CVE-2026-52766

YesWiki (PHP-based wiki system) is vulnerable to unauthenticated arbitrary page deletion prior to version 4.6.6 . The {{erasespamedcomments}} action (actions/EraseSpamedCommentsAction.php) processes a suppr[] array from POST and deletes pages whose tags match, with no authorization check in the a...

CVE-2021-40346

CVE-2021-40346: HTTP-контрабанда запросов HAProxy - обход ACL Обзор Этот проект демонстрирует CVE-2021-40346 , критическую уязвимость целочисленного переполнения в HAProxy, которая позволяет проводить атаки HTTP-контрабанды запросов для обхода средств защиты. Оценка CVSSv3: 7.5 Высокая Авторы: 1...

S3BucketList

S3BucketList 브라우징 중 네트워크 요청에서 발견된 S3 버킷을 검색, 나열 및 확인합니다. 기능 S3 버킷 필터링 ACL 권한 추출 기록된 버킷 다운로드 기록된 버킷 관리 탭별 버킷 기록 미소유/중단/취약한 버킷 탐지 설치 Chrome 이 확장 프로그램은 Chrome 웹 스토어에서 설치하거나 다음 단계를 따르세요:...

s3tk

s3tk A security toolkit for Amazon S3 🍊 Battle-tested at Instacart Installation Run: root@kitploit: pip install s3tk You can use the AWS CLI or AWS Vault to set up your AWS credentials: root@kitploit: pip install awscli aws configure See IAM policies needed for each command. Commands Scan Scan yo...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation root@kitploit: pip install...

acltoolkit

acltoolkit acltoolkit — это швейцарский нож для эксплуатации ACL. Он реализует множество атак на ACL. Содержание acltoolkit Содержание Установка Использование Команды get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Установка root@kitploit: pip install...

Adalanche

Adalanche Open Source Attack Graph Visualizer and Explorer Adalanche gives instant results, showing you what permissions users and groups have in an Active Directory. It is useful for visualizing and exploring who can take over accounts, machines or the entire domain, and can be used to find and...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys 버전 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...

CVE-2026-19081

Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...

CVE-2021-40346

CVE-2021-40346 — HAProxy Integer Overflow leading to HTTP Request Smuggling 脆弱性概要 HAProxyはオープンソースベースのリバースプロキシ兼ロードバランサーで、負荷分散やACL（アクセス制御ルール）処理などを担当するソフトウェアです。 CVE-2021-40346は、HAProxyがHTTPヘッダーを内部HTXフォーマットで保存するhtxaddheader関数において、ヘッダー名の長さを検証しないために発生するアクセス制御バイパス（ACL Bypass）の脆弱性です。...

CVE-2026-19081 Missing Authorization Allows Unauthorized Access to Critical POS Functions in Gastromenum's Gastromenum Ticket and QR Menu System

Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...

EUVD-2026-71104

Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...

mud-visualizer

Manufacturer Usage Description MUD Visualizer Warning: mud-visualizer is currently beta. Use at your own risk. This tool can be used to visualize the MUD files in JSON format. Table of Contents Motivation Installation Supported MUD Abstractions Contribution Support Citation License Motivation MUD...

mud-visualizer

Визуализатор описания использования производителя MUD Предупреждение: mud-visualizer в настоящее время находится в стадии бета-тестирования. Используйте на свой страх и риск. Этот инструмент можно использовать для визуализации файлов MUD в формате JSON. Содержание Мотивация Установка Поддерживаем...

CVE-2026-19043

Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-19043

CVE-2026-19043 is a Missing Authorization (ACL bypass) vulnerability in Menulux Portal by Menulux Software Inc. , affecting the critical POS management functions where access is not properly constrained by access control lists. This allows an authenticated low-privilege user to access functionali...

CVE-2026-19043 Authorization Bypass Critical POS Management Functions in Menulux Software's Menulux Portal

Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...

CVE-2021-34527_ACL_mitigation

CVE-2021-34527mitigation 通过设置 WRITE ACL 来缓解 CVE-2021-34527 RCE。 这些脚本可用于添加和移除 CVE-2021-34527（PrintNightmare）的 ACL 缓解措施，是我在 /u/AforAnonymous 的协助下编写的，灵感来自 Huntress 在 /r/MSP 的 Reddit 帖子。我已在易受攻击的 Windows 1909 主机上进行了个人测试。实施 ACL 缓解措施后，导致 https://github.com/cube0x0/CVE-2021-1675 上的 PrintNightmare...

BypassFuzzer

Bypass Fuzzer Оригинальный 403fuzzer.py : ==Примечание: Этот инструмент устарел в пользу моего нового, блестящего расширения для Burp, которое на 1000000% лучше. Спасибо за использование моих инструментов!== Вы можете найти расширение здесь: https://github.com/intrudir/BypassFuzzer-Burp Fuzz...

aclpwn.py

aclpwn.py Aclpwn.py is a tool that interacts with BloodHound to identify and exploit ACL based privilege escalation paths. It takes a starting and ending point and will use Neo4j pathfinding algorithms to find the most efficient ACL based privilege escalation path. Aclpwn.py is similar to the...