CVE-2020-14321

CVE-2020-14321 Course enrolments allowed privilege escalation from teacher role into manager role to RCE Maybe someone needs Python script, therefore, I have written it to exploit. How to use this PoC: root@kitploit: How to use this PoC script Case 1. If you have vaid credentials: python3...

CVE-2025-46204

Descrizione Unifiedtransform v2.0 è vulnerabile a un controllo di accesso non corretto. Qualsiasi utente studenti e insegnanti può accedere e modificare i dettagli del corso tramite gli endpoint /course/edit/id. Questa funzionalità è destinata esclusivamente all'uso amministrativo. Sfruttando...

hackaday-u

Hackaday U - Introduzione al Reverse Engineering con Ghidra Questo repository contiene gli esercizi e i materiali di risorse per il corso Hackaday-U: Introduzione al Reverse Engineering con Ghidra. Lo scopo di questo corso è fornire una panoramica su come utilizzare Ghidra e su come fare reverse...

CVE-2025-70899

Questo repository contiene la Proof of Concept che dimostra la vulnerabilità di protezione CSRF mancante nel PHPgurukul Online Course Registration System. 📄 Visualizza la PoC completa qui: MissingCSRFprotectionpoc.md...

CVE-2021-45416

Docker RosarioSIS Installazione Requisiti minimi: Docker e Git funzionanti. Puoi scaricare l'immagine da DockerHub oppure: 1. docker on root@kitploit: $ git clone https://github.com/dnr6419/CVE-2021-45416.git $ cd CVE-2021-45416 $ docker-compose up -d 2. Visita l'URL e installa il database...

CVE-2026-26717

CVE-2026-26717: Attacco di Timing HMAC in OpenFUN Richie LMS Autore: Elvin Latifli ID CVE: CVE-2026-26717 Gravità: Media CVSS 3.1: 4.8 — AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Prodotto interessato: OpenFUN Richie tutte le versioni precedenti al commit a1b5bbd Componente interessato:...

CVE-2008-2992

EP284U Dieses Projekt befasst sich mit CVE-2008-2992. Autor Name| E-Mail ---|--- Jonas Holmberg| [email protected] Inhaltsverzeichnis EP284U Autor Inhaltsverzeichnis Projektvorschlag Abschlussbericht Skripte Installation und Einrichtung Proof of Concept Projektvorschlag...

Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference

Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3. id: CVE-2024-33939 info: name: Masteriyo LMS = 1.7.3 - Insecure Direct Object Reference author:...

LearnPress < 4.2.7.4 - Course Material - Information Disclosure

LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by insecure handling in class-lp-rest-material-controller.php, letting unauthenticated attackers extract paid course material, exploit requires no authentication. id: CVE-2024-11868 info: name: LearnPress 4.2.7.4 -...

CVE-2025-67730

CVE-2025-67730 – संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS अवलोकन CVE ID: CVE-2025-67730 भेद्यता प्रकार: संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS गंभीरता: मध्यम–उच्च संदर्भ-निर्भर यह भेद्यता प्रमाणित उपयोगकर्ताओं को Job , Course , और Batch प्रपत्रों के विवरण फ़ील्ड में दुर्भावनापूर्ण HTML और JavaScript...

CVE-2026-1375

CVE-2026-1375: Authentifizierte IDOR / Fehlerhafte Zugriffskontrolle im Tutor LMS Plugin Haftungsausschluss: Dieses Repository dient ausschließlich Bildungszwecken und ethischer Offenlegung. Die Schwachstelle wurde verantwortungsvoll an den Anbieter gemeldet und behoben. Verwenden Sie diese...

exploitation-course

CORSO DI OFFENSIVE SECURITY & REVERSE ENGINEERING OSRE Questo repository contiene il corso di Offensive Security e Reverse Engineering Offensive Software Exploitation che ho tenuto al Champlain College e che ora condivido gratuitamente online guarda il canale YouTube per le registrazioni. La...

CVE-2025-65669

CVE-2025-65669 classroomio 0.1.13 में एक समस्या पाई गई। छात्र खाते एक्सप्लोर पेज से कोर्स को बिना किसी प्राधिकरण या प्रमाणीकरण जांच के हटा सकते हैं, जो अपेक्षित एडमिन-केवल हटाने के प्रतिबंध को दरकिनार करता है। खोजकर्ता - रिवेक राज तमांग RivuDon, सिक्किम, भारत। प्रभावित उत्पाद: ClassroomIO प्रभावि...

cve-2014-6271-huan-lu

cve-2014-6271-huan-lu Lesekurs...

CVE-2020-14321

Script Python per sfruttare CVE-2020-14321 - Moodle 3.9 Le iscrizioni ai corsi consentivano l'escalation dei privilegi dal ruolo di insegnante al ruolo di manager fino alla RCE. Gli insegnanti di un corso potevano assegnarsi il ruolo di manager all'interno di quel corso. Payload estratto da:...

CVE-2020-14321-modified-exploit

CVE-2020-14321-modificato-exploit originale: https://github.com/HoangKien1020/CVE-2020-14321 Exploit Moodle modificato per escalation di privilegi Dorvack root@kitploit: ┌──kali㉿kali-/…/192.168.1.121/exploits/CVE-2020-14321/modified └─$ proxychains python cve202014321.py -url...

linux-basics-for-hackers-notes

Linux-Grundlagen für Hacker — Kurs Ein strukturierter Kurs, der aus persönlichen Studiennotizen zum Buch Linux Basics for Hackers von OccupyTheWeb entstanden ist. Jedes Modul erklärt die Kernkonzepte, Befehle und praktischen Beispiele in einfachem Englisch – einfach genug für Anfänger, detaillier...

CVE-2026-19094

The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not restrict which template file a request may load, allowing unauthenticated users to inject SQL and to read question and answer content belonging to courses that are not publicly...

CVE-2026-19094

The Tutor LMS WordPress plugin (versions

EUVD-2026-66273

The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not restrict which template file a request may load, allowing unauthenticated users to inject SQL and to read question and answer content belonging to courses that are not publicly...