2669 matches found
tmpmail
A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...
memguard
MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...
New API < v0.12.10 - Stripe Webhook Bypass
New API v0.12.10 contains a broken authentication caused by unauthenticated attacker forging Stripe webhook events, letting attackers credit arbitrary quota without payment, exploit requires no authentication. id: CVE-2026-41432 info: name: New API v0.12.10 - Stripe Webhook Bypass author: str4k3r...
Adamantium-Thief
🔓 Adamantium-Thief Chromium ベースのブラウザからパスワード、クレジットカード、履歴、Cookie、ブックマーク、オートフィルを取得します。 Chrome 80 以降に対応しています！ Firefox のパスワード復号化ツールが必要ですか？ 🌿 例: 🔑 ブラウザからパスワードを取得: root@kitploit: Stealer.exe PASSWORDS 💳 ブラウザからクレジットカードを取得: root@kitploit: Stealer.exe CREDITCARDS 🕘 ブラウザから履歴を取得: root@kitploit: Stealer.exe...
fprobe
FProbe FProbe - Fast HTTP Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format...
WordPress wpForo Forum plugin 3.0.0-3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass vulnerability
Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass vulnerability discovered by Usama Arshad in WordPress Plugin wpForo Forum versions 3.0.0-3.1.5...
CVE-2026-80514
The wpForo Forum WordPress plugin (versions 3.0.0 through 3.1.5 ) is vulnerable to unauthenticated AI credit exhaustion . The root cause is a failure to verify the source of client-supplied IP address headers, which are used to key the per-visitor rate limit on paid AI requests. An attacker can b...
CVE-2026-80514 wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass
The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address headers before using them to key its per-visitor rate limit on paid AI requests, allowing unauthenticated attackers to bypass the limit by spoofing the header and exhaust the site...
memscan
memscan プロセスのメモリ空間内で、文字列、正規表現、磁気ストライプカードのトラックに含まれるクレジットカード番号を検索します。 メモリ/プロセススキャナ 著者: Matt Lewis, NCC Group 2014 更新者: Tom Watson, NCC Group 2015 Jesse Bullock 氏の数多くの素晴らしいアイデアに感謝します。 NCC Group Plc によってオープンソースとして公開 - http://www.nccgroup.com/ 開発者: Matt Lewis と Tom Watson、matt dot lewis at nccgroup do...
CVE-2026-22012-Diameter-Protocol-Credit-Control-Bypass-in-5G
CVE-2026-22012 – 5G 中的 Diameter 协议 Credit‑Control 绕过 程序代码（Python Diameter 模拟） root@kitploit: diametercreditcontrolsim.py - Simulated OCS with missing final-unit indication class OCS: def processCCRself, request: Vulnerability: always returns SUCCESS with same quota, never sends final-unit return...
CVE-2026-56681
9Router (versions
CVE-2025-51867
CVE-2025-51867 脆弱性の説明 Deepfiction AIは、パーソナライズされたストーリーテリングに革命を起こすことを使命とするAIエンターテインメント企業です。Deepfiction AIは、LLMとのチャットを通じてストーリーを作成するWebアプリケーションを提供していますが、そのチャットコンポーネントには、不安全な直接オブジェクト参照（IDOR）の脆弱性があります。攻撃者はこのIDORを悪用して、他のユーザーのクレジットでLLMとチャットすることができます。 攻撃ベクトル APIエンドポイント...
DarkTortilla-RAT-Telegram-Exfiltration-Payload-Extraction-Analysis
1. クレジットカード窃取 – カードデータ抽出 Process Hackerのメモリ分析により、DarkTortilla RATがカード番号、有効期限、カード種別などのクレジットカード情報を標的にしていることが明らかになりました。 確認された主要な文字列: cardnumberencrypted – 暗号化されたカード番号。 expirationmonth – 有効期限（月）。 expirationyear – 有効期限（年）。 Mastercard – Mastercardカードを標的にする。 Visa – Visaカードを標的にする。 Discover Card –...
CVE-2026-94292
A flaw was found in Epiphany GNOME Web. The autofill visibility check only tests an element's on-screen size and fails to detect form fields hidden via CSS properties such as display:none, visibility:hidden, or opacity:0. A malicious web page can include hidden form fields that are silently...
Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade)
Summary The service downgrade implementation in app/Livewire/Services/Upgrade.php::doUpgrade executes a proration calculation and a subsequent user credit refund without any transactional safety or database locks. The only concurrency check relies on an unisolated database query checking for...
GHSA-5GMM-HJFJ-8FF7 Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade)
Summary The service downgrade implementation in app/Livewire/Services/Upgrade.php::doUpgrade executes a proration calculation and a subsequent user credit refund without any transactional safety or database locks. The only concurrency check relies on an unisolated database query checking for...
EUVD-2026-83247
Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Services/Upgrade.php::doUpgrade relies on Service::upgradable to check for a pending service upgrade and later executes $credit-increment'amount', abs$price without DB::transactio...
CVE-2026-71537 Paymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade)
Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Services/Upgrade.php::doUpgrade relies on Service::upgradable to check for a pending service upgrade and later executes $credit-increment'amount', abs$price without DB::transactio...
CVE-2026-71537
Paymenter , an open-source webshop solution for hosting services, is affected by a credit-refund double-spend race condition in the service downgrade flow. In app/Livewire/Services/Upgrade.php::doUpgrade(), the method checks Service::upgradable and later executes $credit->increment('amount', a...
CVE-2026-71537 Paymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade)
Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Services/Upgrade.php::doUpgrade relies on Service::upgradable to check for a pending service upgrade and later executes $credit-increment'amount', abs$price without DB::transactio...