sshuttle

sshuttle: donde el proxy transparente se encuentra con la VPN y con ssh Hasta donde sé, sshuttle es el único programa que resuelve el siguiente caso común: Tu máquina cliente o enrutador es Linux, FreeBSD, MacOS o Windows. Tienes acceso a una red remota a través de ssh. No necesariamente tienes...

CVE-2025-68860

CVE-2025-68860 WordPress Mobile builder Plugin Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder allows Authentication Abuse. This issue affects Mobile builder from n/a through 1.4.2. CVSS Score: 9.8 CRITICAL Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H A...

nat-tunnel

NAT Tunnel v0.01 Si tienes acceso a un servidor con IP pública y puertos sin filtrar, puedes ejecutar el servidor NAT Tunnel NT en ese servidor, y el cliente NT en tu máquina detrás de un NAT. El servidor requiere 2 puertos abiertos: uno para la comunicación con el cliente NT --admin, y el otro...

CVE-2025-67876

CVE-2025-67876: ChurchCRM tiene XSS almacenado en el nombre del rol de grupo que conduce al secuestro de la sesión de administrador Descripción general...

CVE-2026-100885

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint. The manipulation results in authorization bypass. The attack may be launched...

CVE-2020-6287-Sap-Add-User

CVE-2020-6287-Sap-Add-User sap netweaver portal add user administrator...

Mass-CVE-2023-28121-kdoec

CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User How to use This script using Python3. Install requirements pip install -r requirements.txt Reference https://wpscan.com/vulnerability/0f78a245-866c-462e-bd23-43dfadb57072...

noPac

Acerca de Explotando CVE-2021-42278 y CVE-2021-42287 para suplantar al administrador del dominio desde un usuario de dominio estándar Modificado desde sam-the-admin. Uso root@kitploit: SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used ...

CVE-2026-100882

A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.labe...

RemotePotato0

RemotePotato0 ACTUALIZACIÓN 21-10-2022: El escenario principal del exploit RPC- LDAP de RemotePotato0 ha sido corregido. Más detalles en -- https://twitter.com/splintercode/status/1583555613950255104 Solo otra escalada de privilegios de Windows "No se corregirá" de Usuario a Administrador de...

CVE-2023-41425-wonderCMS_RCE

CVE-2023-41425-wonderCMSRCE Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. For educational purposes only Requires knowledge of loginURL, admin access or the...

CVE-2022-0169

CVE-2022-0169 — WordPress Photo Gallery SQLi PoC This is a simple Python proof-of-concept PoC for CVE-2022-0169 , an SQL injection vulnerability in the WordPress Photo Gallery plugin. What it does Checks the WordPress version if available Exploits the vulnerable admin-ajax.php endpoint Dumps...

CVE-2021-43032

CVE-2021-43032 In XenForo ≤ 2.2.7, a threat actor with access to the admin panel can save cross-site scripting payloads in any function within the application that accepts HTML code. A payload placed within the 'Advertising' functionality will execute globally on the client side, allowing for...

CVE-2020-15931

CVE-2020-15931 Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability Vulnerbility Overview Netwrix Account Lockout Examiner ALE before 5.1 allows an unauthenticated, remote adversary to trigger a connection to an attacker-controlled system and capture the...

Exchange2domain

Exchange2domain Herramientas todo en uno de privexchange. Solo necesitas abrir el puerto del servidor web, por lo que no se requieren privilegios elevados. ¡Gran artículo! Abusando de Exchange: una sola llamada a la API te separa de Domain Admin. Requisitos Estas herramientas requieren impacket...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

Evolution CMS Reflected XSS v3.2.3 Author: Sergio Description: Multiple Cross-site scripting XSS reflected vulnerabilities in the evolution v.3.2.3 installation process Admin options allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the cmsadmin,...

CVE-2026-101065

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...

Make-and-Break

Make-and-Break Crear y explotar una Máquina Virtual vulnerable Descripción: Construí una máquina virtual personalizada, ejecutando Ubuntu 18.04.1 y Webmin 1.810. Usando CVE-2019-15107 para explotar una puerta trasera en la Interfaz de Administración del Sistema Linux PRUEBA DE CONCEPTO --- Se...

CVE-2019-1040-dcpwn

CVE-2019-1040-dcpwn Great writeup! Exploiting CVE-2019-1040 - Combining relay vulnerabilities for RCE and Domain Admin . So, I wrote dcpwn.py for easy to use. Requirements These tools require impacket. You can install it from pip root@kitploit: pip install impacket Usage root@kitploit: usage:...

CVE-2026-20896-Gitea-Authentication-Bypass

CVE-2026-20896 - Gitea ≤1.26.2 Authentication Bypass 1. What is Gitea? Gitea is a lightweight, open-source Git hosting platform that allows organizations and developers to manage source code repositories, track issues, review changes, and collaborate on software projects. It provides functionalit...