Lucene search
+L

2236689 matches found

Kitploit
Kitploit
added 2026/09/14 11:51 a.m.12 views

AirmonGUI

AirmonGUI A local web interface for the aircrack-ng wireless toolkit. Screenshots · Quick start · Features · Roadmap · Contributing !WARNING Use this only on networks you own or have written permission to test. Scanning, deauthenticating, or capturing traffic from networks you don't control is...

5.8AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/14 11:51 a.m.34 views

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

6.4AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/14 11:50 a.m.6 views

-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212

create a vulnerable Docker environment that is susceptible to CVE 2023-30212 Description Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site...

6.1CVSS6.7AI score0.08115EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/14 11:50 a.m.10 views

aco-prompt-shield

aco-prompt-shield 🛡️ Stop prompt injection attacks before they reach your LLM — zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the 1 security risk for LLM applications. aco-prompt-shield catches known jailbreak patterns, understands semantic intent via ML, and...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 11:50 a.m.17 views

apk-interceptor

apk-interceptor Android deeplink, Intent, and WebView bridge assessment helper apk-interceptor is a portable Android testing APK for authorized application security assessments. It helps security engineers verify how an Android app handles external entry points such as custom URI schemes,...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/14 11:50 a.m.4 views

CVE-2023-22527-MEMSHELL

Project Introduction This project references the project of Boogipop at https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL and builds upon it with support for: 1. Injection of Behinder memory shell 2. Added HTTP proxy functionality, usage: -proxy http://127.0.0.1:8080 3. Modified the co...

10CVSS8.3AI score0.99984EPSS
SaveExploits34References2
Kitploit
Kitploit
added 2026/09/14 11:50 a.m.8 views

lua_CVE-2020-24370_AfterPatch

Lua 5.3 readme blockquote, .display border: solid a0a0a0 2px ; border-radius: 8px ; padding: 1em ; margin: 0px ; .display word-spacing: 0.25em ; dl.display dd padding-bottom: 0.2em ; tt, kbd, code font-size: 12pt ; Welcome to Lua 5.3 about · installation · changes · license · reference manual Abo...

5.3CVSS6.5AI score0.03833EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 11:50 a.m.1 views

super-trouper

Super Trouper An MCP server for the Frida reverse engineering toolkit. Super Trouper runs an MCP server over STDIO that exposes Frida capabilities as tools for coding agents. It can connect to local, USB, and remote devices; inspect applications and processes; manage process sessions; and load,...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 11:50 a.m.6 views

CVE-2026-60004

CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea diffpatch Git Hook RCE PoC ★ https://github.com/user-attachments/assets/403a70f4-4ff4-4ab7-b11c-d73d70adaf0b Overview CVE-2026-60004 is a Remote Code Execution RCE vulnerability in Gitea. The diffpatch API applies a supplied patch with git...

9.8CVSS8.3AI score0.86777EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/09/14 11:50 a.m.5 views

CVE-2021-26121

CS-Cart templates.manage Server Side Template Injection Remote Code Execution Vulnerability Found by: Steven Seeley of 360 Vulcan Team Version: = 4.12.x latest Date: 2021-01-08 12:49 CVE: CVE-2021-26121 Disclosure Timeline 2021-01-26 – Sent to CSCart dev team 2021-01-27 – Notification of reciept...

7.3AI score
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 11:49 a.m.5 views

GitDump

GitDump GitDump dumps the source code from .git when the directory traversal is disabled Requirements Python3 Tested on Windows Kali Linux What it does Dump source code from website/.git directory when directory traversal is disabled. How it works Fetch all common files .git/index, .git/HEAD,...

6AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/09/14 11:49 a.m.6 views

Exploit for CVE-2026-38526

Nexus — Local Privilege Escalation PoC Gitea template-sync...

9.9CVSS0.03824EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/14 11:49 a.m.9 views

extractTVpasswords

Extract password from TeamViewer memory using Frida CVE-2018-14333 Hi there, in this article we want to tell about our little research about password security in TeamViewer. The method can help during the pentest time for post exploitation to get access to another machine using TeamViewer...

8.1CVSS7.6AI score0.02595EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 11:49 a.m.6 views

hydra

Chat · Discussions · Newsletter · Docs · Try Ory Network · Jobs Ory Hydra is a hardened, OpenID Certified OAuth 2.0 Server and OpenID Connect Provider optimized for low-latency, high throughput, and low resource consumption. It connects to your existing identity provider through a login and conse...

6AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/14 11:49 a.m.1 views

CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — S2OPC Status-Clobbering NULL Dereference Standalone proof-of-concept for CVE-2026-90782 in S2OPC Safe & Secure OPC. Vulnerability In allocnotificationmessageitems S2OPC 1.7.3 and earlier: A single shared status variable is used for both DataChange and Event allocations. If the...

6CVSS0.0032EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 11:49 a.m.13 views

Recon-Scan

Recon-Scan ReconScan is a open-source passive recon scanner with a FastAPI backend, async worker pipeline, and a single-page frontend. You can check the deployed site at https://recon-scan.vercel.app/ The point is fast signal: run a scan, get module-by-module findings, and get an AI summary that...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 11:49 a.m.1 views

cve-2026-43499-firetv-sheldonp-writeup

CVE-2026-43499 on Amazon Fire TV Stick 3rd Gen sheldonp Chaining a Linux kernel privilege escalation into a preloader downgrade and bootloader unlock. Overview This repository documents my authorized reproduction of the CVE-2026-43499 exploitation chain on an Amazon Fire TV Stick 3rd Gen sheldonp...

7.8CVSS0.00789EPSS
SaveExploits94References6
Kitploit
Kitploit
added 2026/09/14 11:48 a.m.10 views

CVE-2024-35106-POC

NEXTU FLETA Wifi6 Router DOS, Potential RCE POC This document describes how the exploit was carried out on the EZNET FLETA WiFI router through the CVE-2024-35106 vulnerability. Vulnerability information CVE ID CVE-2024-35106 Vendor of Product NEXTU Product FLATA AX1500 Wifi6 Router Version 1.0.3...

4.6CVSS6.1AI score0.00522EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 11:48 a.m.7 views

CVE-2026-23744-RCE

MCPJam Inspector v1.4.2 - RCE Exploit Vulnerability Description MCPJam Inspector contains an unauthenticated Remote Code Execution RCE vulnerability in the /api/mcp/connect endpoint. The vulnerability allows attackers to execute arbitrary commands by sending a malicious MCP server configuration...

9.8CVSS6.2AI score0.64842EPSS
SaveExploits41
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/14 11:48 a.m.2 views

Security Bulletin: IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution (CVE-2026-12355)

Summary IBM MQ has addressed a bypass of the JNDI name sanitization in the Resource Adapter IVT servlet that could allow an unauthenticated remote attacker to supply a malicious JNDI URL and execute arbitrary code on the hosting application server if the IVT EAR is deployed Vulnerability Details...

SaveExploits0Affected Software1
Rows per page
Query Builder