CVE-2021-31630

CVE-2021-31630 OpenPLC 3 WebServer Esecuzione Remota di Codice Autenticata. Descrizione La presenza di Command Injection nel webserver Open PLC v3 consente a remoti attaccanti di eseguire codice arbitrario. Testato solo sulla macchina HTB Wifinetictwo.htb. Ho riscontrato problemi con tutti gli...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

CVE-2020-10135-BIAS

CVE-2020-10135-BIAS CVE 2020-10135 noto anche come BIAS Bluetooth Impersonation Attack Sembra che dopo un po' e superando qualche ostacolo sia riuscito a eseguire BIAS Bluetooth Impersonation Attack CVE 2020-10135. Ho impersonato la connessione di un Samsung S3 Neo+ verso un host Linux. Roba...

gitlab_rce_cve-2022-2884

gitlabrcecve-2022-2884 Questo è un programma Python3 che sfrutta la vulnerabilità RCE autenticata di GitLab nota come CVE-2022-2884. DICHIARAZIONE DI NON RESPONSABILITÀ Questo strumento è destinato a ingegneri della sicurezza e personale appsec per valutazioni di sicurezza. Si prega di utilizzare...

proofpoint-CVE-2023-0089

Über Sicherheitsforscher: ly1g3, ly1g3attuta.io GPG-Fingerabdruck: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Überblick: Remote Code Execution – Von einem niedrig privilegierten authentifizierten Benutzer zu Admin-RCE CVE: CVE-2023-0089 Zeitleiste:...

packetfence-CVE-2024-39024

Informazioni Ricercatore di sicurezza: ly1g3, ly1g3attuta.io Impronta GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Panoramica: Remote Code Execution - Da utente autenticato di basso livello a admin RCE CVE: CVE-2024-3924 Cronologia: Scoperto - ly1g3...

Design-and-Evaluation-of-an-MCP-Governed-Pentest-Agent

Design-and-Evaluation-of-an-MCP-Governed-Pentest-Agent Dissert...

Mailcow-CVE-2022-31245

Mailcow CVE-2022-31245 CVE-2022-31245: RCE und Eskalation von Domain-Admin-Rechten für Mailcow. Inklusive POC. Gemeldet und behoben: 2022-05 Gepatchte Version: https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d CVE: https://vulners.com/cve/CVE-2022-31245 CVE-2022-31245:...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...

CVE-2025-55182-React-RSC-Exploit

CVE-2025-55182 // REACT SERVER COMPONENTS RCE VISÃO GERAL Exploit PoC para CVE-2025-55182. Tem como alvo versões inseguras e vulnerabilidades de funções de validação de entrada em React Server Components. MECANISMO TÉCNICO Vetor : Poluição de protótipo via $1:proto :then durante a hidratação...

RHSA-2026:59135 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2026:59136 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Bulletin has no description...

fortinet-fortiweb-cve-2025-64446-58034

Scopri le vulnerabilità di Fortinet FortiWeb CVE-2025-64446, CVE-2025-58034 1. Panoramica Fortinet FortiWeb è un dispositivo Web Application Firewall WAF ampiamente implementato nei sistemi aziendali per proteggere le applicazioni web dalle minacce comuni. Poiché FortiWeb si trova spesso nello...

pyxamstore

Xamarin AssemblyStore Explorer pyxamstore This is an alpha release of an assemblies.blob AssemblyStore parser written in Python. The tool is capable of unpack and repackaging assemblies.blob and assemblies.manifest Xamarin files from an APK. Installing Run the installer script: root@kitploit:...

npm_poisoning_poc

Guardians 2027 AI package lab Reusable setup for the first Gu...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

lupo

For instructions on how to use Lupo, visit https://github.com/malienist/lupo/wiki/Lupo-Wiki Lupo — Malware IOC Extractor Debugging module for Malware Analysis Automation For a step by step post on how to use Lupo, with images and instructions, please see this post:...

CVE-2021-4045

🔍 CVE-2021-4045: Vulnerabilità di Iniezione di Comandi in TP-Link Tapo C200 CVE-2021-4045 📌 Riepilogo CVE-2021-4045 è una vulnerabilità di iniezione di comandi scoperta nella fotocamera TP-Link Tapo C200 , che consente a un attaccante di prendere il controllo totale del dispositivo con privilegi...

maskprocessor

maskprocessor High-Performance word generator with a per-position configurable charset Mask attack Try all combinations from a given keyspace just like in Brute-Force attack, but more specific. Advantage over Brute-Force The reason for doing this and not to stick to the traditional Brute-Force is...

CVE-2024-32019-POC

CVE-2024-32019-POC Netdata ndsudo lokale Privilegieneskalation – Workflow und POC CVE-2024-32019 Workflow Automatischer Exploit Ressourcen Workflow !TIP Bitte lesen Netdata ist ein Tool zur Überwachung von Anwendungen und Systemen. Es läuft auf Port 19999 und ist leicht zu finden: root@kitploit:...