targetedKerberoast

targetedKerberoast targetedKerberoast is a Python script that can, like many others e.g. GetUserSPNs.py, print "kerberoast" hashes for user accounts that have a SPN set. This tool brings the following additional feature: for each user without SPNs, it tries to set one abuse of a write permission ...

goGetBucket

goGetBucket - AWS S3 Bucket discovery through alterations and permutations Warning: code is horrible as I have only used this for personal use. When I get the time I will make it less-horrible and faster. When performing a recon on a domain - understanding assets they own is very important. AWS S...

Tomcat-CVE-2017-12615

Tomcat Arbitrary Write-file Vulnerability through PUT Method CVE-2017-12615 中文版本Chinese version Tomcat version: 8.5.19 Environment Setup root@kitploit: docker-compose build docker-compose up -d After successfully running the commands above, you will see the example page of Tomcat through visiting...

CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication

CVE-2026-22017 – Firmware Update via BLE Without Authentication Program Code Python bleak peripheral root@kitploit: blefirmwareupdate.py - Simulated BLE peripheral accepting firmware writes from bleak import BleakServer, BleakGATTCharacteristic import asyncio class FirmwareService: def initself:...

EUVD-2026-72363

ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject and updateGroupTypeObject perform state-changing operations without write permission checks. Authenticated users with only read access to a group can craft POST...

EUVD-2026-71620

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation sort field from HTTP requests is passed directly into the ORDER BY clause of a SQL query without validation against declared sortable columns. Authenticated...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...

CVE-2026-12663

ControlFLASH™ (Rockwell Automation) contains an improper access control flaw: its installer grants write permissions to the "Everyone" group on the product installation directory. This misconfiguration allows a local attacker to achieve arbitrary code execution at the logged-in user's privilege l...

kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...

CVE-2026-55064

Vikunja is an open-source self-hosted task management platform. From 2.3.0 until 2.4.0, a user with Write but not Admin permission on a shared child project can detach it from its parent hierarchy by submitting parentprojectid equal to 0 to POST /api/v1/projects/project. The Project.CanUpdate...

Vikunja has a project duplication bypasses write-permission check on the target parent project

Summary The project-duplication endpoint fails to enforce write access to the target parent project. Any authenticated non-link-share user can duplicate a project they can read into any parent project on the instance, regardless of whether they have write access to that parent — injecting an...

CVE-2026-54766 Vikunja: Project duplication bypasses write-permission check on the target parent project

Vikunja is an open-source self-hosted task management platform. From 0.21.0 until 2.4.0, the project duplication operation in pkg/models/projectduplicate.go allows an authenticated user who can read a source project to place its duplicate beneath an arbitrary target parent project...

CVE-2026-54766

Vikunja , an open-source self-hosted task management platform, has an authorization bypass in its project duplication endpoint (PUT /api/v1/projects/{project}/duplicate). The flaw in ProjectDuplicate.CanCreate (pkg/models/project_duplicate.go) calls parent.CanCreate on an unhydrated Project struc...

EUVD-2026-67830

Vikunja is an open-source self-hosted task management platform. From 0.21.0 until 2.4.0, the project duplication operation in pkg/models/projectduplicate.go allows an authenticated user who can read a source project to place its duplicate beneath an arbitrary target parent project...

CVE-2026-54766 Vikunja: Project duplication bypasses write-permission check on the target parent project

Vikunja is an open-source self-hosted task management platform. From 0.21.0 until 2.4.0, the project duplication operation in pkg/models/projectduplicate.go allows an authenticated user who can read a source project to place its duplicate beneath an arbitrary target parent project...

PT-2026-83229

Name of the Vulnerable Software and Affected Versions Vikunja versions 0.21.0 through 2.3.0 Description An authorization bypass exists in the project duplication process. An authenticated user with read access to a source project can duplicate it and place the copy under any arbitrary target pare...

Apicurio/apicurio-registry: apicurio-registry: XML entity-expansion denial of service via internal DTD subset

A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or enable FEATURESECUREPROCESSING. An attacker with artifact-write permission can upload XML documents with internal entity-expansion payloa...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101997 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAYWRITE in open permission mask for OTRUNC POSIX requires write permission to...

Tanium Server 7.7.3.x < 7.7.3.8298 / 7.8.2.x < 7.8.2.1198 / 7.8.4.x < 7.8.4.1327 UI Misrepresentation (TAN-2026-017)

The version of Tanium Server installed on the remote host is 7.7.3.x prior to 7.7.3.8298, 7.8.2.x prior to 7.8.2.1198, or 7.8.4.x prior to 7.8.4.1327. It is, therefore, affected by a vulnerability: - A UI misrepresentation of critical information vulnerability could allow an authenticated Tanium...

EUVD-2026-58503

Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup that fails to escape table names in identifiers. Attackers with write permission on a table with a double-quote in its name can inject SQL that executes as the datasource's...