240159 matches found
Digital-Privacy
English | 简体中文 There are two kinds of cryptography in this world: cryptography that will stop your kid sister from reading your files, and cryptography that will stop major governments from reading your files. Bruce Schneier《Applied Cryptography》 Inhalt : Informationsschutz,...
linux-exploit-suggester
LES: Audit-Tool für Linux-Privilegieneskalation Schneller Download: root@kitploit: wget https://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh -O les.sh Details zur Nutzung und Funktionsweise von LES: root@kitploit:...
nginxpwner
Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: root@kitploit: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker root@kitploit: git clone...
nginxpwner
Nginxpwner نغينكسباونر هي أداة بسيطة للبحث عن الأخطاء في التهيئة والثغرات الشائعة في إنجينكس. التثبيت: root@kitploit: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh التثبيت باستخدام دوكر root@kitploit: git clone...
Active-Directory-Exploitation-Cheat-Sheet
Cheat Sheet per lo Sfruttamento di Active Directory Questo cheat sheet contiene metodi comuni di enumerazione e attacco per Active Directory di Windows. ℹ️ Questo repository è stato creato da Nikos Katsiopis e Nikos Vourdas. Questo cheat sheet è ispirato al repository PayloadAllTheThings. Sommario...
diaphora
δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...
smbmap
SMBMap SMBMap permite que os utilizadores enumerem unidades de partilha samba em todo um domínio. Liste unidades de partilha, permissões de unidades, conteúdos de partilha, funcionalidade de upload/download, correspondência de padrões para download automático de nomes de ficheiros e até execute...
ctf-skills
ctf-skills Agent Skills per risolvere sfide CTF — exploit web, pwn binario, crittografia, reverse engineering, analisi forense, OSINT e altro ancora. Funziona con qualsiasi strumento che supporti la specifica Agent Skills, incluso Claude Code. Installazionebash npx skills add ljagiello/ctf-skills...
Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name
Overview A DataObject class-definition field name is concatenated, without an identifier allowlist, into the PHP class source that Pimcore generates for every DataObject class protected $;. A user holding only the ordinary objects DataObjects permission can import a class definition whose field...
GHSA-9X44-4GXF-8C25 Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name
Overview A DataObject class-definition field name is concatenated, without an identifier allowlist, into the PHP class source that Pimcore generates for every DataObject class protected $;. A user holding only the ordinary objects DataObjects permission can import a class definition whose field...
CVE-2026-41567
CVE-2026-41567 1day Questa è una dimostrazione di docker escape utilizzando xz / unpigz trojanizzati. Può essere facilmente modificato per essere usato da remoto ad es. basta modificare l'IP predefinito di docker con un C2 remoto. Maggiori informazioni sull'exploit qui PoC Esegui un netcat in...
GHSA-W23P-WRP7-CH38 Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)
Summary Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource deserializes the hotspots object-store column through the Pimcore\Tool\Serialize::unserialize wrapper without a class allowlist the wrapper's $allowedClasses parameter defaults to true, i.e. fully unrestricted...
Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)
Summary Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource deserializes the hotspots object-store column through the Pimcore\Tool\Serialize::unserialize wrapper without a class allowlist the wrapper's $allowedClasses parameter defaults to true, i.e. fully unrestricted...
GHSA-C9F5-J9C3-MHRG Incus has a project restriction bypass in instance copy across projects
Summary Missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new project. This issue could allow an attacker to access secrets in instances they...
EUVD-2026-63985
Incus has a project restriction bypass in instance copy across projects...
Incus has a project restriction bypass in instance copy across projects
Summary Missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new project. This issue could allow an attacker to access secrets in instances they...
GHSA-64F3-V33M-W89F Incus has a project restriction bypass for custom volume copy across projects
Summary Missing authorization checks exist for custom volume copying where an attacker who knows the name of a project that they don't have access to and the name of a custom volume in that project can copy the custom volume to a new project. This issue could allow an attacker to access secrets i...
EUVD-2026-63984
Incus has a project restriction bypass for custom volume copy across projects...
Incus has a project restriction bypass for custom volume copy across projects
Summary Missing authorization checks exist for custom volume copying where an attacker who knows the name of a project that they don't have access to and the name of a custom volume in that project can copy the custom volume to a new project. This issue could allow an attacker to access secrets i...