FOSKiller

root@kitploit: ███████╗ ██████╗ ███████╗██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██╔════╝██╔═══██╗██╔════╝██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ █████╗ ██║ ██║███████╗█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██╔══╝ ██║ ██║╚════██║██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗ ██║ ╚██████╔╝███████║██║...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...

CVE-2025-49619

CVE-2025-49619 PoC Questo script sfrutta la CVE-2025-49619 in Skyvern per eseguire un comando di reverse shell. Autore Nome: Cristian Branet GitHub: cristibtz Utilizzo 1. Avvia un listener root@kitploit: nc -lvnp 2. Esegui l'exploit root@kitploit: python3 exploit.py -u "http://:" -k "" -i -p : IP...

cve-2018-15133

POC - CVE-2018-15133 Utilizzo: root@kitploit: $ ./CVE-2018-15133 -h Usage: ./CVE-2018-15133 options Options: -APIKEY string API key del sito web Laravel, codificata in base64 -URL string URL del sito web Laravel da attaccare -command string Comando da eseguire sul sito web vulnerabile; se non...

poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

CVE-2023-27587-PoC

CVE-2023-27587-PoC La semplice PoC di CVE-2023-27587 Cos'è ReadToMyShoe? ReadtoMyShoe RTMS è un'applicazione web rust, yew e axum che ti consente di caricare articoli tramite URL o incollandoli direttamente e ascoltarli in seguito. Impatto Se si verifica un errore durante l'aggiunta di un articol...

Zoho ManageEngine OpManager - SQL Injection

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...

Apache APISIX - Remote Code Execution

A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. When the admin key was changed or the port of Admin API was changed to a port different...

Zoho ManageEngine - getUserAPIKey Authentication Bypass

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 125657, 126002, 126104, and 126118 allow unauthenticated attackers to obtain a user's API key, and then access external...

Tautulli <= 2.16.1 - Path Traversal

Tautulli is a monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images endpoint joins user-controlled path segments onto the newsletter image directory without containment validation. Authentication is not required for this endpoint, allowing...

SmartSearchWP < 2.4.6 - OpenAI Key Disclosure

The plugin does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, thereby leaking the OpenAI API key. id: CVE-2024-6845 info: name: SmartSearchWP 2.4.6 - OpenAI Key Disclosure author: s4e-io severity: medium...

SimpleHelp <= 5.5.7 - Privilege Escalation

SimpleHelp remote support software v5.5.7 and before contains a privilege escalation caused by insufficient access controls in API key creation, letting low-privileges technicians escalate privileges to server admin, exploit requires low-privileges technician access. id: CVE-2024-57726 info: name...

Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

EyesOfNetwork - Hardcoded API Key & SQL Injection

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/apifunctions.php. id: CVE-2020-8656 info: name:...

LiteLLM < 1.25.0 - Remote Code Execution

LiteLLM before 1.25.0 allows authenticated users with the master API key to execute arbitrary Python code through the /guardrails/testcustomcode endpoint intended for custom guardrail testing. The endpoint’s insufficient filtering mechanisms can be bypassed, allowing attackers to abuse Python’s...

ipa-scope

IPA-SCOPE v.2 IPA-SCOPE è uno strumento di analisi statica che prende di mira applicazioni ios e recupera informazioni importanti come link, file interessanti .json,cer,der,api ed è molto utile per mostrare buoni risultati quando si esegue il penetration test di app ios Novità in questo strumento...

vanda-CVE-2025-3102

Vanda CVE-2025-3102 💣 Exploit con interfaccia grafica per la vulnerabilità CVE-2025-3102 nel plugin WordPress SureTriggers = 1.0.78. 🚀 FUNZIONALITÀ Identificazione dei siti vulnerabili 🕵️‍♂️ Sfruttamento automatico con creazione di un utente amministratore 👨‍💻 Interfaccia grafica stile cyberpunk 🌌...

CVE-2025-59528

Version francaise CVE-2025-59528 Prova di Concetto PoC minimo focalizzato sulla validazione tecnica della vulnerabilità in un ambiente autorizzato. Prerequisiti Devi avere un account utente sul dashboard Flowise di destinazione. Devi avere una chiave API valida collegata a quell'account. Devi...

CVE-2026-17520

CVE-2026-17520 affects the Newsletters WordPress plugin prior to 4.17 . The root cause is that the plugin generates its API key from a publicly known value rather than a sufficiently random source, making it predictable. When the optional API feature is enabled, an unauthenticated attacker can co...