RHSA-2026:59135 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2026:59136 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Bulletin has no description...

fortinet-fortiweb-cve-2025-64446-58034

Scopri le vulnerabilità di Fortinet FortiWeb CVE-2025-64446, CVE-2025-58034 1. Panoramica Fortinet FortiWeb è un dispositivo Web Application Firewall WAF ampiamente implementato nei sistemi aziendali per proteggere le applicazioni web dalle minacce comuni. Poiché FortiWeb si trova spesso nello...

pyxamstore

Xamarin AssemblyStore Explorer pyxamstore This is an alpha release of an assemblies.blob AssemblyStore parser written in Python. The tool is capable of unpack and repackaging assemblies.blob and assemblies.manifest Xamarin files from an APK. Installing Run the installer script: root@kitploit:...

CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-

🧪 1. SCHRITT: Demo verwundbare Web-App LAB Wir erstellen eine Logik ähnlich wie CVE-2025-55182 unsafe server-side execution. 📁 vulnapp/app.py root@kitploit: from flask import Flask, request import subprocess app = Flaskname @app.route"/render", methods="POST" def render: data =...

npm_poisoning_poc

Guardians 2027 AI package lab Reusable setup for the first Gu...

CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept

CVE-2025-33053 - Esecuzione di Codice Remota RCE WebDAV - PoC e Simulazione C2 ⚠️ Solo a scopo educativo Questo progetto dimostra un proof-of-concept che sfrutta WebDAV e la distribuzione di file .url per ottenere un'esecuzione di codice remota realistica. Include un eseguibile fittizio e una...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

grafanaExp

grafanaExp Sfrutta la vulnerabilità di lettura arbitraria di file CVE-2021-43798 di Grafana, rileva automaticamente se esiste una vulnerabilità, i plugin presenti, estrae la chiave, decifra il file db del server e restituisce le informazioni su datasourrce. Utilizzo Fornisce funzionalità exp e...

lupo

For instructions on how to use Lupo, visit https://github.com/malienist/lupo/wiki/Lupo-Wiki Lupo — Malware IOC Extractor Debugging module for Malware Analysis Automation For a step by step post on how to use Lupo, with images and instructions, please see this post:...

CVE-2021-4045

🔍 CVE-2021-4045: Vulnerabilità di Iniezione di Comandi in TP-Link Tapo C200 CVE-2021-4045 📌 Riepilogo CVE-2021-4045 è una vulnerabilità di iniezione di comandi scoperta nella fotocamera TP-Link Tapo C200 , che consente a un attaccante di prendere il controllo totale del dispositivo con privilegi...

maskprocessor

maskprocessor High-Performance word generator with a per-position configurable charset Mask attack Try all combinations from a given keyspace just like in Brute-Force attack, but more specific. Advantage over Brute-Force The reason for doing this and not to stick to the traditional Brute-Force is...

CVE-2024-33438

Caricamento Arbitrario di File Porta a RCE CVE-2024-33438 CubeCart Dopo averlo eseguito, questo è l'output previsto per uno sfruttamento riuscito: root@kitploit: python3 CubeCartCVE.py http://localhost/admin0Kqnr9.php admin 123456 whoami ,----. ||/ '. / O|| /| / "" / / // / launching exploit ||/...

CVE-2024-32019-POC

CVE-2024-32019-POC Netdata ndsudo lokale Privilegieneskalation – Workflow und POC CVE-2024-32019 Workflow Automatischer Exploit Ressourcen Workflow !TIP Bitte lesen Netdata ist ein Tool zur Überwachung von Anwendungen und Systemen. Es läuft auf Port 19999 und ist leicht zu finden: root@kitploit:...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

Drupal_REST-RCE_Unauthenticated

CVE-2019-6340 — Drupal RESTful Web Services RCE Implementazione Python dell'exploit di esecuzione di codice in remoto per CVE-2019-6340, basata sull'analisi del modulo Metasploit e sul lavoro precedente di leonjza. Differenza chiave rispetto a EDB-46459: utilizza POST invece di GET, bypassando la...

eviltree

EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...

CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

EUVD-2026-65328

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...