CVE-2026-24031

CVE-2026-24031: Dovecot SQL authentication bypass authentication + user enumeration This repository contains a proof-of-concept authentication-bypass exploit for CVE-2026-24031 , a SQL injection in Dovecot's SQL-based authentication introduced as a regression in Dovecot 2.4.0 / 3.1.0. In the test...

nate158g-m-w-n-l-p-d-a-o-e

nate158g-m-w-n-l-p-d-a-o-e Este módulo requiere Metasploit: https://metasploit.com/download Código fuente actual: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q Este exploit requiere que Metasploit tenga un FQD...

CVE-2026-46300_Fragnesia

🧨 Fragnesia — CVE-2026-46300 Linux Kernel LPE Audit & Exploit Toolkit · Page-Cache / XFRM ESP-in-TCP espintcp Regression Interactive audit → LPE prerequisite detection → Automated exploit execution after confirmation ⚠️ Ethical & Legal Warning This tool is intended solely for legitimate and...

CVE-2021-3129

CVE-2021-3129 root@kitploit: Generate a phar package with custom commands: php -d'phar.readonly=0' ./phpggc monolog/rce1 system "cat /etc/passwd" --phar phar -o php://output | base64 -w0 php -a enter the php command line environment $fp = fopen'php://output', 'w'; streamfilterappend$fp,...

CVE-2026-82329

CVE-2026-82329 — JFrog Artifactory Unauthenticated Authentication Bypass Mass Exploit -red.svg Critical Authentication Bypass CVSS 9.8 — Actively Exploited in the Wild This tool is a mass exploit for CVE-2026-82329, a vulnerability that allows an unauthenticated attacker with network access to...

Malicious code in greensaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd840e550f39e1f29f7a50b0cd121c3fa5e78e99954f22009f03b5ac775f91ec [email protected] declares a postinstall script "node lib/greensaver.js" that runs automatically on npm install. The script decodes two files...

MAL-2026-16138 Malicious code in greensaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd840e550f39e1f29f7a50b0cd121c3fa5e78e99954f22009f03b5ac775f91ec [email protected] declares a postinstall script "node lib/greensaver.js" that runs automatically on npm install. The script decodes two files...

MAL-2026-16137 Malicious code in cr-bot-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd83408820ca65c51cea223a061260109332ba408ca3a43ba00ef827f1ad74f preinstall.js and postinstall.js execute automatically on npm install. preinstall.js reads.env files from the current and parent directories, walks t...

Malicious code in cr-bot-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd83408820ca65c51cea223a061260109332ba408ca3a43ba00ef827f1ad74f preinstall.js and postinstall.js execute automatically on npm install. preinstall.js reads.env files from the current and parent directories, walks t...

MAL-2026-16139 Malicious code in tailwind-form-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb2aed2f968e146b433d2a2600f17104f0dcacfd951190771f8e59aee3a252 [email protected] impersonates @tailwindcss/forms package.json sets repository to https://github.com/tailwindlabs/tailwindcss-forms but...

Malicious code in tailwind-form-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb2aed2f968e146b433d2a2600f17104f0dcacfd951190771f8e59aee3a252 [email protected] impersonates @tailwindcss/forms package.json sets repository to https://github.com/tailwindlabs/tailwindcss-forms but...

Malicious code in tracker-cloudflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b5bacf5779f1a1fa161ee38acbf61fda0dc18b3d0fe35213e2b0dc230c06e4 The package's preinstall hook runs node index.js, which collects host identifiers os.hostname, os.userInfo, homedir, DNS servers, cwd along with the...

MAL-2026-16140 Malicious code in tracker-cloudflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b5bacf5779f1a1fa161ee38acbf61fda0dc18b3d0fe35213e2b0dc230c06e4 The package's preinstall hook runs node index.js, which collects host identifiers os.hostname, os.userInfo, homedir, DNS servers, cwd along with the...

smb

root@kitploit: ███████╗███╗ ███╗██████╗ ███║ ██╔════╝████╗ ████║██╔══██╗ ║██║ ███████╗██╔████╔██║██████╔╝ ██║ ██ ║██║ ╚════██║██║╚██╔╝██║██╔══██╗ ╚██╗ ██ ╔╝██║ ███████║██║ ╚═╝ ██║██████╔╝ ╚████╔╝ ██║ ╚══════╝╚═╝ ╚═╝╚═════╝ ╚═══╝ ╚═╝ SMB es un protocolo de red que permite compartir archivos,...

scenario75-cyber-range

Scenario75 Cyber Range A self-contained Red vs Blue cyber ran...

CVE-2024-55270

Sistema de Gestión de Estudiantes 1.0 CVE-2024-55270 Resumen El Sistema de Gestión de Estudiantes SMS es una aplicación web desarrollada usando PHP y MySQL para gestionar información de estudiantes. Este repositorio contiene el código fuente y los detalles del sistema, junto con un informe de...

serviceDetector

serviceDetector Detect whether a service is installed blindly and/or running if exposing named pipes on a remote machine without using local admin privileges. About In more detail, running this script connects to the target SMB service 445/tcp remotely and does the following: 1. Checks if the...

CVE-2026-44715

OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the startHl7ArchiveMigration method is accessible, which should be restricted to admin-level accounts. Versions...

CVE-2020-8816

CVE 2020-8816 : Pi-hole versiones = 4.3.2 se ve afectado por una vulnerabilidad de ejecución remota de código. Un usuario autenticado del portal web puede ejecutar un comando arbitrario en el servidor subyacente con los privilegios del usuario local que ejecuta el servicio. EJEMPLO : go run...

CVE-2021-25253

root@kitploit: Exploit Title: Trend Micro OfficeScan Client 10.0 - ACL Service LPE Date: 2023/05/04 Exploit Author: msd0pe Vendor Homepage: https://www.trendmicro.com My Github: https://github.com/msd0pe-1 Cliente de Trend Micro OfficeScan: Las versiones icacls "C:\Program Files x86\Trend...