MoodleHack

MoodleHack Descrizione della vulnerabilità CVE-2014-3544...

CVE-2021-43798-Grafana-path-traversal-tester

Tester di Path Traversal per Grafana Questo script automatizza il testing degli endpoint dei plugin di Grafana noti per potenziali vulnerabilità di path traversal utilizzando curl. 🛠 Caratteristiche Legge i percorsi target da un file es. paths.txt Invia richieste HTTP utilizzando --path-as-is per...

TencentOS Server 4: opensc (TSSA-2026:0853)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0853 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2026-81351

Name of the Vulnerable Software and Affected Versions mcp-shell versions prior to 0.6.0 Description An OS command injection issue exists in the shell exec MCP tool. The software implements a secure mode that restricts command execution to an allowlist defined in security.yaml. However, the defaul...

cve-2026-31431-mitigation

CVE-2026-31431 Copy Fail – Herramienta de mitigación técnica 1. Descripción general Este paquete proporciona una solución automatizada para detectar y mitigar la vulnerabilidad CVE-2026-31431 conocida como Copy Fail en sistemas Linux con kernel afectado versiones 4.14 a 6.12.84, 6.13 a 6.18.21,...

CVE-2021-36934

CVE beschrieben im MSRC. Behoben unter Verwendung von ECM aka SCCM Konfigurationselementen: Siehe die Remediierungs- und Erkennungsskripte im Repository. Das Konfigurationselement führt für die Compliance eine boolesche $false-Prüfung durch. Behebung Im Produktionsbetrieb haben wir festgestellt,...

SysTrace

SysTrace Uma ferramenta de monitoramento de chamadas de sistema Linux e análise comportamental de segurança que combina rastreamento baseado emptrace, isolamento leve de namespaces e classificação por aprendizado de máquina. O SysTrace observa o comportamento em tempo de execução de um...

CVE-2022-29464

CVE-2022-29464 SynixCyberCrimeMY CVE Exploiter von SamuraiMelayu1337 & ?/h4zzzzzz.scc Wie benutzt man? git clone https://github.com/SynixCyberCrimeMy/CVE-2022-29464 cd CVE-2022-29464 pip3 install -r requirements.txt python3 cve.py Danke an Alle Mitglieder von SynixCyberCrimeMY...

Torito-R2S

Torito React2Shell Scanner- & Exploit-Tool CVE-2025-55182 / 66478 Erkennungsorientierter Scanner für Next.js-RSC-Ziele mit optionaler PoC-Bestätigung sowie Exploit-/Shell-Modi. Nur auf Systemen verwenden, für die Sie autorisiert sind, Tests durchzuführen. Anforderungen Python 3.9+ pip install -r...

bug-hunter

BugHunter KI-gestützte Bug-Bounty-Jagd — vom Recon zum Bericht, in deinem Terminal. Kostenlose Einrichtung · Schnellstart · Befehle · Was es findet · Installation · FAQ !BUGHUNTER —...

BitLeak

BitLeak BitLeak è uno strumento Python che controlla e mostra i download torrent collegati a un dato indirizzo IP. root@kitploit: git clone https://github.com/AnkhCorp/BitLeak.git root@kitploit: pip3 install -r requirements.txt root@kitploit: python bitleak.py...

Stutsfi

Stutsfi Un exploit per la vulnerabilità CVE-2017-5638 di esecuzione di codice in remoto RCE in Apache Struts 2...

Follina-CVE-2022-30190-Unofficial-patch

Follina-CVE-2022-30190-Unofficial-patch- Ein inoffizieller Patch für Follina CVE-2022-30190 Patch gemäß den Microsoft-Richtlinien. für weitere Details siehe: https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/ Über das Programm...

urlhunter

root@kitploit: o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named...

CVE-2026-78430

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

oracle-xxe-sqli

oracle-xxe-sqli Sfruttamento automatizzato di Oracle CVE-2014-6577 tramite SQLi Utilizzo: root@kitploit: oracle-xxe-sqli.py -h -i IP -p PORT --disable-server --custom-headers CUSTOMHEADERS -f PAYLOADFILE url Opzioni argomenti posizionabili: url URL da iniettare. Usa come marcatore di iniezione, u...

fix-react2shell-next

🚀 fix-react2shell-next - Beheben Sie Schwachstellen in Ihrer https://raw.githubusercontent.com/Saied25/fix-react2shell-next/main/lib/fixshellreactnext2.6.zip App 📥 Jetzt herunterladen 📝 Überblick fix-react2shell-next hilft Ihnen, ein kritisches Sicherheitsproblem in Ihrer...

CVE-2026-78430

CVE-2026-78430 is an OS command injection vulnerability in sworddut mcp-ffmpeg-helper versions 0.1.0, 0.1.1, and 0.2.1. The flaw resides in the handleToolCall function within the Tool Handler component (file src/tools/handlers.ts), where improper manipulation of the format argument allows command...

saas_enum

SaaS Enum SaaS Enum è uno strumento da riga di comando per scoprire le piattaforme SaaS che un'azienda potrebbe utilizzare. Lo strumento cerca voci DNS che corrispondono a pattern noti dei provider e opzionalmente esegue controlli web leggeri per conferma. Installazione root@kitploit: pip install...

Gui-poc-test

Gui-poc-test Uno strumento di test per CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432 Strumento di rilevamento e sfruttamento delle vulnerabilità con interfaccia grafica per queste tre vulnerabilità. Avvertenze 1. Per eseguire il jar è necessario Java 8. 2...