Lucene search
+L

51279 matches found

Kitploit
Kitploit
added 2026/09/17 2:24 a.m.18 views

mikrotik0dayScanner

Mikrotik 0day Credential Disclosure Scanner Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The weakness exists due to improper authentication in the exposed by default Winbox interface on port 8291/TCP. A remote attacker can send specially...

6.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 1:22 a.m.26 views

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 12:57 a.m.38 views

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

5.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/09/16 11:42 p.m.16 views

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the integrity and accessibility of protected information

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

8.5CVSS5.5AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/16 11:36 p.m.11 views

ACE

Automated Collection and Enrichment The Automated Collection and Enrichment ACE platform is a suite of tools for threat hunters to collect data from many endpoints in a network and automatically enrich the data. The data is collected by running scripts on each computer without installing any...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/16 11:31 p.m.4 views

Malicious code in kartyk-github-token-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cf7fd25b60cd680892113ab7de697ebe897542c013c8c4a977bb4852a593619 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/16 11:31 p.m.3 views

Malicious code in kartyk-github-single-ver-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc583cefb03bc649c96d2e8b48cc2bd5d73d8f6c489ded9b46c217ba1f212ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/16 11:31 p.m.3 views

Malicious code in pkg-rollback-dreed-viced-sonic-ponds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5c66c5e78670d2099776492aa1a836a031eea3a9d43b2ffe5911a19b62c71d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SaveExploits0References1
OSV
OSV
added 2026/09/16 11:31 p.m.2 views

MAL-2026-16245 Malicious code in kartyk-github-single-ver-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc583cefb03bc649c96d2e8b48cc2bd5d73d8f6c489ded9b46c217ba1f212ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/16 11:11 p.m.3 views

Malicious code in kartyk-github-oidc-test-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c0bc4570b5c41bc6a589bf16daea1a90f52e57b878fe6219afb1102ec24c535 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 10:55 p.m.14 views

BruteX

BruteX ABOUT: Automatically brute force all services running on a target Open ports Usernames Passwords INSTALL: root@kitploit: ./install.sh USAGE: root@kitploit: brutex target DOCKER: root@kitploit: docker build -t brutex . docker run -it brutex target LICENSE:...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 10:11 p.m.6 views

certificate-of-compromise

Certificate of Compromise SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service v1.0.0 Living Document & Community Contributions This paper is a living document. ADCS research is not static — techniques get patched, new conditions are discovered, and community analys...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 8:55 p.m.18 views

siemframework

SIEMS FRAMEWORK MultiSIEM Modular Python3 Attack Framework By ElevenPaths https://www.elevenpaths.com/ Usage: python3 ./siemsframework.py INTRODUCTION SIEMs are defensive tools increasingly used in the field of cybersecurity, especially by major companies and companies intended to monitor highly...

6.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 8:48 p.m.11 views

IOCs

////////////////////// // //////////////////////// // /// /////// ///// /////// /////// /////// /////// //////// //////// //////// //////// //////// //////// //////// //////// //////// //////// /////// /////// /////// /////// ///// // ////// // // ///////////////////////// ///////////////////////...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 8:43 p.m.8 views

MIDA-Multitool

MIDA - Multitool Bash script purposed for system enumeration, vulnerability identification and privilege escalation. MIDA Multitool draws functionality from several of my previous scripts namely SysEnum and RootHelper and is in some regards RootHelpers successor, or sister script at the very leas...

5.8AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/16 8:34 p.m.11 views

aws-enumerator

AWS Service Enumeration Disclaimer The tool is in beta stage testing in progress, no destructive API Calls used read only actions . I hope, there will be no issues with the tool. If any issues encountered, please submit the ticket. Description The AWS Enumerator was created for service enumeratio...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 8:12 p.m.10 views

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects 「LABCAT Processing Projectsにおける危険なタイプのファイルの無制限アップロードの脆弱性により、攻撃者はWebサーバーにWebシェルをアップロードできます。これにより完全な侵害につながる可能性があります。」 🧑‍💻 エクスプロイトの説明 このPythonエクスプロイトスクリプトは、脆弱性のあるProcessing Projects...

9.1CVSS8.3AI score0.00599EPSS
SaveExploits1
CVE
CVE
added 2026/09/16 8:06 p.m.8 views

CVE-2026-92808

CVE-2026-92808 is a server-side request forgery (SSRF) vulnerability in the UnifiedLogin service of Altium Enterprise Server . An unauthenticated network attacker can force the server to issue outbound HTTP requests to arbitrary destinations, including internal services reachable only from the se...

10CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/16 8:06 p.m.5 views

EUVD-2026-81101

A server-side request forgery SSRF vulnerability exists in the UnifiedLogin service of Altium Enterprise Server. An unauthenticated network attacker can cause the server to issue outbound HTTP requests to a destination of the attacker's choosing, including internal services that are reachable onl...

10CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 8:00 p.m.9 views

CVE-2025-60378

CVE-2025-60378: Inyección de HTML Almacenado en RISE Ultimate Project Manager & CRM ⚠️ Aviso de Seguridad Una vulnerabilidad crítica de inyección de HTML almacenado que afecta a facturas, mensajería y comunicaciones automatizadas -ff6600 📋 Resumen Se ha descubierto una vulnerabilidad crítica de...

8.1CVSS5.8AI score0.01079EPSS
SaveExploits1
Rows per page
Query Builder