Netgear R6850 - Information Disclosure

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details,...

JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing

JetBackup WordPress plugin = 2.0.9.9 does not use index files to prevent directory listing in certain configurations, letting malicious actors leak backup files, exploit requires access to the web server. id: CVE-2023-7165 info: name: JetBackup = 2.0.9.7 - Sensitive Information Exposure via...

WordPress JobWP Plugin <= 2.3.9 - SQL Injection

The JobWP - Job Board, Job Listing, Career Page and Recruitment Plugin plugin for WordPress is vulnerable to SQL Injection via the 'jobwpuploadresume' parameter in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...

Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure

The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site's code id: CVE-2023-6065 info: name: Quttera Web Malware Scanner = 3.4.1.48 - Sensitive Data Exposure...

r4ven

如果您觉得这个 GitHub 仓库有用，请考虑给它一个星标！⭐️ ▶️ 观看视频 - 如何使用！ 本项目是一个安全研究和意识提升工具，旨在演示当用户明确授予权限时，现代网络浏览器如何可能暴露位置数据、摄像头访问、IP地址和设备信息 。 该工具提供一个可控制的网页，嵌入合法内容用于演示目的。当用户自愿允许浏览器权限时，应用程序会收集可用的元数据，如GPS坐标、IP信息、设备详情和摄像头输入 ，凸显社交工程和权限滥用如何导致意外的数据泄露。 本项目仅用于安全教育、意识培训和授权测试 ，旨在帮助开发者、渗透测试人员和用户更好地理解浏览器权限风险，改善隐私保护习惯。 🚀 在 Google Shell...

CVE-2021-40375

CVE-2021-40375 - OpenEyes 3.5.1 におけるアクセス制御の欠陥 説明 Apperta Foundation によって開発された OpenEyes 3.5.1 に、不適切なアクセス制御の脆弱性が確認されました。...

DDWPasteRecon

DDWPasteRecon Los sitios de pastes son sitios web que permiten a los usuarios compartir texto plano a través de publicaciones públicas llamadas "pastes". Una vez que los atacantes comprometen el perímetro externo y obtienen acceso a los recursos internos, publican parte de los datos en sitios de...

github-dorks

GitHub Dorks GitHub Search は非常に強力で便利な機能であり、リポジトリ上の機密データを検索するために使用できます。GitHub dork のコレクションは、秘密鍵、資格情報、認証トークンなどの機密性の高い個人情報や組織情報を明らかにする可能性があります。このリストは、セキュリティ評価やシステムのペネトレーションテストに役立つことを目的としています。 GitHub Dork 検索ツール github-dork.py は、リポジトリや組織/ユーザーのリポジトリを検索できるシンプルな Python...

stretcher

Stretcher Stretcher es una herramienta para buscar servidores Elasticsearch abiertos. root@kitploit: Usage: python stretcher.py --shodan key --action analyze --threads 0..100 --dork python stretcher.py --help / // / / // / \ / / / / / / / / / / / // / / / // // / / / / / //// //// ////...

CVE-2022-31793

CVE-2022-31793 -u especificar IP -l especificar archivo de IPs -v modo de verificación -f especificar archivo a leer python poc.py -u ip -v python poc.py -l url.txt -v python poc.py -u ip -f /etc/hosts python poc.py -l url.txt -f /etc/hosts...

Magento-CVE-2019-7139-SQLi-PoC

CVE-2019-7139 PoC: Magento SQLインジェクション このリポジトリは、Ambionics SecurityのCharles Folによって発見された、Magentoの認証不要なSQLインジェクション脆弱性 CVE-2019-7139 PRODSECBUG-2198 に対する概念実証 PoC エクスプロイトを含んでいます。 脆弱性の詳細 CVE ID : CVE-2019-7139 影響を受けるバージョン : Magento Open Source = 1.9.4.0 Magento Commerce = 1.14.4.0 Magento 2.1 = 2.1.16...

CVE-2020-29134

Plataforma Totvs Fluig root@kitploit: Fluig es la plataforma de productividad y colaboración que se integra con el sistema ERP, y con los demás sistemas de tu empresa para revolucionar la forma en que tú y tu equipo trabajan. CVE-2020-29134 root@kitploit: La plataforma TOTVS Fluig permite path...

hammer

Resumen Dow Jones Hammer es una herramienta de seguridad en la nube multi-cuenta para AWS. Identifica malas configuraciones y exposiciones de datos inseguros en los recursos de AWS más populares, en todas las regiones y cuentas. Tiene capacidades de generación de informes casi en tiempo real por...

CVE-2026-84700 Pika Unauthenticated Replication Access via Internal Protobuf Port

PikiwiDB Pika v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 e.g. 11221 when the default client port 9221 is used that does not authenticate incoming requests. Although requirepass is intended to gate replication — a slave presents it as...

DEBIAN-CVE-2026-84327

Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

Octopii

Octopii root@kitploit: ⠀⠀⠀⠀⠀⠀⠀⣤⣤⣄⣀⡀⠀⠀⠀⢀⣠⣤⣤⣄⡀⠀⠀⠀⢀⣀⣠⣤⣤⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠸⣿⣿⡿⠿⢿⣷⡄⢠⣿⣿⣿⣿⣿⣿⡄⢀⣾⡿⠿⢿⣿⣿⠇⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠈⠉⠀⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⠀⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⣠⣤⡀⠀⠀⠀⠀⠀⠀⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⠀⠀⠀⠀⠀⠀⢀⣤⣄⠀⠀⠀ ⠸⣿⣿⣿⣿⣿⣿⣿⣿⣦⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⣴⣿⣿⣿⣿⣿⣿⣿⣿⠇⠀⠀ ⠀⠉⠉⠁⠀⠀⠀⠀⣿⣿⠀⢸⣿⡇⠀⠉⣿⣿⣿⣿⠉⠀⢸⣿⡇⠀⣿⣿⠀⠀⠀⠀⠈⠉⠉⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣀⣈⣻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣟⣁⣀⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

EUVD-2026-69642

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

CVE-2026-73756

CVE-2026-73756 affects an API endpoint in AOS-CX , allowing a remote unauthenticated attacker to obtain sensitive information through a man-in-the-middle (MITM) attack . The retrieved data could be leveraged to further compromise the confidentiality of the affected system. The CVSS 3.1 score is 5...

CVE-2025-32421

CVE-2025-32421 Eclipse Technique Lab Comprehensive demonstration of CVE-2025-32421 Eclipse technique - a sophisticated race condition attack against Next.js 15.0.4 that bypasses the original CVE-2024-46982 patch. WARNING - EDUCATIONAL PURPOSE ONLY This laboratory is designed exclusively for:...