5386 matches found
poc-redis
To run the exploit please extract the attached ZIP and follow these steps on Linux: 1. Set up a virtualenv/install the Redis client root@kitploit: $ python3 -m venv .venv $ source .venv/bin/activate $ pip install -r requirements.txt 2. In another terminal, run the Redis docker image Or build from...
CVE-2026-91017 Robokassa payment gateway for Woocommerce < 1.8.9 - Unauthenticated Payment Bypass via Forged JWT Callback
The Robokassa payment gateway for Woocommerce WordPress plugin before 1.8.9 does not verify the authenticity of incoming payment notifications when its non-default deferred-payment feature is enabled, allowing unauthenticated attackers to forge a notification and mark arbitrary WooCommerce orders...
CVE-2026-91017 Robokassa payment gateway for Woocommerce < 1.8.9 - Unauthenticated Payment Bypass via Forged JWT Callback
The Robokassa payment gateway for Woocommerce WordPress plugin before 1.8.9 does not verify the authenticity of incoming payment notifications when its non-default deferred-payment feature is enabled, allowing unauthenticated attackers to forge a notification and mark arbitrary WooCommerce orders...
CVE-2026-90923
The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers' orders...
CVE-2026-90923 Autopay < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion
The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers' orders...
CVE-2026-90923
CVE-2026-90923 affects the Autopay WordPress plugin in versions before 5.0.1 . The root cause is a missing signature enforcement on one of its payment callback endpoints, which allows unauthenticated users to disclose and delete the stored payment parameters of other customers' orders. The vulner...
CVE-2026-90923 Autopay < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion
The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers' orders...
EUVD-2026-81350
The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers' orders...
dirtycups
dirtycups.py Dirty CUPS es un escáner gratuito de CVE para Linux/Unix script en Python3 que permite validar si un objetivo es vulnerable a CVE-2024-47176. Este es un escáner de CUPS basado únicamente en sockets, tomado de cupsscanner.py de MalwareTech:...
Common-Registry-Jmp-RCX
Common-Registry-Jmp-RCX https://www.unknowncheats.me/forum/anti-cheat-bypass/501925-undetected-kernel-communication-method.html root@kitploit: https://github.com/EBalloon/Common-Registry NTSTATUS stdcall DriverEntryPDRIVEROBJECT DriverObject, PUNICODESTRING RegistryPath char nvraidbase; // rax ch...
log4j-fuzzer
log4j-fuzzer Para un solo objetivo root@kitploit: chmod +x log4j Después de ese comando, simplemente coloca tu objetivo root@kitploit: ./log4j TUURLOBJETIVO TUSERVIDORREMOTO Para múltiples objetivos Reúne todos los dominios, subdominios y directorios en una lista Después de eso, simplemente ejecu...
log4j
log4j-detect Script simple en Python 3 para detectar la vulnerabilidad de la librería Java "Log4j" CVE-2021-44228 para una lista de URL con multithreading Este script está basado en takito1812/log4j-detect Por ExodataCyberdefense El script "log4j-detect.py" desarrollado en Python 3 se encarga de...
Log-4j-scanner
log4j-scan Un escáner totalmente automatizado, preciso y extenso para encontrar hosts vulnerables a log4j Características Soporte para listas de URLs. Fuzzing de más de 60 cabeceras de solicitud HTTP no solo 3-4 cabeceras como en herramientas vistas anteriormente. Fuzzing de parámetros de datos...
AZL-101447 CVE-2026-90029 affecting package kernel 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: usb: storage: realtekcr: fix use-after-free on disconnect realtekcrdestructor calls timerdelete before the chip containing the timer is freed. The timer callback may still be running and can rearm itself, resulting in a...
CVE-2020-15227
CVE-2020-15227 ¡DESCARGO DE RESPONSABILIDAD! No me hago responsable de su uso en un entorno real, así que por favor NO lo haga. Esta cosita es solo para demostrar y para pruebas para administradores de sistemas. Hice este exploit según la publicación de un CVE de David Grudl el fundador de Nette...
EUVD-2026-80637
In the Linux kernel, the following vulnerability has been resolved: usb: storage: realtekcr: fix use-after-free on disconnect realtekcrdestructor calls timerdelete before the chip containing the timer is freed. The timer callback may still be running and can rearm itself, resulting in a...
CVE-2026-86792 Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration
Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...
CVE-2026-86792
apache-airflow-providers-apache-kafka versions 1.15.0 through 2.0.0 are vulnerable to unsafe reflection : dotted-path strings placed in a Kafka connection's extra field are resolved via import_string with no allowlist and invoked by the confluent-kafka client. When the Kafka event producer is ena...
CVE-2026-42208_lab
Inyección SQL en LiteLLM Proxy GHSA-r75f-5x8p-qvmc Un entorno de reproducción para la vulnerabilidad de inyección SQL en el flujo de autenticación de claves API de LiteLLM Proxy. Resumen de la vulnerabilidad...