CVE-2026-76071

CVE-2026-76071：Netis NC63 的 skkset.cgi ipFilterList 处理器中通过 sscanf %^, 导致的无需认证的预认证栈缓冲区溢出 研究人员： Özcan Ersan @ozcanpng 披露状态 CVE： CVE-2026-76071 厂商： Netis Systems Co., Ltd. 产品： Netis NC63 AC1200 双频千兆 MU-MIMO 无线路由器 测试固件： NC63V3.0.0.3327 受影响组件： /bin/netis.cgi 端点： POST /cgi-bin/skkset.cgi 触发条件：...

CVE-2015-0057

CVE-2015-0057 Exploitation on 32-bit and 64-bit Systems Author: Aaron Adams Translation: 55-AA Translator's Note: Some parts of this article are freely translated. Please refer to the original text for any questions. Terminology: Primitive: Similar to a functional function, it is a collection of...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

MSAPer

MSAPer | CVE-2023-3076 - MStore API Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use Make sure you already install Parallel! Then do: git clone...

WordPress Nokri - Job Board WordPress theme plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover vulnerability

WordPress Nokri - Job Board WordPress theme plugin = 1.6.4 - Missing Authorization to Authenticated Subscriber + Privilege Escalation via Account Takeover vulnerability discovered by Tonn in WordPress Theme Nokri versions = 1.6.4...

CVE-2026-86277

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file deleteexam.php. The manipulation of the argument ID leads to authorization bypass. The attack is possible to be carried out remotely. The...

CVE-2026-79697

A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This affects the function...

Ghost-CMS-Code-Injection-Audit-CVE-2026-26980

Ghost CMS Code Injection Cleaner Removes injected code from every post and page on a Ghost CMS website via the Admin API. Use this to clean up a compromised Ghost site — for example, one affected by the code injection vulnerability CVE-2026-26980 — by stripping attacker-supplied tags and other...

CVE-2026-6279.py

Description This Python script is an exploit tool for CVE-2026-6279 targeting Avada Builder = 3.15.2. Key behavior: scans targets for fusionloadnonce via Avada-specific shortcode/page patterns discovers AJAX endpoint and origin IP bypass if Cloudflare blocks admin-ajax builds exploit requests for...

CVE-2026-62958

A vulnerability in Libriscv allows the attacker to crash the sandbox using an Out of Bounds Read. To create Bad elf: root@kitploit: python3 poc.py samplefile poisonedfile Results: root@kitploit: ❯ python3 poc.py fib poisonedfile Manipulating .text section header at offset 0x250 Manipulating .symt...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in Spring Web integration, Qute, OIDC, RESTEasy and SmallRye GraphQL Vulnerability Details CVEID:CVE-2026-19651 DESCRIPTION: Quarkus quarkus-spring-web extension could allow an attacker to bypass authorization by manipulating...

Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in Proton-J, MongoDB Client, Apache HTTP Client and Netty Vulnerability Details CVEID:CVE-2026-59903 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final,...

Security Bulletin: Vulnerabilities exists in IBM Netezza Software

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 11.3.1.4. Vulnerability Details CVEID:CVE-2025-14920 DESCRIPTION: Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows...

wpbf

wpbf! wpbf is a bruteforce tool to remotely test password strength, username enumeration and plugin detection on a WordPress site. Description ^^^^^^^^^^^ The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js modules adm-zip and websocket-driver (CVE-2026-39244, CVE-2026-54466 and CVE-2026-54490)

Summary IBM App Connect Enterprise runtime and IBM App Connect Enterprise Connector Discovery and OpenAPI Editor are vulnerable to multiple vulnerabilities due to Node.js modules adm-zip and websocket-driver. Vulnerability Details CVEID:CVE-2026-39244 DESCRIPTION: adm-zip before 0.5.18 is...

CVE-2025-29927-PoC-Exploit

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization Bypass in Next.js Middleware You can run this against a vulnerable version here: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 Running Execution is straightforward. 1. Python3 CVE-2025-29927-PoC-Exploit.py It will...

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

CVE-2026-2222 – MQTT Broker CONNECT 数据包堆溢出 程序代码（C + Python） root@kitploit: // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; // remaining length field misinterpreted ; void...

CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header

CVE-2026-1010 – WebSocket 连接走私 概述 反向代理和后端对如何解析带有畸形 WebSocket 升级头的 HTTP 请求存在分歧。代理将其视为一个请求，而后端将其解释为两个，从而允许攻击者走私一个隐藏请求。这可能导致缓存中毒或访问控制绕过。 漏洞详情 类型： 连接走私 / 请求拆分 影响： 未授权访问内部端点，缓存中毒。 根本原因： 代理在未规范化请求的情况下转发该请求，后端对 Upgrade 头的 WebSocket 检测触发后，将后续数据作为新的 HTTP 请求处理。 漏洞利用演示 1. 启动代理和后端： root@kitploit: python...

Rails-doubletap-RCE

Rails-doubletap-exploit 利用路径遍历（CVE-2019-5418）和 Ruby 对象反序列化（CVE-2019-5420）在 Rails 5.2.2 上实现远程代码执行（RCE） 技术分析 ： CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 安全公告 ： CVE-2019-5418 -...