PhoneSploit-Pro v2.3

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

CVE-2026-18198

CVE-2026-18198 is a Blind SQL Injection vulnerability in GOLDENHORN ONEIT , a product by TAC Information Services Internal and External Trade Inc. The flaw stems from improper neutralization of special elements in an SQL command, affecting versions prior to Göbeklitepe . The CVSS 3.1 score is 8.8...

CVE-2026-18198 SQL Injection in TAC Information's GoldenHorn

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT allows Blind SQL Injection. This issue affects GOLDENHORN ONEIT: before Göbeklitepe...

EUVD-2026-71082

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT allows Blind SQL Injection. This issue affects GOLDENHORN ONEIT: before Göbeklitepe...

CVE-2026-18198 SQL Injection in TAC Information's GoldenHorn

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT allows Blind SQL Injection. This issue affects GOLDENHORN ONEIT: before Göbeklitepe...

POC-CVE-2026-19295

Description Proof of concept exploit code for CVE-2026-19295 Usage python3 poc.py -url -uname -pword -c...

CVE-2026-23744-RCE

MCPJam Inspector v1.4.2 - RCE Exploit Vulnerability Description MCPJam Inspector contains an unauthenticated Remote Code Execution RCE vulnerability in the /api/mcp/connect endpoint. The vulnerability allows attackers to execute arbitrary commands by sending a malicious MCP server configuration...

cve-2026-8697

CVE-2026-8697: Login Rate Limit Bypass on TP-Link Archer C64 CVE-2026-8697 is a logic flaw in the TP-Link Archer C64's OS called TPOS in the debug message. It lets any unprivileged user connected to the router to bypass the web UI rate limit by using a residual SSH service. A simple Python script...

ip-camera-research

IP Camera Research - Fullhan FH8626V100 AJL30PG0803 Security research on a consumer IP camera built on the Fullhan FH8626V100 SoC model AJL30PG0803, resulting in six assigned CVEs covering unauthenticated API access, plaintext credential disclosure, and full unauthenticated device compromise via ...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — SQLi no autenticado a RCE como root Gravedad: Crítica Tipo: Inyección SQL no autenticada → Ejecución remota de código Software afectado: FreePBX módulo endpoint Probado en: FreePBX en CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Resumen Existe una vulnerabilidad de inyecció...

Atlas

Atlas Atlas is a cross-platform Windows/Linux network execution and security assessment toolkit built on top of TrustedSec's Titanis protocol library. It is inspired by the workflow of NetExec/CrackMapExec: target lists, credential sets, modular enumeration, and compact HH:mm:ss + host - message...

CVE-2026-46368-OpenWrt-Exploit

OpenWrt luci-app-https-dns-proxy Authenticated Command Injection CVE-2026-46368 This repository contains the Proof of Concept PoC exploit for a critical OS command injection vulnerability in luci-app-https-dns-proxy that results in arbitrary command execution as root. CVE ID: CVE-2026-46368...

CVE-2026-31431

CVE-2026-31431 "Copy Fail" - Research & Pentesting Tool ⚠️ DISCLAIMER This project is provided strictly for: Security research Educational purposes Authorized penetration testing CTF and laboratory environments By using this tool, you agree that: You own the target system or You have explicit...

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 A critical RCE vulnerability in MCPJam Inspector 3.Start the exploit root@kitploit: python3 CVE-2026-23744.py -u -i -p 4.For better usage I recomend to update the terminal to a fully funcional one , otherwise u wont be able to use commands like ctrl^...

strix v1.6.1

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ VULNERABILIDAD CRÍTICA - Explotación Activa Confirmada CVE-2025-6218 es una vulnerabilidad crítica de path traversal en WinRAR que permite la ejecución de código arbitrario. Actualmente explotada por grupos APT como GOFFEE, Bitter APT-C-08 y Gamaredon. 📋...

python-inquestlabs

RETIRED November 2025 inquestlabs A Pythonic interface and command line tool for interacting with the InQuest Labs API. Note that an API key is not required to interact with this API. An API key does provide the ability to increase their lookback, remove rate limitations, and download available...

kin v0.6.4

AI changed who writes code. Kin changes what they build on. A graph-native code repository for people and AI agents. AI writes a change in seconds. Working out what it touches has not gotten any faster. Every agent reads a repository the way a person would. Search, open files, follow callers, bui...

augustus v0.14.24

Augustus - LLM vulnerability scanner for prompt injection, jailbreak, and adversarial attack testing Augustus - LLM Vulnerability Scanner Test large language models against 210+ adversarial attacks covering prompt injection, jailbreaks, encoding exploits, and data extraction. Augustus is a Go-bas...

easywall v2.14.0

easywall Your firewall. Your rules. No surprises. Live demo · Documentation · Changelog nftables through a web interface that cannot lock you out: every apply reverts itself unless you confirm it. !The easywall dashboard: firewall status with acceptance state, pending changes and last apply; tile...