cve-2019-7192-check

Comprobador de RCE root sin autenticación en QNAP CVE-2019-7192 CVE-2019-7195 Uso: root@kitploit: pip install requests ./CheckerforQNAPRCEcve2019719295.py /path/to/ip-port.txt Ejemplo de archivo de entrada: root@kitploit: 1.2.3.4 8080 2.3.4.5 443 Esta herramienta toma una lista de IPs y puertos d...

flight-risk

flight-risk flight risk /flaɪt rɪsk/ — React's Flight protocol is the serialization layer behind React Server Components. CVE-2025-55182 exploits a deserialization flaw in Flight to achieve pre-auth RCE. If your app uses RSC, it's a flight risk. Security toolkit for CVE-2025-55182 React2Shell — a...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

zabbix-threat-control

Zabbix Threat Control ztc Convierte el Zabbix que ya ejecutas en una consola de gestión de vulnerabilidades. ztc lee el inventario de software de cada host a través del zabbix-agent2 de serie sin desplegar agentes adicionales, lo audita contra Vulners y envía de vuelta a Zabbix hallazgos puntuado...

CVE-2022-26809

CVE description CVE-2022-26809 - weakness in a core Windows component RPC earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution RCE with the privileges of the RPC service,...

CVE-2022-21907

CVE-2022-21907 Description 1. This repository detects a system vulnerable to CVE-2022-21907 CVSS:3.1 9.8 and protects against this vulnerability if desired. I offer 2 powershell codes in 1 line. 2. I propose pure python, powershell, ruby scripts and metasploit, nmap modules to attack a vulnerable...

CVE-2024-27198

CVE-2024-27198 CVE-2024-27198 - Authentication Bypass Using an Alternate Path vulnerability in JetBrains TeamCity Server Please refer to Rapid7's blogpost for more information: CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities Products and Versio...

CVE-2025-15030

CVE-2025-15030 User Profile Builder 3.15.2 - Unauthenticated Arbitrary Password Reset CVE-2025-15030 User Profile Builder — Unauthenticated Password Reset → Admin Takeover + Shell Upload root@kitploit: / / \ |/ / / / / / \ / / / \ / \ | / | | //| \ / /| / | / /| \ | || | / | / || / | |...

SneeitScanner-CVE-2025-6389

SneeitScanner-CVE-2025-6389 SneeitScanner - PoC & Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 ⚡ SneeitScanner ⚡ Proof of Concept PoC and Automated Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 This robust Python script is a functional PoC and scanner tool...

CVE_Prioritizer

CVE Prioritizer CVE Prioritizer es una herramienta potente que te ayuda a priorizar la aplicación de parches de vulnerabilidades combinando CVSS, EPSS, las Vulnerabilidades Explotadas Conocidas de CISA y los recursos comunitarios de VulnCheck NVD++, KEV. Proporciona información valiosa sobre la...

CVE-2023-32243-Detection-and-Mitigation-in-WordPress

🔐 CVE-2023-32243 – Detection and Mitigation in WordPress 📘 Project Title: Detection and Mitigation of CVE-2023-32243 in the Essential Addons for Elementor WordPress Plugin 🧠 Abstract This project explores the exploitation and prevention of CVE-2023-32243 , a critical privilege escalation...

CVE-2026-82222

⚡ GHOSTLYR00T - GiveWP RCE Exploit Framework CVE-2026-82222 - GiveWP Unauthenticated RCE Exploit Mass Scanner + Auto-Detection + Multi-Threading + Interactive Shell 📋 Daftar Isi | Table of Contents Overview Fitur Utama | Key Features Vulnerability Details Instalasi | Installation...

thymeleaf-check

thymeleaf-check ThymeleafCVE-2026-40477 / CVE-2026-41901 离线排查工具 —— 零依赖、单 jar、不联网。 两条 CVSS 9.0 的 SSTI 绕过,九天内连出两个修复版。它先回答「我中了哪几条」, 然后回答那个更难受的问题: 我这条版本线,有没有能升的修复版? 对 3.1.x ,有升到 3.1.5.RELEASE 就完事。 对 3.0.x 及更早 ,没有 —— 而那恰恰是装机面最大的一批人。 为什么需要它 两条 advisory 的受影响范围,在 OSV 里都是 introduced: 0: root@kitploit: cur...

spring-cvss-check

spring-cvss-check 覆盖 15 条 Spring / Tomcat 官方安全公告2026-08-20 七条 · 2026-06-08 五条 · 2025-09-15 一条 · Tomcat 2026-08-25 两条。 其中 8 条,接 NVD 的扫描器报CRITICAL 9.19.8,而厂商官方评的是 LOW / MEDIUM。 另外 7 条两边评级完全一致 —— 差别只有一个:厂商有没有自己给 CVE 记录提交 CVSS 分数。 这个工具回答四个问题: 1. 你的版本中了这 15 条里的哪几条 2. 官方到底评多少分以及 NVD 上那个分是谁打的 3...

Exploit-For-CVE-2026-18963

CVE-2026-18963 — Keycloak Unauthenticated Account Takeover CVSS 9.1 Critical · Keycloak 26.0.0 – 26.7.1 · Unauthenticated A critical vulnerability in Keycloak's reset-credentials flow that allows an unauthenticated attacker to take over any user account without email verification by chaining two...

CVE-2026-19632-POC

CVE-2026-19632 — TranslatePress Unauthenticated Account Takeover Unauthenticated Account Takeover via Password Reset Link Disclosure Contact TG:@soldout0O 💙 Support the Project If you appreciate my work, consider supporting the project via USDT TRC20: TQBA72kakjCZLnJt8fJYcD7dyQCEpzNtVN...

CVE-2026-23918-Elite-Auditor

☣️ CVE-2026-23918-Elite-Auditor ☣️ Professional Intelligence & Reconnaissance Tool for Apache HTTP/2 Double-Free Vulnerability. 📌 Overview CVE-2026-23918 CVSS 8.8 is a critical memory corruption flaw in Apache HTTP Server 2.4.66. This auditor is designed to safely fingerprint targets and assess...

cve-2026-60004

CVE-2026-60004 — Gitea = 1.27.0 Pre-Auth Remote Code Execution Description CVE-2026-60004 is a critical vulnerability CVSS 9.8 in Gitea that allows unauthenticated remote code execution via the /api/v1/repos/owner/repo/diffpatch endpoint. Tools 1. Detector detector.py Detects whether a Gitea...

CVE-2026-3395-MaxSite-CMS-Unauthenticated-RCE

CVE‑2026‑3395 — MaxSite CMS Unauthenticated Remote Code Execution...

blue-team-capstone

Blue Team Capstone Project Overview This project is a Blue Team cybersecurity capstone focused on vulnerability assessment, risk evaluation, and remediation. The assessment focuses on CVE-2009-0658 , a vulnerability affecting Adobe Acrobat and Reader. The goal of the project was to evaluate the...