Lucene search
+L

6763 matches found

Kitploit
Kitploit
added 2026/09/19 4:38 a.m.816 views

espoofer

espoofer espoofer is an open-source testing tool to bypass SPF, DKIM, and DMARC authentication in email systems. It helps mail server administrators and penetration testers to check whether the target email server and client are vulnerable to email spoofing attacks or can be abused to send spoofi...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/19 4:00 a.m.155 views

npcap

Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 8:24 p.m.27 views

pcc

PHP Secure Configuration Checker Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 6:56 p.m.10 views

red-shadow

Red-Shadow Lightspin AWS IAM 漏洞扫描器 描述 扫描您的 AWS IAM 配置,查找基于错误配置的拒绝策略(该策略不会影响组中的用户)而出现的影子管理员,由 Lightspin 安全研究团队发现。 该工具检测以下 IAM 对象中的配置错误: 托管策略 用户内联策略 组内联策略 角色内联策略 研究摘要 AWS IAM 对应用于组的拒绝策略的评估逻辑,与大多数安全工程师在其他授权机制中习惯的工作方式不同。 假如一个针对组资源的策略有显式拒绝,那么它只会影响组操作,而不会影响用户操作。如果组织假设该过程与例如 Active Directory...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 12:14 p.m.13 views

CVE-2020-3952

检测 CVE-2020-3952 漏洞状态的脚本 此脚本受 Guardicore 漏洞利用 启发,但有一个细微差别:它不会创建管理员用户。 它通过验证内置 Administrators 组是否可以被创建或追加无害的 'description' 属性来污染,从而评估漏洞状态。 检查 用法: root@kitploit: $ python exploitcheck.py vserverip 检测攻击尝试 Suricata 签名规则 vmware.rules 是一种简单的方法,用于捕获针对 Administrators 组的 LDAP 修改操作。它需要使用正确的签名 ID sid...

9.8CVSS8.1AI score0.90384EPSS
SaveExploits20References1
Kitploit
Kitploit
added 2026/09/18 9:15 a.m.55 views

nysm

nysm A stealth post-exploitation container. Table of Content 1. Introduction 2. Installation 2.1 Requirements 2.2 Linux headers 2.3 Build 3. Usage 3.1 Examples 4. How it works 4.1 In general 4.2 Hide eBPF objects 4.3 Hide Auditd logs 4.4 Hide PIDs 4.5 Hide sockets 5. Limitations Introduction...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 6:14 a.m.93 views

psudohash

psudohash Cool New Features of v1.1.0 Special thanks to DavidAngelos: ▶️ Added a progress bar in every step to track execution. ▶️ Added options: In-order joins -i / --inorder: join keywords only in the original order e.g. foo,bar,baz → foo, bar, baz, foobar, foobaz, barbaz, foobarbaz. All-order...

5.7AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.29 views

Skitter Slideshow <= 2.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

The Skitter Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.2 due to insufficient input sanitization and output escaping. id: CVE-2025-28906 info: name: Skitter Slideshow = 2.5.2 - Authenticated Administrator+ Stored Cross-Site...

5.9CVSS8.1AI score0.00507EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.111 views

FlatnuX CMS - Directory Traversal

A path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action. id: CVE-2012-4878 info: name: FlatnuX CMS - Directory Traversal author: daffainfo severity:...

5CVSS5.9AI score0.08761EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2026/09/16 3:45 p.m.7 views

keycloak-services: keycloak-services: Realm default-group reads disclose hidden groups under FGAP v2

A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This component is responsible for managing groups that are automatically assigned to new users within a realm. The issue allows a delegated administrator with realm-viewing permissions to see the names and...

6.5CVSS0.00212EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/08 2:17 p.m.9 views

CVE-2026-73317

XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying an arbitrary job class and actor user ID in the POST body...

5.1CVSS0.00273EPSS
SaveExploits2References5
EUVD
EUVD
added 2026/09/08 1:18 p.m.12 views

EUVD-2026-72754

XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying an arbitrary job class and actor user ID in the POST body...

5.1CVSS5.9AI score0.00273EPSS
SaveExploits2References3
EUVD
EUVD
added 2026/09/05 12:31 a.m.11 views

EUVD-2026-71778

ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-administrators to delete all host pools and member bindings. Attackers can issue POST requests to the delete pools endpoint to irreversibly destroy every host pool, removing traff...

7.1CVSS5.2AI score0.00286EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/08/19 6:00 a.m.20 views

EUVD-2026-62270

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are...

7.1CVSS5.3AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/10 8:15 p.m.41 views

CVE-2026-73033 Sucuri WordPress Plugin 2.7.3 Path Traversal via integrity.lib.php

Sucuri Security WordPress plugin through version 2.7.3 contains a path traversal vulnerability in the pageIntegritySubmission method in src/integrity.lib.php that allows authenticated administrators to delete arbitrary files by supplying directory traversal sequences in the sucuriscanintegrity...

7CVSS0.00729EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/10 7:16 a.m.20 views

CVE-2026-18200

The FoodBoxBooker WordPress plugin before 1.0.8 does not verify that the user account being updated belongs to the user making the request, allowing authenticated users, with Subscriber-level access and above, to modify the profile details of arbitrary users, including administrators...

4.3CVSS0.00152EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/10 6:00 a.m.21 views

CVE-2026-13701

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

5.3AI score0.00168EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/10 6:00 a.m.17 views

CVE-2026-18470

The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the account's owner, and does not adequately redact the address returned in its response, allowing unauthenticated users to obtain registered users' email addresses, including...

5.2AI score0.00316EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/10 6:00 a.m.17 views

EUVD-2026-55032

The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the account being reset or to the party that completed the verification, keying it instead on a value the client controls, allowing unauthenticated attackers to take over the account of...

5.3AI score0.00279EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/10 6:00 a.m.17 views

EUVD-2026-55030

The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the account's owner, and does not adequately redact the address returned in its response, allowing unauthenticated users to obtain registered users' email addresses, including...

7.5CVSS5.2AI score0.00316EPSS
SaveExploits0References1
Rows per page
Query Builder