10787 matches found
EUVD-2026-65491
A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The...
CVE-2021-26855_PoC
CVE-2021-26855PoC Meine frühen SSRF-Payloads CVE-2021-26855 für Exchange Server 2019... Payload 1 root@kitploit: curl -i -s -k -X $'GET' -H $'Host: ' -H $'User-Agent: alex666' -H $'Connection: close' -b $'X-AnonResource=true;...
CVE-2026-78684
vLLM versions prior to 0.27.0 are susceptible to a denial-of-service condition through improper handling of the DeepStream backend. The root cause is a failure to classify DeepStream as a GPU backend combined with missing pixel-limit enforcement in the decode path. An unauthenticated attacker can...
CVE-2026-49263
A flaw was found in Capstone, a disassembly framework, affecting its WebAssembly WASM backend. A remote attacker could exploit this by providing a specially crafted brtable instruction. This could lead to a denial of service, where the disassembler gets stuck in a loop, or cause parser...
CVE-2026-49282
A flaw was found in Capstone. The csinsnname application programming interface API in the M68K and RISCV backends does not properly validate caller-supplied instruction IDs. An attacker can provide an invalid instruction ID, leading to an out-of-bounds read. This can cause the process to crash,...
CVE-2024-23700-C2-Server
CVE-2024-23700 - C2 Server: Server di comando e controllo e raccolta informazioni citestartProgetto che illustra la progettazione e la costruzione di un server di comando e controllo C2 Server per lo scenario sperimentale di sfruttamento della vulnerabilità di escalation dei privilegi...
CVE-2026-77129
CVE-2026-77129 is a Server-Side Template Injection (SSTI) in the TYPO3 extension Event management and registration (sf_event_mgt). The extension passes an editor-configurable email subject string directly into a Fluid template source without sanitization. A backend user with edit access to the ev...
CVE-2026-77137
CVE-2026-77137 is a SQL injection vulnerability in the TYPO3 extension "Forms Export" (extension key: frp_form_answers ). The extension fails to properly sanitize user input before using it in a database query, allowing a low-privileged backend user to inject arbitrary SQL through a URL parameter...
EUVD-2026-65339
The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...
bucky
Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...
airstrike
AirStrike Stage0 Dieses Projekt ist ein hochgradig anpassbarer Stage0-C2, der als Vorlage für deinen eigenen C2 verwendet oder als Basis für deine eigenen C2-Agenten genutzt werden kann. Derzeit besteht dieses Projekt aus 4 verschiedenen Teilen: 1. agent ist ein Ordner mit zwei verschiedenen...
ProxyNotShell-PoC
CVE-2022-41040 और CVE-2022-41082 के लिए कार्यशील PoC उर्फ ProxyNotShell आवश्यकता: pip install requestsntlm2 requests उपयोग: root@kitploit: python pocaug3.py श्रेय: ProxyShell PoC स्क्रिप्ट का स्रोत: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc की ब्लॉग...
spring-cloud__spring-cloud-config_CVE-2020-5410_2-1-8-RELEASE
//// NON MODIFICARE QUESTO FILE. È STATO GENERATO. Le modifiche manuali a questo file andranno perse quando verrà rigenerato. Modifica invece i file nella directory src/main/asciidoc/. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-config/tree/master.svg?style=svg"CircleCI",...
evtx
EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...
gha-lab-5ed08d6a80
z80pack z80pack ist ein ausgereifter Emulator mehrerer Plattformen mit 8080- und Z80-CPU. Die vollständige Dokumentation finden Sie unter https://www.icl1900.co.uk/unix4fun/z80pack Ubuntu Erstellen Installieren Sie zuerst die benötigten Abhängigkeiten für X11: root@kitploit: sudo apt install...
CVE-2025-14174-analysis
Analisi di CVE-2025-14174: Scrittura fuori dai limiti dello Staging Buffer Metal di ANGLE Analisi tecnica e proof-of-concept per CVE-2025-14174...
urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure
A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...
CVE-2026-47155 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0...