CVE-2025-23369

CVE-2025-23369 CVE-2025-23369 exploit, write up here...

secdim-assurance-drift-challenge

SecDim Challenge Builder Repro — Deriva de garantía Reproducción funcional para un desafío de seguridad propuesto inspirado en CVE-2026-88861 , publicado el 10 de septiembre de 2026. Concepto de seguridad La aplicación verifica correctamente una sesión firmada y comprueba correctamente el rol...

metashield-clean-up-sdk-python

============================== Metashield-clean-up-sdk-python Instalación Instale el paquete metashieldcleanup usando pip:: root@kitploit: pip install metashieldcleanup Uso Ejemplo para limpiar un archivo. .. code-block:: python root@kitploit: import time import base64 from metashieldcleanup.api...

ActiveMQ-RCE-CVE-2023-46604-Write-up

Este repositorio no tiene un README...

catalyst

Catalyst 加速你的响应 网站 - Catalyst 手册（文档） - 演示 Catalyst 是一个事件响应平台。 它可以帮助自动化你的告警处理和事件响应流程。 功能特性 工单（告警与事件）管理 工单是 Catalyst 的核心。 它们代表告警、事件、取证调查、 威胁狩猎或你组织中需要处理的任何其他事件。 任务 任务是 Catalyst 中最小的作业单元。它们可以分配给用户并具有状态。 任务可用于记录调查进度或向不同用户分配工作。 反应 反应是一种自动化 Catalyst 的方式。 每个反应由一个触发器和一项动作组成。 触发器监听事件，当触发器被激活时执行动作。 存在...

CVE-2026-98072

The Linux kernel contains a vulnerability in the net/rds component where the release_in_xmit() function fails to maintain necessary memory ordering. Specifically, it uses clear_bit_unlock() to clear RDS_IN_XMIT, which lacks the full barrier required for a subsequent load of the wait queue head. T...

EUVD-2026-86725

In the Linux kernel, the following vulnerability has been resolved: net/rds: use wqhassleeper in releaseinxmit releaseinxmit clears RDSINXMIT with clearbitunlock and then checks waitqueueactive to decide whether anyone needs waking. clearbitunlock is only a release operation: it orders the critic...

CVE-2024-41992-PoC

PoC para el CVE-2024-41992. Informe del CVE FR : https://fj016.fr/blog/cve-2024-41992...

fav-up

Fav-up 通过 favicon 图标并使用 Shodan 查找真实 IP。 安装 pip3 install -r requirements.txt Shodan API 密钥（不是 免费的） 使用 命令行界面 首先定义如何传递 API 密钥： -k 或 --key：将密钥传递给标准输入 -kf 或 --key-file：传递包含密钥的文件名 -sc 或 --shodan-cli：从 Shodan CLI 获取密钥（如果你已初始化） 目前，该工具可通过三种不同方式使用： -ff 或 --favicon-file：本地存储了你想要查询的 favicon 图标 -fu 或...

bash-up

bash-up un script automático para corregir la vulnerabilidad bash CVE-2014-6271...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

TileServer API - Cross Site Scripting

tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key. id: CVE-2024-35627 info: name: TileServer API - Cross Site Scripting author: DhiyaneshDK severity: medium description: | tileserver-gl up to v4.4.10 was discovered to...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2023-32629

CVE-2023-32629 — Escalada de privilegios local total en OverlayFS Escalada de privilegios local en OverlayFS: análisis completo hasta la escalada total Solo con fines educativos y de investigación de seguridad autorizada. Gravedad: Alta Tipo: Escalada de privilegios local LPE Afectados: kernels d...

ossem-power-up

OSSEM 一个基于优秀的 OSSEM 项目构建的数据质量评估工具。 目标 回答这个问题：我想开始狩猎 ATT&CK 技术，哪些日志源和事件更合适？ 透明化你的日志源的优势和劣势 提供一种简单的方法来评估你的日志 OSSEM Power-up 概述 Power-up 使用 OSSEM 检测数据模型（DDM）作为其数据质量评估的基础。主要原因是它提供了一种结构化的方式，将 ATT&CK 数据源、通用信息模型实体（CIM）和 数据字典（事件）相互关联起来。 对于那些不熟悉 DDM 结构的人，这里有一个示例： ATT&CK 数据源| 子数据源| 源数据对象| 关系| 目标数据对象| Event...

CVE-2025-8760

Prueba de Concepto para CVE-2025-8760 El análisis detallado está disponible aquí...

CVE-2023-38831

CVE-2023-38831 Installation Vagrant 2.4.0 root@kitploit: vagrant up...

Linux Distros Unpatched Vulnerability : CVE-2026-86350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293...

Linux Distros Unpatched Vulnerability : CVE-2026-97515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus gets stuck holding SDA low, the controller reports a...

CVE-2026-96826

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue affects W4 Post List: from n/a through 3.0.6...