different on the target system but if it is anything similar to 2020 - 2021 builds then no change should be...

IF-Guide

IF-Guide: Influence Function-Guided Detoxification of LLMs NeurIPS 2025 This repository contains the code for IF-Guide, the LLM detoxification technique introduced in our paper: IF-Guide: Influence Function-Guided Detoxification of LLMs Zachary Coalson , Juhan Bae, Nicholas Carlini, Sanghyun Hong...

CVE-2026-92298

EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator. The tokens are roughly 31-bit , allowing remote unauthenticated attackers to guess them and confirm opt-ins, accept or...