45420 matches found
CVE-2022-22965-Spring4Shell-Security-Operations-Analysis
CVE-2022-22965 β Spring4Shell Security Operations Analysis A hands-on Security Operations Centre SOC simulation where I performed the role of an Information Security Analyst responding to an active Spring4Shell exploitation attempt. This repository documents the full incident response lifecycle β...
CVE-2025-55182
CVE-2025-55182 - ExplotaciΓ³n de RCE en React Server Components Exploit de CLI en Python para CVE-2025-55182, una vulnerabilidad crΓtica de RCE en React Server Components a travΓ©s de react-server-dom-webpack. Basado en: ejpir/CVE-2025-55182-poc Inicio RΓ‘pido Pruebas con Docker root@kitploit: Unpac...
CVE-2026-41940
The recent CVE-2026-41940 vulnerability has raised great concern among server administrators using cPanel/WHM. It is a critical flaw that can allow authentication bypass, enabling unauthorized access to the administrative panel without valid credentials. Considering that WHM is the main control...
CVE-2026-67401-cPanel-EmailTrack-SQLi
CVE-2026-67401 β cPanel & WHM EmailTrack SQL Injection β Root RCE IOC Scanner, Detection Toolkit & Remediation Guide for the cPanel EmailTrack SQL Injection Vulnerability Keywords: CVE-2026-67401, cPanel exploit, cPanel SQL injection, WHM vulnerability, EmailTrack SQLi, cPanel root RCE, cPanel IO...
CVE-2026-21020-Protobuf-Message-Parsing-Polymorphic-Deserialization-Vulnerability
CVE-2026-21020 β Protobuf Message Parsing Polymorphic Deserialization Vulnerability Program Code Python with protobuf root@kitploit: protovuln.py - Insecure handling of Any type import addressbookpb2 Example protobuf Simulated deserialization that trusts an injected typeurl from google.protobuf...
cve-2025-55182
π‘οΈ React2Shell CTF π Bienvenido a React2Shell-CTF , un entorno Dockerizado diseΓ±ado para practicar la explotaciΓ³n de React2Shell CVE-2025-55182. React2Shell es una vulnerabilidad crΓtica que afecta a aplicaciones basadas en React. Este repositorio proporciona un desafΓo Capture The Flag CTF seguro...
CVE-2024-27198_Lab
Laboratorio CVE-2024-27198 DescripciΓ³n TeamCity proporciona una pΓ‘gina solo para administradores para la gestiΓ³n de tokens que no estΓ‘ protegida por autenticaciΓ³n. Esto permite que un usuario no autenticado genere un token de acceso para el usuario administrador si puede encontrar un ID de un...
CVE-2025-14733
WatchGuard IKEv2 Scanner β CVE-2025-14733 Identifica los dispositivos WatchGuard Firebox vulnerables a CVE-2025-14733, una vulnerabilidad crΓtica de preautenticaciΓ³n en la implementaciΓ³n de IKEv2 del sistema Fireware OS. Esta herramienta realiza una detecciΓ³n segura de versiones mediante la...
CVE-2025-32462-and-CVE-2025-32463---Critical-Sudo-Vulnerabilities
Este repositorio no tiene un README...
CVE-2026-38360
CVE-2026-38360: Path Traversal en dash-uploader...
CVE-2026-3891-Linux
root@kitploit: βββββββββββββββ βββββββββββββββ ββββββββββ ββββββββ ββββββββββββββββββββββββββββββββ βββββββββββββββββββ ββββββ βββββββββββββββββ ββββββ ββββββ βββββββββββ ββββββ βββββββββββββββββ βββββββββββββ βββββββββββ βββ βββ βββββββββββββββββ ββββββββββββββββββββββ βββ βββ βββββββββββββββββ...
CVE-2026-34197
CVE-2026-34197 Apache ActiveMQ Remote Code Execution via Jolokia API...
vuln-ejs-critical
Este repositorio no tiene un README...
CVE-2026-79617
Incorrect Permission Assignment for Critical Resource vulnerability in TΓBΔ°TAK BΔ°LGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15...
TelnetdBypass-
TelnetdBypass β EscΓ‘ner CVE-2026-24061 Un escΓ‘ner de seguridad basado en Python que detecta y explota CVE-2026-24061 , una vulnerabilidad crΓtica CVSS 9.8 de omisiΓ³n de autenticaciΓ³n en versiones 1.9.3 a 2.7 del telnetd de GNU InetUtils. CΓ³mo funciona El escΓ‘ner inyecta un valor malicioso USER=-f...
CVE-2026-22785
CVE-2026-22785 Reproduction Tutorial Vulnerability Overview CVE : CVE-2026-22785 Impact : orval = 7.18.0 CVSS : 9.3 CRITICAL Type : Code Injection Vulnerability Principle orval 7.18.0 directly concatenates the summary field from the OpenAPI specification into the template when generating MCP serv...
CVE-2026-79965
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...
EUVD-2026-74896
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...
CVE-2026-79965
Dell Secure Connect Gateway 5.0 (both Appliance and Application editions) is affected by an External Control of Critical State Data vulnerability. An unauthenticated attacker with network access could exploit it to achieve unauthorized access , resulting in a low confidentiality impact (CVSS 3.1:...
CVE-2026-79961
Dell Secure Connect Gateway (SCG) 5.0 contains a Missing Authentication for Critical Function vulnerability. Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . An unauthenticated attacker with network access could potentially exploit the flaw to gain unautho...