Lucene search
+L

4168 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/13 10:36 a.m.โ€ข13 views

Project-Pwnag0dchi

Project Pwnag0dchi Created this since a lot of people were asking about the customized plugins & configurations I use. Following this guide, your Pwnagotchi will look exactly as seen on my socials & YouTube videos in 5mins tops. You'll also find a complete Pwnagotchi noob build guide + some commo...

5.9AI score
SaveExploits0References29
Kitploit
Kitploit
โ€ขadded 2026/09/13 9:45 a.m.โ€ข8 views

pico-usb-wifi

= pico-usb-wifi :toc: macro :toclevels: 3 :idprefix: :idseparator: - pico-usb-wifi is firmware for the Raspberry Pi Pico W that turns it into a driverless USB Wi-Fi adapter, enumerating as a USB CDC-NCM device. :figure-caption: AI Slop .pico-usb-wifi Diagram...

6AI score
SaveExploits0References6
Kitploit
Kitploit
โ€ขadded 2026/09/13 7:03 a.m.โ€ข8 views

pi-pwnbox-rogueap

Pi-PwnBox ๐Ÿš€ -RogueAP ๐Ÿ“ก Homemade headless PwnBox / RogueAP based on Raspberry Pi & Alfa WiFi USB Adapters. WiFi Hacking Cheatsheets & Mind Map ๐Ÿ’ก Designed to be used for: On-site Red Team engagements, WiFi Security assessments, WiFi Attacks practice. Table of Contents Pi-PwnBox-RogueAP Equipment us...

6AI score
SaveExploits0References5
Kitploit
Kitploit
โ€ขadded 2026/09/13 5:35 a.m.โ€ข21 views

wifit3

wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...

5.9AI score
SaveExploits0References10
Nuclei
Nuclei
โ€ขadded 2026/09/13 2:04 a.m.โ€ข77 views

Astro Cloudflare Adapter - Server Side Request Forgery

Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URL...

7.2CVSS5.7AI score0.00829EPSS
SaveExploits1References3
Kitploit
Kitploit
โ€ขadded 2026/09/12 4:43 p.m.โ€ข7 views

vmxnet3Hunter

Summary: vmxnet3Hunter will find all virtual machines running the vmxnet3 adapter and flag the parent cluster as vulenrable to the recent vmEscape advisory. VMware Advisory: https://www.vmware.com/security/advisories/VMSA-2018-0027.html CVE: CVE-2018-6981, CVE-2018-6982...

8.8CVSS7AI score0.01322EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/12 7:06 a.m.โ€ข6 views

CVE-2025-58179-Check

CVE-2025-58179-Check CVE-2025-58179-Check es un script simple de Python para verificar la vulnerabilidad SSRF Server-Side Request Forgery / Content Spoofing en el endpoint /image del framework Astro. Esta vulnerabilidad se rastrea como GHSA-qpr4-c339-7vq8 y CVE-2025-58179. Antecedentes de la...

7.2CVSS5.9AI score0.00829EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
โ€ขadded 2026/09/11 10:02 p.m.โ€ข10 views

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI external $ref dereferencing, but the latest patched dependency mcp-from-openapi 2.3.0 still makes backend-origin requests to loopback when the target is reached through hostname...

7.5CVSS0.00319EPSS
SaveExploits1References2Affected Software3
RedHat Linux
RedHat Linux
โ€ขadded 2026/09/10 11:22 p.m.โ€ข6 views

axios: Axios: Information disclosure of proxy credentials via redirect flows

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...

8.2CVSS0.00664EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
โ€ขadded 2026/09/10 11:22 p.m.โ€ข6 views

axios: Axios: Denial of Service due to unenforced request and response size limits

A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or...

7.5CVSS0.00669EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
โ€ขadded 2026/09/10 11:22 p.m.โ€ข7 views

axios: Axios: Information disclosure of proxy credentials via HTTP redirects

A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can...

7.5CVSS0.0066EPSS
SaveExploits1References5
OSV
OSV
โ€ขadded 2026/09/10 10:47 p.m.โ€ข6 views

GHSA-P569-5GJG-9CMJ rclone: RC per-server auth-proxy bypass

Summary serve/start accepts protocol options in a per-server proxyOpt object. The FTP and S3 RC adapters parse that object and pass it to their server constructors, but the constructors decide whether proxy authentication is enabled by checking the process-global proxy.Opt.AuthProxy instead of th...

9.1CVSS0.00492EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
โ€ขadded 2026/09/10 4:34 p.m.โ€ข8 views

axios: Axios: Information disclosure of proxy credentials via HTTP redirects

A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can...

7.5CVSS0.0066EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
โ€ขadded 2026/09/10 4:34 p.m.โ€ข5 views

axios: Axios: Denial of Service due to unenforced request and response size limits

A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or...

7.5CVSS0.00669EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
โ€ขadded 2026/09/10 4:34 p.m.โ€ข7 views

axios: Axios: Information disclosure of proxy credentials via redirect flows

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...

8.2CVSS0.00664EPSS
SaveExploits1References5
OSV
OSV
โ€ขadded 2026/09/10 2:53 a.m.โ€ข7 views

CLEANSTART-2026-BR58082 Echo is a Go web framework

Multiple security vulnerabilities affect the kube-metrics-adapter package. Echo is a Go web framework. See references for individual vulnerability details...

9.8CVSS5.8AI score0.01042EPSS
SaveExploits2References32
NVD
NVD
โ€ขadded 2026/09/09 12:17 p.m.โ€ข6 views

CVE-2026-87806

Parse Server versions = 9.0.0 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the client-supplied password to the directory without verifying that a password had been supplied, and treated any non-error response from the directory...

9.1CVSS0.00289EPSS
SaveExploits0References2
CVE
CVE
โ€ขadded 2026/09/09 11:20 a.m.โ€ข18 views

CVE-2026-87806

Parse Server versions = 9.0.0

9.1CVSS0.00289EPSS
SaveExploits0References2
OSV
OSV
โ€ขadded 2026/09/09 11:20 a.m.โ€ข5 views

CVE-2026-87806 Parse Server 9.0.0 Authentication Bypass via LDAP Empty Password

Parse Server versions = 9.0.0 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the client-supplied password to the directory without verifying that a password had been supplied, and treated any non-error response from the directory...

9.1CVSS5.8AI score
SaveExploits0References4
Kitploit
Kitploit
โ€ขadded 2026/09/09 9:45 a.m.โ€ข4 views

quick-fix-cve-2024-38063

quick-fix-cve-2024-38063 quick powershell script to fix cve-2024-38063 Donation if you want to support my works, you can donate me at the following monero address: root@kitploit: 4B9WQivaHfd3miDfPKEfCianocGpBx9d8FXycz2vmNW3aBDVKHgkBd9Gmapt4RBVEpTwnehujsiUBBehUiLvnEHs7VFstCC Or using PayPal:...

9.8CVSS8.2AI score0.70564EPSS
SaveExploits26
Rows per page
Query Builder