32053 matches found
sentryexploit
Estrazione di informazioni MobileIron Sentry CVE-2023-38035 Funzionalità Estrae il nome dell'azienda e l'email di contatto Prova della vulnerabilità Utilizzo root@kitploit: ./sentryexploit 192.168.0.10:8443 2023/08/24 21:29:55 Information extracted, appliance is vulnerable: 2023/08/24 21:29:55...
lab-cve-2025-3515
CVE-2025-3515 WordPress Lab Drag and Drop Multiple File Upload for Contact Form 7 Avvia un ambiente WordPress vulnerabile per riprodurre e validare la CVE-2025-3515 — caricamento di file senza restrizioni tramite ddmuuploadfile nel plugin drag-and-drop-multiple-file-upload-contact-form-7 ≤ 1.3.8....
CVE-2026-5364
CVE-2026-5364 CVE-2026-5364 ist eine nicht authentifizierte Schwachstelle für beliebige Datei-Uploads CVSS 8.1, Hoch im Plugin „Drag and Drop File Upload for Contact Form 7“. CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Nicht authentifizierter beliebiger Datei-Upload durch Umgehung...
a2sv
1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability root@kitploit: - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE -...
droid-hunter
root@kitploit: .---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter...
lscript
The lazy script has not been updated for a while due to me being very busy with my life. I will try my best to upload an update when I find the time Welcome to the LAZY script v2.1.4 A video Hackersploit made : https://www.youtube.com/watch?v=oBpo5sElrMY A video sstec made:...
adbsploit
ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation root@kitploit: First Download or...
CVE-2026-81706
opensslencrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create shadowed contact entries invisible until the corresponding own identity is deleted. When the own identity is deleted, the shadowed contact becomes...
CVE-2025-3515
CVE-2025-3515 - RCE tramite caricamento file WordPress Utilizzo root@kitploit: python3 exploit.py Panoramica CVE-2025-3515 è una vulnerabilità di caricamento file nel plugin WordPress "Drag and Drop Multiple File Upload for Contact Form 7" che consente a utenti non autenticati di caricare file...
CVE-2026-54390
CVE-2026-54390 — Exploração em Massa de SSTI Smarty no JTL Shop Formulário de Contato Pré-Autenticação → Assunto do Email → fetch'string:' → RCE Visão Geral CVE-2026-54390 é uma vulnerabilidade crítica CVSS 9.8 de Injeção de Template do Lado do Servidor sem autenticação no JTL Shop 5.2.0–5.7.1. O...
Check-WP-CVE-2020-35489
Check-WP-CVE-2020-35489 CVE-2020-35489 Die CVE-2020-35489 wurde im WordPress-Plugin Contact Form 7 5.3.1 und älteren Versionen entdeckt. Durch Ausnutzung dieser Sicherheitslücke können Angreifer Dateien beliebigen Typs hochladen und dabei alle Einschränkungen umgehen, die bezüglich der erlaubten...
OpenContacts
OpenContacts für Android Datenschutz für Ihre Kontakte. Übersetzung Möchten Sie diese App in Ihrer eigenen Sprache sehen? Tragen Sie Übersetzungen bei. Über Diese App speichert Kontakte in einer eigenen Datenbank, getrennt von den Android-Kontakten. So hat keine andere App Zugriff auf die Kontakt...
maat
About Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting:...
React-site-CVE-2025-55182
React-Website – CVE-2025-55182 README: Angreifbares Next.js-Projekt React RSC Landingpage Dieses Repository enthält ein Beispiel einer mehrseitigen Corporate-Landingpage mit Next.js 15.0.0 + React 19.0.0. Die Seite simuliert eine Struktur ähnlich wie t1.ru: Startseite, Produkte, Fallstudien,...
CVE-2024-42009
राउंडक्यूब वेबमेल 1.6.7 के लिए XSS शोषण CVE-2024-42009 विवरण यह स्क्रिप्ट राउंडक्यूब वेबमेल संस्करण 1.6.7 में एक संग्रहीत XSS कमजोरी CVE-2024-42009 का शोषण करती है। यह वेबमेल सिस्टम में एक दुर्भावनापूर्ण पेलोड इंजेक्ट करती है, जो ट्रिगर होने पर पीड़ित के इनबॉक्स से ईमेल सामग्री को बाहर निकाल लेती...
firmware-workshop
Extração, Exploração e Emulação Prática de Firmware Junte-se a nós nesta demonstração prática do Unblob, o extrator de firmware flexível. Durante esta sessão de workshop, vamos extrair firmware de um carregador de veículos elétricos, explorar o firmware e, por fim, emulá-lo para interagirmos com ...
CVE-2023-1430
Update 2023-06-12: Sie benötigen den Snippet nicht mehr. WPManageNinja hat die Sicherheitslücke zwei Stunden nach der öffentlichen Offenlegung gepatcht 93 Tage nach der Meldung. Update 2024-01-27: Das verwandte Problem mit ewigen Hash-Werten ist nun vollständig behoben. Verantwortungsvolle...
CVE-2023-49974
CVE-2023-49974 Customer Support System 1.0 – Cross-Site-Scripting XSS-Sicherheitslücke im Feld/Parameter „contact“ auf der Seite „customerlist“ Beschreibung : Customer Support System 1.0 ist anfällig für gespeichertes XSS. In Version 1 des Customer Support Systems existiert eine...
CVE-2025-3515
CVE-2025-3515 CVE‑2025‑3515 — Caricamento multiplo di file tramite drag and drop per Contact Form 7 Descrizione: Caricamento arbitrario di file tramite drag‑and‑drop‑multiple‑file‑upload‑contact‑form‑7 ≤1.3.8.9 consente il caricamento di file .phar, portando all'esecuzione remota di codice in...
