Lucene search
+L

3767 matches found

Kitploit
Kitploit
•added 2026/09/30 9:51 a.m.•79 views

yaralyzer

THE YARALYZER Visually inspect all of the regex matches and their sexier, more cloak and dagger cousins, the YARA matches found in binary data and/or text. See what happens when you force various character encodings upon those matched bytes. With colors. Quick Start pipx install yaralyzer Scan...

6.1AI score
SaveExploits0References13
Kitploit
Kitploit
•added 2026/09/30 7:43 a.m.•27 views

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

6.1AI score
SaveExploits0References52
Kitploit
Kitploit
•added 2026/09/30 6:47 a.m.•54 views

jwt-hack

JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo cargo install jwt-hack Homebrew brew install jwt-hack Snapcraft Ubuntu sudo snap install jwt-hack From source git clone https://github.com/hahwul/jwt-hack cd jwt-hack...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/30 5:10 a.m.•67 views

flask-session-cookie-manager

Flask Session Cookie Decoder/Encoder Original author : Wilson Sumanang Fixes and improvements author : Alexandre ZANNI Imported from saruberoz.github.io Depencencies Python 2 or Python 3 itsdangerous Flask Installation Package BlackArch Linux pacman -S flask-session-cookie-manager3,2 Git ArchLinu...

6.1AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/30 4:24 a.m.•15 views

xssor2

XSS'OR XSS'OR - Hack with JavaScript. ONLINE You can have a try: https://xssor.io and http://xssor.io/ It contains three major modules: Encode/Decode, Codz, Probe. INSTALL Python 3 with Django 3.0. or Python 2 with Django 1.11. git clone https://github.com/evilcos/xssor2 or download directly cd...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/30 1:20 a.m.•193 views

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/29 6:30 p.m.•23 views

the-book-of-secret-knowledge

"Knowledge is powerful, be careful how you use it! " A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools, and more. 📔 What is it? This repository is a collection of various materials and tools that I use every day in my work. It contains a lot of useful...

5.9AI score
SaveExploits0References19
NVD
NVD
•added 2026/09/29 5:17 p.m.•4 views

CVE-2026-92231

Joomla! Core - 20260915 - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The checkAttribute method normalized an attribute value before testing it against the "javascript:" scheme regex, however without decoding HTML5 entities...

8.4CVSS
SaveExploits0References2
NVD
NVD
•added 2026/09/29 5:17 p.m.•5 views

CVE-2026-102634

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstraproom fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstraproom values to crash scheduler processes or hang oth...

8.7CVSS
SaveExploits0References7
CVE
CVE
•added 2026/09/29 4:40 p.m.•7 views

CVE-2026-92231

A Cross-Site Scripting (XSS) filter bypass exists in Joomla! Core versions 1.5.0-5.4.8 and 6.0.0-6.1.3 . The vulnerability resides in the InputFilter component's checkAttribute method, which fails to decode HTML5 entities before normalizing attribute values and testing them against the "javascrip...

8.4CVSS5.8AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 4:40 p.m.•5 views

EUVD-2026-89082

Joomla! Core - 20260915 - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The checkAttribute method normalized an attribute value before testing it against the "javascript:" scheme regex, however without decoding HTML5 entities...

8.4CVSS5.8AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 4:04 p.m.•5 views

EUVD-2026-89029

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstraproom fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstraproom values to crash scheduler processes or hang oth...

8.7CVSS5.8AI score
SaveExploits0References7
CVE
CVE
•added 2026/09/29 4:04 p.m.•8 views

CVE-2026-102634

SGLang versions through 0.5.20 are vulnerable to a Denial of Service (DoS) when running in prefill/decode disaggregation mode with the Mooncake KV transfer backend . The root cause is a failure to validate duplicate bootstrap_room fields in /generate requests. An unauthenticated attacker can expl...

8.7CVSS5.8AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/29 6:40 a.m.•11 views

CVE-2020-5844

CVE-2020-5844 PandoraFMS 7.0-NG 742 中的认证远程代码执行漏洞 拥有管理员权限的攻击者可以上传恶意的PHP文档。通过解码base64文件位置,用户可以获得一个以apache用户身份运行的shell。 由 TheCyberGeek 发现 PoC Python 脚本 用法:python3 CVE-2020-5844.py URL USER PASS PHPREVERSESHELL 示例:python3 CVE-2020-5844.py http://10.0.0.2/pandoraconsole admin pandora reverse.php...

7.2CVSS7.6AI score0.30254EPSS
SaveExploits6
SUSE CVE
SUSE CVE
•added 2026/09/28 11:44 p.m.•4 views

SUSE CVE-2026-92842

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

5.9CVSS6AI score0.00357EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/28 11:24 p.m.•16 views

CVE-2022-3602

CVE−2022-3602 ¿Qué es esto? Este documento y repositorio es un informe técnico de CVE−2022-3602, un problema de desbordamiento de búfer en punycode dentro de OpenSSL. Es un «anti-POC» el problema no parece explotable pensado para quienes mantienen sus propias compilaciones de OpenSSL y para los...

7.5CVSS7.9AI score0.92488EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/27 11:06 p.m.•6 views

CVE-2026-28956-jxl-messages-surface

JPEG XL se auto-decodifica en la ruta de vista previa de Mensajes de iOS Un hallazgo sobre la superficie de entrega para CVE-2026-28956 AppleJPEGXL, además de la atribución mediante diff de parches y una verificación de fiabilidad sobre el PoC público. TL;DR — La sabiduría convencional y nuestra...

6.5CVSS6.1AI score0.00464EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/27 8:32 p.m.•14 views

CVE-2026-76070

CVE-2026-76070: Unauthenticated Pre-Auth Stack Buffer Overflow via Base64-Decoded Password in Netis NC63 login.cgi Leading to RCE Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76070 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 Wireless AC1200 Router Tested firmware:...

9.8CVSS6.4AI score0.01338EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/27 7:52 p.m.•11 views

xz-cve-2024-3094

root@ubuntu:/xz/ apt update root@ubuntu: /xz/ apt install -y gcc g++ vim net-tools make cmake build-essential libncurses-dev flex bison libssl-dev libelf-dev bc liblz4-tool liblz4-dev liblzma-dev ... ... root@ubuntu:/xz/ bash ./decode.sh root@ubuntu: /xz/ tar xf xz-5.6.1.tar.xz && cd xz-5.6.1...

10CVSS8.5AI score0.85974EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/26 3:35 p.m.•14 views

decode-spam-headers

decode-spam-headers.py Ya sea que estés tratando de entender por qué un correo electrónico específico terminó en SPAM/Correo no deseado para tus tareas administrativas diarias o para tus propósitos de simulación de phishing Red-Team, ¡este script está ahí para ayudarte! La idea surgió al realizar...

6.1AI score
SaveExploits0References1
Rows per page
Query Builder