WordPress AI Engine Plugin - Token Exposure

Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 è una vulnerabilità critica nella funzionalità Web UI del software Cisco IOS XE, che consente a un aggressore remoto non autenticato di creare account con livello di privilegio 15 sui sistemi interessati, ottenendo così il controllo completo del dispositivo. La...

scout

Scout Scout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage root@kitploit: Usage: scout command Available Commands: help Hel...

cve-2021-42013-httpd

Dockerisierung einer Schwachstelle: cve-2021-42013 Dieses Projekt zielt darauf ab, eine bestimmte Schwachstelle mit Docker zu dockerisieren. Ziel ist es, eine isolierte Umgebung zu schaffen, in der die Schwachstelle sicher ausgenutzt und getestet werden kann. Verwundbare Anwendung Apache HTTP...

cve-2026-43515-poc

CVE-2026-43515 — Bypass delle restrizioni di sicurezza in Apache Tomcat Giudizio di sfruttabilità: confermato sfruttabile. Una richiesta POST verso una risorsa protetta da una configurazione con divisa bypassa completamente l'autenticazione. La struttura web.xml richiesta è poco comune nelle...

CVE-2022-28117

CVE-2022-28117 Navigate CMS = 2.9.4 - Server-Side Request Forgery Autenticato Descrizione Una Server-Side Request Forgery SSRF nella classe feedparser di Navigate CMS v2.9.4 consente a un attaccante remoto di forzare l'applicazione a effettuare richieste arbitrarie tramite l'iniezione di URL...

CVE-2002-0289

CVE-2002-0289 Phusion WebServer 1.0 - Overflow del buffer remoto 'URL' Pubblicazione su Exploit-db: https://www.exploit-db.com/exploits/21294/ Phusion WebServer 1.0 - Denial of Service tramite URL lungo Pubblicazione su Exploit-db: https://www.exploit-db.com/exploits/21293/ Autore Alex Hernandez...

CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – Iniezione di comandi tramite URL Git nella pipeline CI/CD Codice del programma Python root@kitploit: cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd = f"git clone...

socgholish_finder

SocGholish Finder Semplice script per scansionare siti web alla ricerca di inject SocGholish. Controlla e mostra l'inject se trovato, e deoffusca e mostra i domini URL shadow. root@kitploit: usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finder options: -h, --help...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – SSRF durch URL-Parser-Differenz Programmcode Python root@kitploit: vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed =...

Scannerweb

Scannerweb Scanner di vulnerabilità scritto in python3, effettua fuzzing su tutti gli URL del sito target e poi li scansiona per Scannerweb Screeenshot Naviga nella directory /opt opzionale root@kitploit: cd /opt/ Clona questo repository root@kitploit: git clone...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi Patch-Umgehung Nur zur Verwendung in kontrollierten und eigenen Umgebungen. Nicht gegen Systeme ohne Autorisierung verwenden. Beschreibung PoC entwickelt, um CVE-2021-42013 zu demonstrieren, das in Apache HTTP Server 2.4.50 vorhanden ist. Dies...

CVE-2025-23040

CVE-2025-23040 - Credential Leak in GitHub Desktop GitHub Desktop 3.4.12 è vulnerabile a un attacco che permette di esfiltrare credenziali tramite URL remoti malevoli. Un attaccante può convincere un utente a clonare un repository manipolato per ottenere username e token OAuth...

CVE-2024-24919

CVE-2024-24919 Инструмент для обнаружения и эксплуатации уязвимости CVE-2024-24919 Установка: root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-24919 pip install -r requirements.txt python3 exploit.py --help Использование: root@kitploit: python3 exploit.py -h / / / / / / / / |...

CVE-2022-21371

Badges Лицензия MIT Установка 1. Установите Python3 и pip Инструкции здесь Если вы не можете с этим разобраться, вам не стоит использовать этот инструмент Установка через pip root@kitploit: pip install CVE-2022-21371 Выполните следующую команду для проверки CVE-2022-21371 -h Настройка 2. Мы...

loboguara

Lobo Guará - Cyber Threat Intelligence Platform Lobo Guará is a platform aimed at cybersecurity professionals, with various features focused on Cyber Threat Intelligence CTI. It offers tools that make it easier to identify threats, monitor data leaks, analyze suspicious domains and URLs, and much...

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

ph0neutria

ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...