CVE-2026-82748

An incorrect authorization flaw in the Elixir library ash-project ash (versions 3.5.13 through before 3.32.2 ) affects Ash.Actions.Aggregate . Aggregates are authorized under a group's read_action, but the query-building code selected the action as opts[:action] || read_action || primary_read. Wh...

CVE-2025-29927

Advanced CVE-2025-29927 Vulnerability Scanner This is a professional-grade scanner designed to detect the CVE-2025-29927 middleware bypass vulnerability in Next.js applications. 🧠 What It Does Uses a real headless browser Playwright to deeply crawl a target website JS-rendered content included...

EUVD-2026-68951

Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies through the atomic path of Ash.updatemany/4. Ash.updatemany/4 runs as a single atomic statement a data-layer updatemany, for example a SQL MERGE whenever an atomic strategy is...

CVE-2026-82746

CVE-2026-82746 is a missing authorization flaw in the ash-project/ash Elixir framework affecting versions 3.29.0 through 3.32.1 . The Ash.update_many/4 function, when using the atomic strategy, executed a single data-layer statement (e.g., a SQL MERGE) that bypassed resource policies even with au...

Nginx-CVE-2013-4547

Nginx Filename Logic Vulnerability CVE-2013-4547 Vulnerability Description Affected versions: Nginx 0.8.41 1.4.3 / 1.5.0 1.5.7 Reference links: https://vulners.com/cve/CVE-2013-4547 https://blog.werner.wiki/file-resolution-vulnerability-nginx/ http://www.91ri.org/9064.html Vulnerability Descripti...

WAF_buster

WAFbuster Disrupt WAF by abusing SSL/TLS Ciphers About WAFbuster This tool was created to Analyze the ciphers that are supported by the Web application firewall being used at the web server end.Reference:https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html.It...

bore

bore 一个用 Rust 编写的现代、简单的 TCP 隧道，可将本地端口暴露给远程服务器，绕过标准的 NAT 连接防火墙。它只做一件事：不多也不少。 root@kitploit: 安装（需要 Rust，见下方其他方式） cargo install bore-cli 在本地机器上 bore local 8000 --to bore.pub 这将把你的本地端口 localhost:8000 暴露给公共互联网上的 bore.pub:，端口号是随机分配的。 类似于 localtunnel 和 ngrok，但 bore 旨在成为一个高效、无偏见的 TCP...

RCE-CVE-2026-10520-CVE-2026-10523

CVE-2026-10520 y CVE-2026-10523 Un generador de artefactos de detección de omisión de autenticación y ejecución remota de código en Ivanti Sentry. Consulte nuestra publicación del blog para obtener detalles técnicos. Detección en acción root@kitploit: $ python3 CVE-2026-10523.py --url...

compaXSS

CompaXSS Bypass XSS Reflected Cross-site scripting ======= root@kitploit: Example: python compaxss.py --url https://support.snapchat.com/login?next=-run Developers Jose Pino - @jofpin Juan Eljach - @juaneljach...

CVE-2023-27350

! Be careful executing this as it re-configures the server config in order to execute commands. The script reverts the changes on exit but might not revert it if the process is improperly killed ! CVE-2023-27350 Papercut Unauthenticated RCE Versions root@kitploit: The script automatically tests i...

CVE-2021-3560

CVE-2021-3560 a reliable C based exploit for CVE-2021-3560. Summary: Yestreday i stumbled upon this blog post by Kevin Backhouse discovered this vulnerability, i tried the bash commands provided in the blogpost and to my surpise it worked on my Kali Linux box! CVE-2021-3560 is an authentication...

CVE-2026-82741 Ash.Type.Union with :map_with_tag does not force the tag on dump, enabling tag confusion

Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type tag of an Ash.Type.Union value that uses storage: :mapwithtag, bypassing that member's validation and any tag-based authorization. For a union with storage: :mapwithtag, each...

EUVD-2026-68946

Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type tag of an Ash.Type.Union value that uses storage: :mapwithtag, bypassing that member's validation and any tag-based authorization. For a union with storage: :mapwithtag, each...

CVE-2026-82741

CVE-2026-82741 affects the ash-project ash Elixir framework (versions 2.14.18 through before 3.32.2 ). The vulnerability is in Ash.Type.Union.dump_to_native/2 (lib/ash/type/union.ex), which did not force the configured tag when writing values with storage: :map_with_tag. An attacker can submit a ...

CVE-2017-7921

CVE-2017-7921 CVE-2017-7921 is a critical vulnerability CVSS score: 9.8 affecting multiple Hikvision IP camera and DVR models, first disclosed in 2017. It stems from an improper authentication flaw that allows unauthenticated remote attackers to bypass login mechanisms and gain unauthorized acces...

CVE-2024-41276

CVE-2024-41276 Kaiten Authentication Bypass Kaiten - a workflow management system. A vulnerability in Kaiten allows attackers to bypass the PIN code authentication mechanism. The application requires users to input a 6-digit PIN code sent to their email for authorization after entering their logi...

CVE-2024-10924

POC for CVE-2024-10924 An error handling flaw in the REST API of the Really Simple Plugins WordPress plugin versions between 9.0.0 and 9.1.1.1 included allows an attacker, when Two-Factor Authentication is enabled, to bypass authentication and take control of an existing user or administrator...

CVE-2026-82740 Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs

Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.applyconstraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...

EUVD-2026-68945

Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.applyconstraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...

403Kangaroo

403Kangaroo !! This tool is still under development if you have any issues please don't hesitate to contact me via linkedin or smth 403/401 bypass tool via certain headers and values headers.txt,values.txt. When you load the extension for the first time it will open a headers.txt file and write t...