CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter

CVE-2026-5050 – Inyección LDAP ciega mediante filtro sin escapar Código del programa simulación con Python y ldap3 root@kitploit: ldapserversim.py - Simulated LDAP authentication server from flask import Flask, request, jsonify app = Flaskname Fake user database USERS = 'admin': 'password':...

CVE-2019-17240

CVE-2019-17240 漏洞利用工具 Bludit CMS 3.9.2及之前版本存在一个安全漏洞，可绕过其针对登录失败10次以上用户所设置的抗暴力破解机制。 该漏洞由 Rastating 发现。 提交一个带有 X-Forwarded-For 头值（伪造字符串）的登录请求时，该请求会被成功处理，而失败的登录尝试则会记录在该伪造字符串上。 上述脚本正是利用此漏洞绕过抗暴力破解机制。 登录页面的请求体中包含 csrf 令牌，因此在每次携带凭证发送 POST 请求之前，都需要从上一次响应的源码中获取 csrf 令牌。 一种实现方法是：先发送 GET 请求获取 csrf...

CVE-2026-76705

A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with Admin privilege to execute arbitrary commands on the underlying operating system...

CVE-2026-18424

Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs share the same host, only the first ValidatedRemoteUrl is retained and reused for every later URL with that host. A...

CVE-2022-1329

WordPress插件 - Elementor 3.6.0 3.6.1 3.6.2 远程代码执行 root@kitploit: 日期: 2023年4月16日 漏洞利用作者: Việt Hùng https://github.com/phanthibichtram12 供应商主页: https://elementor.com/ 软件链接: https://wordpress.org/plugins/elementor/advanced/ 向下滚动选择版本 版本: 3.6.0, 3.6.1, 3.62 测试环境: WordPress 5.9.3 不依赖操作系统，因为此漏洞利用不提供有效载荷...

Exploit for Improper Authentication in Jfrog Artifactory

CVE‑2026‑82329 – JFrog Artifactory Auth B...

CVE-2026-37197

CVE-2026-37197 - NukeViet CMS v4.5.07 中的服务端请求伪造（SSRF）漏洞 概述 VINADES JSC NukeViet CMS v4.5.07 的 管理员远程上传功能 中存在 服务端请求伪造（SSRF） 漏洞。该问题允许已认证的管理员在上传文件时提供精心构造的远程文件 URL，从而触发指向任意 URL 的服务端 HTTP 请求。 此漏洞可能允许攻击者与内部网络服务交互、扫描内部资源，或访问外部无法直接访问的受限端点。 漏洞详情 CVE 编号： CVE-2026-37197 漏洞类型： 服务端请求伪造（SSRF） 厂商： VINADES JSC 产品...

traefik-stripprefix-auth-bypass-cve-2026-48020-path-normalization

CVE-2026-48020 — Traefik StripPrefix 路由级认证绕过（PoC） 一个独立的对于 CVE-2026-48020 的概念验证，该漏洞是 Traefik 的 StripPrefix 中间件中的路由级认证/授权绕过，由于路由决策做出 之后 才进行路径规范化。 形如 GET /api../admin 的请求在路由时通过一个 公开的 PathPrefix/api路由器（因此受保护路由器的basicAuth中间件从未附加），但在StripPrefix剥离/api且 Go 的req.URL.JoinPath规范化剩余的/../admin后，后端收到的路径是/admin...

MAL-2026-16218 Malicious code in tol8t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33f4cd3c64d0ca0eb65dc5947fce3700c94ec8bea6083e63da1e6ba31321e27 package.json declares preinstall and postinstall lifecycle hooks that use wget to POST installer host identifiers to a hardcoded Discord webhook at...

Malicious code in tol8t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33f4cd3c64d0ca0eb65dc5947fce3700c94ec8bea6083e63da1e6ba31321e27 package.json declares preinstall and postinstall lifecycle hooks that use wget to POST installer host identifiers to a hardcoded Discord webhook at...

Boost Engagement with Free Passkeys by Wordfence

Imagine you can sign in with one click. Now imagine all the users on your WooCommerce store or WordPress powered website can sign in with one click. Firstly it makes your life a lot easier. But more importantly, you’ve removed friction from users logging in to make purchases, to engage in your...

CVE-2026-65400

CVE-2026-65400 捐赠 通过 PayPal 或扫描下方的二维码来支持本项目的维护。 ⚡ 简单用法 请仅在安全且经授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离实验室环境 经授权的渗透测试环境 示例配置： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activa...

EUVD-2026-79503

Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs share the same host, only the first ValidatedRemoteUrl is retained and reused for every later URL with that host. A...

CVE-2026-18424 Concrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use different ports

Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs share the same host, only the first ValidatedRemoteUrl is retained and reused for every later URL with that host. A...

CVE-2026-18424 Concrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use different ports

Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs share the same host, only the first ValidatedRemoteUrl is retained and reused for every later URL with that host. A...

CVE-2026-18424

Concrete CMS versions 9.0.0 through 9.5.2 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the remote file import feature. The root cause is a cross-port reuse of a validated DNS pin : when multiple URLs share the same host, only the first ValidatedRemoteUrl is retained and r...

CVE-2024-48652

CVE-2024-48652 Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field Steps to Reproduce: 1.Open the URL: http://127.0.0.1/admin/dashboard 2.Log in using admin credentials. 3.Navigate to the "Settings" section...

Next.js-Proof-of-Concept

Next.js CVE 概念验证 本仓库包含三个 Next.js 漏洞的可复现概念验证环境。每个 PoC 包含一个存在漏洞的目标、一个已修复的目标，以及一个演示两者行为差异的脚本。 本项目的目标是让每个问题的根本原因和实际影响在最小环境中易于观察。 包含的漏洞 CVE| 安全公告| 影响| 受影响版本| 修复版本 ---|---|---|---|--- CVE-2025-29927| GHSA-f82v-jwr5-mffw| 当访问控制仅依赖中间件时，授权绕过| 15.2.2| 15.2.3 CVE-2026-27978| GHSA-mq59-m269-xvcx| Origin: nul...

CVE-2022-21661

WordPress CVE-2022-21661 扫描器 用法 root@kitploit: python wordpressscanner.py -H -p -ssl -proxy -path 帮助 root@kitploit: WordPress Scanner for CVE-2022-21661 options: -h, --help show this help message and exit -H HOST, --host HOST Host or IP address -p PORT, --port PORT Port number -ssl, --sslsupport...

cve-2025-1323

cve-2025-1323 WP-Recall 插件 SQL 注入 ⚠️ 法律免责声明 本工具仅用于授权的安全测试和教育用途 。 未经明确许可，请勿对系统使用。滥用可能违法。 ✅ 依赖要求 Python 3.x requests 模块 安装依赖： root@kitploit: pip install requests python CVE-2025-1323.py Enter target URL e.g. https://target.com/wp-admin/admin-ajax.php: https://example.com/wp-admin/admin-ajax.php Ente...