Lucene search
+L

5982 matches found

Kitploit
Kitploit
•added 2026/09/29 4:40 a.m.•18 views

CVE-2025-27415-PoC

CVE-2025-27415 PoC Nuxt3 cache poisoning A repository for setting up the cache poisoning vulnerability environment that occurs in nuxt3 =3.0.0 3.16.0 Vulnerability Summary When a CDN is placed in front of a Nuxt server, and the CDN only stores the path excluding URL queries as the cache key, a...

7.5CVSS6AI score0.00383EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 3:15 a.m.•13 views

http2smugl

http2smugl Esta herramienta ayuda a detectar y explotar el contrabando de solicitudes HTTP en aquellos casos en que se puede lograr mediante la conversión HTTP/2 - HTTP/1.1 por parte del servidor frontend. El esquema es el siguiente: 1. Un atacante envía una solicitud HTTP/2 manipulada al servido...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 2:41 a.m.•12 views

CVE-2025-29927

CVE-2025-29927 CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Affected Versions root@kitploit: Next.js...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits59References1
Kitploit
Kitploit
•added 2026/09/29 2:19 a.m.•13 views

NextSecureScan

NextSecureScan - Next.js-CVE-2025-29927 Middleware Vulnerability Scanner NextSecureScan is a comprehensive security scanner specifically designed to identify middleware-related authorization bypass vulnerabilities CVE-2025-29927 in Next.js applications. This scanner leverages explicit header...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits59
Nuclei
Nuclei
•added 2026/09/29 2:09 a.m.•130 views

Sercomm VD625 Smart Modems - CRLF Injection

Sercomm AGCOMBO VD625 Smart Modems with firmware version AGSOT2.1.0 are vulnerable to Carriage Return Line Feed CRLF injection via the Content-Disposition header. id: CVE-2021-27132 info: name: Sercomm VD625 Smart Modems - CRLF Injection author: geeknik severity: critical description: Sercomm...

9.8CVSS8.2AI score0.16487EPSS
SaveExploits1References5
Kitploit
Kitploit
•added 2026/09/29 12:07 a.m.•19 views

dnspooq

dnspooq DNSpooq PoC - dnsmasq cache poisoning CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 For educational purposes only Requirements Docker compose Docker Exploit Launch containers root@kitploit: $ docker-compose up -d Run exploit.py root@kitploit: $ docker-compose exec attacker bash bash-5.0...

4.3CVSS7.2AI score0.04873EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/28 10:57 p.m.•14 views

CVE-2024-6769

Blogpost: CVE-2024-6769 Poisoning the activation cache to elevate from medium to high integrity This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server. The first sta...

8.4CVSS6.9AI score0.0108EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/28 10:39 p.m.•21 views

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner WCVS es un escáner CLI rápido y versátil para envenenamiento de caché web y decepción de caché web, desarrollado por Hackmanit y Maximilian Hildebrand. El escáner admite muchas técnicas diferentes de envenenamiento de caché web y decepción de caché web, incluye un...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/28 10:09 p.m.•11 views

arp-dns-attacks

ARP-DNS attacks Using PCAP library in Linux for Windows, it would be Winpcap 1. The two attacks demonstrated here can be used to poison a victim's ARP cache with which we can sniff/manipulate the packets transmitted between the victim and the local gateway. Please note that these attacks are mean...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 10:01 p.m.•94 views

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 9:47 p.m.•19 views

param-miner

param-miner Esta extensión identifica parámetros ocultos y no vinculados. Es particularmente útil para encontrar vulnerabilidades de envenenamiento de caché web. Combina la lógica avanzada de diferenciación de Backslash Powered Scanner con una técnica de búsqueda binaria para adivinar hasta 65,00...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 9:02 p.m.•17 views

fockcache

fockcache FockCache - Envenenamiento de caché de prueba minimizado Detalle del envenenamiento de caché: https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache intenta realizar envenenamiento de caché probando las cabeceras X-Forwarded-Host y X-Forwarded-Scheme en págin...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 9:02 p.m.•123 views

fockcache

fockcache FockCache - Minimalized Test Cache Poisoning Detail For Cache Poisoning : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tries to make cache poisoning by trying X-Forwarded-Host and X-Forwarded-Scheme headers on web pages. After successful result, it...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 8:43 p.m.•63 views

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/28 8:43 p.m.•14 views

fast-security-scanners

Escáneres/comprobaciones rápidos de seguridad Una pequeña contribución a la comunidad : Usamos todas estas herramientas en evaluaciones de seguridad y en nuestro servicio de monitoreo de vulnerabilidades Verifique si su dominio tiene una toma de control de NS DNS Repo docker run --dns=8.8.8.8 -e...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 8:41 p.m.•12 views

POC-CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass PoC Overview This PoC demonstrates CVE-2025-29927, a vulnerability in Next.js middleware that allows attackers to bypass authentication, authorization, and CSP mechanisms using the x-middleware-subrequest header. Affected Versions Next.js versions 11.1.4 ...

9.1CVSS7.6AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
•added 2026/09/28 6:40 p.m.•16 views

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 What is the vulnerability about? SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request...

10CVSS8.5AI score0.97945EPSS
SaveExploits8
RedhatCVE
RedhatCVE
•added 2026/09/28 6:12 p.m.•7 views

CVE-2026-101904

A flaw was found in Axios. If a separate vulnerability modifies shared object properties prototype pollution in the application environment, Axios may inherit those properties when processing request configurations rebuilt without explicit headers. An attacker can exploit this condition to inject...

6.9CVSS5.7AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/28 2:48 p.m.•10 views

CVE-2021-33026

CVE-2021-33026 Pickle Serialization Remote Code Execution - Memcached Poisoning PoC Exploit What's CVE-2021-3306? "The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains...

9.8CVSS8.8AI score0.07064EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/28 2:32 p.m.•10 views

CVE-2024-46982

Next.js Cache Poisoning Exploit This tool automates the detection and exploitation of CVE-2024-46982 , a cache poisoning vulnerability in Next.js , where Server-Side Rendering SSR responses can be incorrectly cached as Static Site Generation SSG. This misconfiguration can lead to Stored XSS, DoS,...

7.5CVSS7.7AI score0.5918EPSS
SaveExploits3
Rows per page
Query Builder