CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – SSRF durch URL-Parser-Differenz Programmcode Python root@kitploit: vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed =...

Scannerweb

Scannerweb Scanner di vulnerabilità scritto in python3, effettua fuzzing su tutti gli URL del sito target e poi li scansiona per Scannerweb Screeenshot Naviga nella directory /opt opzionale root@kitploit: cd /opt/ Clona questo repository root@kitploit: git clone...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi Patch-Umgehung Nur zur Verwendung in kontrollierten und eigenen Umgebungen. Nicht gegen Systeme ohne Autorisierung verwenden. Beschreibung PoC entwickelt, um CVE-2021-42013 zu demonstrieren, das in Apache HTTP Server 2.4.50 vorhanden ist. Dies...

CVE-2025-23040

CVE-2025-23040 - Credential Leak in GitHub Desktop GitHub Desktop 3.4.12 è vulnerabile a un attacco che permette di esfiltrare credenziali tramite URL remoti malevoli. Un attaccante può convincere un utente a clonare un repository manipolato per ottenere username e token OAuth...

CVE-2024-24919

CVE-2024-24919 Инструмент для обнаружения и эксплуатации уязвимости CVE-2024-24919 Установка: root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-24919 pip install -r requirements.txt python3 exploit.py --help Использование: root@kitploit: python3 exploit.py -h / / / / / / / / |...

CVE-2022-21371

Badges Лицензия MIT Установка 1. Установите Python3 и pip Инструкции здесь Если вы не можете с этим разобраться, вам не стоит использовать этот инструмент Установка через pip root@kitploit: pip install CVE-2022-21371 Выполните следующую команду для проверки CVE-2022-21371 -h Настройка 2. Мы...

loboguara

Lobo Guará - Cyber Threat Intelligence Platform Lobo Guará is a platform aimed at cybersecurity professionals, with various features focused on Cyber Threat Intelligence CTI. It offers tools that make it easier to identify threats, monitor data leaks, analyze suspicious domains and URLs, and much...

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

ph0neutria

ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...

IngressNightterror

IngressNightterror CVE-2025-1974 Panoramica Questo repository contiene la mia ricerca sulla vulnerabilità IngressNightmare. Include file di deploy Ingress vulnerabili, l'exploit stesso e un payload di oggetto condiviso. CVE Elenco degli indici CVE: CVE-2025-1974 - Vulnerabilità principale...

PoC-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path-Traversal-Exploit Ein Python-Exploit für CVE-2021-41773, eine Path-Traversal-Sicherheitslücke in Apache HTTP Server 2.4.49, die das Lesen beliebiger Dateien vom Server ermöglicht. Schwachstellendetails CVE-2021-41773 ist eine Path-Traversal-Sicherheitslücke ...

CVE-2022-44215

Introduzione È stata scoperta una nuova vulnerabilità che colpisce il server web Titan FTP, catalogata come CVE-2022-44215. Titan FTP è un software commerciale creato da South River Technologies che implementa il protocollo FTP per la condivisione di file. Nella sua versione HTTPS 19.X e...

CVE-2021-41773-POC

CVE-2021-41773-POC La documentazione del POC e della configurazione del laboratorio per CVE 2021 41773 Cos'è CVE-2021-41773? CVE-2021-41773 è una vulnerabilità di path traversal in Apache HTTP Server 2.4.49 e 2.4.50. Questa vulnerabilità sfrutta un aggiornamento nel codice di normalizzazione dei...

CVE-2026-19801 BetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action

The BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...

CVE-2026-19801

The BetterLinks WordPress plugin (Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP) is vulnerable to authorization bypass in all versions up to and including 3.1.0 . The root cause is improper verification of user authorization in the create_fbs_link AJAX action, allowing an...

WordPress BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Short URL Creation vulnerability discovered by Wordfence PRISM in WordPress Plugin BetterLinks versions = 3.1.0...

CVE-2023-44813

CVE-2023-44813 Eine reflektierte Cross-Site-Scripting XSS-Schwachstelle im mode -Parameter der Funktion „Invite Friend“ von mooSocial v3.1.8, die es Angreifern ermöglicht, die Session-Cookies von Benutzern zu stehlen und sich über eine manipulierte URL als deren Konto auszugeben. Verwundbarer...

CVE-2017-12637_SAP-NetWeaver-URL-Traversal

CVE-2017-12637SAP-NetWeaver-URL-Traversal Scanner LFI proof-of-concept: rilevamento automatico delle esposizioni di /etc/passwd tramite directory traversal e corrispondenza regex. root@kitploit: Scanner LFI Un proof-of-concept Python leggero per scansionare host target per vulnerabilità di Local...