HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 Identify potential vulnerabilities with CVE-2017-7921 exploit checks or by testing the /onvif-http/snapshot?auth=YWRtaW46MTEK URI on target IP addresses using a multi-threaded approach for faster results. Requirements root@kitploit: python3 Python Pacakges = requests,...

check-spelling

@check-spelling/check-spelling Acción de GitHub Resumen Todo el mundo comete errores tipográficos. Esto incluye a las personas que escriben documentación y comentarios, pero también a los programadores al nombrar variables, funciones, APIs, clases y nombres de archivos. A menudo, los programadore...

CVE-2026-13157

CVE-2026-13157 Theme Demo Import = 1.1.3 — Carga Arbitraria de Archivos y Ejecución Remota de Código -E5A500?style=for-the-badge&logo=security&logoColor=white 📖 Descripción General del Aviso CVE-2026-13157 es una vulnerabilidad autenticada de carga arbitraria de archivos que afecta al plugin de...

pisc

Comprobador de Seguridad de Imágenes OCI Públicas ¿Qué es? PISC Comprobador de Seguridad de Imágenes OCI Públicas o de imágenes docker es una herramienta de línea de comandos para evaluar la seguridad de imágenes de contenedores OCI. Sale con código 1 si se cumple alguna de las siguientes...

kernel-hardening-checker

kernel-hardening-checker （原名 kconfig-hardened-check） 动机 Linux 内核拥有大量安全加固选项。大多数主流发行版并未启用其中的许多选项。我们必须自行启用这些选项，以使我们的系统更加安全。 但没人喜欢手动检查配置。所以让计算机来完成它们的工作吧！ kernel-hardening-checker （原名 kconfig-hardened-check ）是一款用于检查 Linux 内核安全加固选项的工具。 许可证：GPL-3.0。 仓库...

CVE-2024-4367-PoC

CVE-2024-4367 & CVE-2024-34342: Ejecución arbitraria de JavaScript en PDF.js Faltaba una verificación de tipo al manejar fuentes en PDF.js, lo que permitiría la ejecución arbitraria de JavaScript en el contexto de PDF.js. Esta vulnerabilidad afecta a Firefox 126, Firefox ESR 115.11 y Thunderbird...

dllspy

DllSpy 扫描已编译的 .NET 程序集以发现输入面（HTTP 端点、SignalR 中心、WCF 服务、gRPC 服务、Razor 页面、Blazor 组件、Azure Functions、OData 端点），检查授权配置，并标记安全问题——所有这些无需运行应用程序。 提供 CLI 工具 和 PowerShell 模块 。 安装 CLI root@kitploit: dotnet tool install -g DllSpy PowerShell root@kitploit: Install-Module -Name DllSpy 用法 CLI root@kitploit:...

CVE-2019-13496

CVE-2019-13496 Título del exploit: Bypass de OTP verificación de integridad fallida Fecha: 07/10/2019 Autor del exploit: Furqan Khan Página principal del proveedor: https://www.oneidentity.com/ Enlace del software: https://www.oneidentity.com/products/cloud-access-manager/ Versión: 8.1.3 Probado...

CVE-2021-3441-check

HP CVE Check A python threat intelligence tool for automating IoC discovery for CVE-2021-3441. Easily search targets for indicators of compromnise root@kitploit: //| ////|| CVE-2021-3441 Check |=== |----| || | | �| || Author: Tyler Butler || �| || @tbutler0x90 | ||/.�---.|| | || |-||/||-. | |�...

CVE-2025-5288

🚨 REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Autorización faltante que permite escalada de privilegios no autenticada 📋 Descripción El plugin REST API | Custom API Generator For Cross Platform And Import Export In WP para WordPress es vulnerable a l...

CVE-2023-3124

CVE-2023-3124 CVE-2023-3124 概念验证 这是针对 CVE-2023-3124 的概念验证（PoC）利用程序，该漏洞存在于 WordPress Elementor Pro 插件中。 描述： WordPress 的 Elementor Pro 插件在版本 3.11.6 及之前版本中，由于对 updatepageoption 函数缺少权限检查，导致存在未授权数据修改漏洞。这使得具有订阅者级别权限的已验证攻击者能够更新任意站点选项，进而可能导致权限提升。 注意： 此高层次概述仅供教育目的。了解漏洞及其影响有助于改进安全实践，并针对类似攻击开发有效的防御措施。...

HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11 are susceptible to server-side request forgery. When redirects are returned by HTTP health check endpoints, Consul follows these HTTP redirects by default. An attacker can possibly obtain sensitive information, modify data,...

Powertek Firmware <3.30.30 - Authorization Bypass

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

reNgine 2.2.0 - Command Injection

reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/wafdetector/?url= string. The commands are executed as root via subprocess.checkoutput. id: CVE-2023-50094 info: name: reNgine 2.2.0 - Command Injection...

User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion

The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the FrontendFormAjax::submitpost function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public...

NocoBase - SQL Injection

NocoBase @nocobase/plugin-collection-sql versions prior to 2.0.39 are vulnerable to SQL injection via the sqlCollection:update endpoint. The checkSQL function, which blocks dangerous SQL keywords and ensures only SELECT statements are allowed, is not called during collection updates. id:...

WP Hotel Booking <= 2.3.2 - Cross-Site Scripting

The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

Microsoft FrontPage Extensions - Information Disclosure

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...

Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS

Adminer = 5.4.1 contains a denial of service caused by lack of origin validation in version check endpoint, letting attackers trigger server errors via crafted POST requests, exploit requires no special privileges. id: CVE-2026-25892 info: name: Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent Do...