cve-2023-38646-poc

Metabase Pre Authentication RCE CVE-2023-38646 CVE-2023-38646 è una vulnerabilità di esecuzione remota di codice in Metabase. La vulnerabilità deriva da un difetto di sicurezza nella gestione delle stringhe di connessione JDBC da parte di Metabase quando processa l'endpoint API non autenticato...

cve-2026-41042

CVE-2026-41042: Apache Gravitino 1.2.1 RCE non autenticata Proof of concept autocontenuta, basata solo sulla libreria standard, per CVE-2026-41042: esecuzione remota di codice non autenticata in Apache Gravitino precedente alla 1.2.1 tramite l'impostazione di connessione INIT di H2 JDBC. Nessun...

CVE-2026-69098_exploit

CVE-2026-69098 — Kotaemon: Nicht authentifizierte Deserialisierungs-RCE Nicht authentifizierte Remote-Codeausführung in kotaemon = 0.12.0 über unsichere Deserialisierung im LLM-Einstellungs-Verbindungstest. Der Fehler Der Gradio-Handler checkconnection der LLM-Einstellungen von kotaemon...

CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header

CVE-2026-1010 – WebSocket-Connection-Smuggling Überblick Ein Reverse-Proxy und ein Backend sind sich uneinig darüber, wie eine HTTP-Anfrage mit einem fehlerhaften WebSocket-Upgrade-Header zu parsen ist. Der Proxy behandelt sie als eine Anfrage, während das Backend sie als zwei interpretiert, soda...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 ist eine kritische Schwachstelle zur Remotecodeausführung in Microsoft Outlook einschließlich Versionen von Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 vor dem Februar-2024-Patch. Sie ermöglicht es einem nicht authentifizierten Angreifer, die Geschützte Ansicht Protecte...

CVE-2025-24054-PoC

CVE-2025-24054 PoC Ein einfacher Proof of Concept für CVE-2025-24054 – Windows-Bibliothek .library-ms NTLM-Hash-Offenlegungsschwachstelle. ⚠️ Nur für Bildungszwecke und autorisierte Labornutzung Beschreibung CVE-2025-24054 ermöglicht es einem Angreifer, ein Windows-System zu zwingen, den...

CVE-2026-33829

CVE-2026-33829 Questo repository contiene uno strumento automatizzato in Bash progettato per auditare e verificare in modo passivo e controllato se gli asset con sistema operativo Windows sono vulnerabili alla manipolazione non sicura del gestore di protocollo search:. Lo script agisce come un...

CVE-2026-0257-PoC

CVE-2026-0257 — PAN-OS GlobalProtect प्रमाणीकरण बाइपास रिमोट डिटेक्शन PoC केवल डिटेक्शन। कोई शोषण नहीं। कोई क्रेडेंशियल सबमिट नहीं किए गए। कोई कुकीज़ जाली नहीं बनाई गईं। अवलोकन CVE-2026-0257 एक प्रमाणीकरण बाइपास भेद्यता है CWE-565 — वैलिडेशन और इंटीग्रिटी जांच के बिना कुकीज़ पर निर्भरता जो Palo...

wotop

Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a...

azazel

Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...

CVE-2024-34693

CVE-2024-34693 Exploit Questo repository contiene uno script Python sofisticato per sfruttare la vulnerabilità CVE-2024-34693 in Apache Superset. Lo script configura un server MySQL fasullo e crea una connessione MariaDB dannosa per esfiltrare il contenuto di un file specificato dal sistema...

mediator

Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

ssct

ShadowSocks ConnecTion A wrapper tool for shadowsocks to consistently bypass firewalls. Quick start Automatically connect The easiest way to run this tool is just type ssct in terminal, and ssct will acquire available shadowsocks servers from ishadowsocks and connect to it automatically. Connect ...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: root@kitploit: ▶ cat urls.txt https://example.com/path?one=1&two=2...

CVE-2026-16348

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-16348

TP-Link Archer BE800 V1 is affected by an authenticated command injection in its VPN connection handling. An attacker with administrative access can inject shell metacharacters via the VPN connection to execute arbitrary system commands with root privileges . Successful exploitation may enable pe...

CVE-2026-16348 Command Injection Vulnerability in VPN connection of Archer BE800

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2025-27558_Patching

CVE-2025-27558Patch Patch per la vulnerabilità CVE-2025-27558 che aveva colpito la mia immagine Linux. Incidente Atlas: Connessione in uscita inaspettata 197.155.77.1 Questa cartella documenta un'anomalia di rete reale rilevata sulla macchina Atlas , un sistema Ubuntu monitorato da Wazuh. Durante...