Wordpress-Default-Password

वर्डप्रेस डिफ़ॉल्ट U/P python 2.7 दान : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614 एन्क्रिप्ट बाय अज़ीम !...

Burp_AES_Plugin

Burpsuite-Plugin für AES-Crack 0x00 mvn install, um die Jar-Datei zu erhalten git clone https://github.com/jas502n/BurpAESPlugin/ cd /github/BurpAESPlugin/AESDecode vi src/main/java/burp/BurpExtender.java mvn install root@kitploit: INFO --- maven-install-plugin:2.4:install default-install @...

CVE-2025-8081-Elementor

CVE-2025-8081 – Elementor-Schwachstelle für beliebiges Dateilesen Eine kritische Schwachstelle für beliebiges Dateilesen im Elementor-WordPress-Plugin, die es authentifizierten Administratoren ermöglicht, jede Datei zu lesen, auf die der Webserver zugreifen kann, einschließlich sensibler...

CVE-2026-44578

CVE-2026-44578 — SSRF nell'aggiornamento WebSocket di Next.js Server-Side Request Forgery pre-autenticazione nelle distribuzioni self-hosted di Next.js. Una singola richiesta HTTP appositamente costruita estrae credenziali AWS, segreti e dati di servizi interni da localhost:80...

CVE-2026-3055-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-3055 Scanner - NetScaler Memory Overread Detection Tool ⚠️ WARNUNG Dieses Tool dient ausschließlich Bildungszwecken und autorisierten Tests. Nicht auf Systemen ohne ausdrückliche Genehmigung des Eigentümers verwenden. 📋 Beschreibung Erkennungstool für CVE-2026-3055, das Citrix NetScaler...

iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC

Validazione Inadeguata degli Input in Siri Shortcuts e Shared Web Credentials Scoperto da: Joseph Goydish II Data di scoperta: 20 agosto 2025 Gravità: Alta Sommario Esecutivo Questo rapporto descrive una catena di vulnerabilità ad alta gravità che interessa Siri Shortcuts e il framework Shared We...

IoT-Vulnerability-Research-Public

Pesquisa em Segurança de Hardware e Vulnerabilidades Este repositório serve como um arquivo público centralizado para minha pesquisa independente de vulnerabilidades, auditorias de hardware e Divulgações Coordenadas de Vulnerabilidades CVD. Todos os scripts de prova de conceito, extrações de...

netgear-telenetenable

telnetenable.py Paul Gebheim Tradotto dal sorgente C disponibile su http://wiki.openwrt.org/oldwiki/openwrtdocs/hardware/netgear/telnetconsole Esecuzione: python telnetenable.py IP - L'indirizzo IP del tuo dispositivo Netgear, solitamente 192.168.1.1 MAC - L'indirizzo MAC deve essere l'indirizzo...

CVE-2021-43798

CVE-2021-43798 Script di verifica batch scritto in Golang, con 48 verifiche integrate Ci sono già troppi script scritti in Python, ho provato a imparare Golang Utilizzo Salva gli URL in url.txt, poi esegui go run CVE-2021-43798.go nella directory corrente. Gli indirizzi vulnerabili verranno salva...

Hawk

Hawk Intercepte silenciosamente credenciais SSH e SU em tempo real O Hawk monitora processos sshd e su, extraindo senhas da memória via ptrace sem modificar os processos alvo. Zero gravações. Coleta de credenciais puramente somente-leitura. Demonstração Como Funciona O Hawk aproveita o sistema de...

CVE-2026-0770

🚀 CVE-2026-0770 – Langflow RCE execglobal PoC Vulnerabilidade de Execução Remota de Código no Langflow 📌 Software Afetado Esta vulnerabilidade afeta: Langflow 🧠 Visão Geral da Vulnerabilidade CVE-2026-0770 é uma vulnerabilidade de Execução Remota de Código RCE no endpoint: root@kitploit:...

halo-cors-csrf-CVE-2026-67921

CVE-2026-67921: Halo CMS CORS-Fehlkonfiguration + CSRF-Schutz-Umgehung – Kombinierter Angriff Zusammenfassung Eine kritische kombinierte Angriffsschwachstelle existiert in Halo CMS bis Version 2.25.4 aufgrund von zwei Sicherheitsfehlkonfigurationen: 1. CORS-Fehlkonfiguration : Die CORS-Richtlinie...

CVE-2024-3400

Preuve de concept de CVE-2024-3400 uniquement à des fins éducatives. utilisez uniquement sur des serveurs pour lesquels vous avez l'autorisation de tester. Comment-Utiliser dépendances : root@kitploit: $ pip install rich scannez targets.txt : root@kitploit: $ python run.py -f targets.txt -t 10 -...

EUVD-2026-66762

A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...

CVE-2023-34039

CVE-2023-34039 POC pour CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight Clé SSH statique RCE Analyse Technique Une analyse de cause racine de la vulnérabilité est disponible sur mon blog : https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/...

PT-2026-82797

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

PT-2026-82782

Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through visual or remote observation. This undermines the confidentiality of device access...

PT-2026-82779

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

CVE-2026-79000

Improper input validation in DeviceBoundSessionCredentials in Google C...

PT-2026-82744

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...