EUVD-2026-76052

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Live/confirmLivePassword.php. The script interpolates the unauthenticated GET parameter u which is not covered by $securityFilter directly into an attribute withou...

CVE-2026-89148 AVideo Open Redirect via playlistSort.php Referer Header

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a .json.php script, AVideo's automatic CSRF guard autoCSRFGuard/forbidIfIsUntrustedRequest does not run, and when the request includes the sort paramet...

CVE-2026-89148 AVideo Open Redirect via playlistSort.php Referer Header

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a .json.php script, AVideo's automatic CSRF guard autoCSRFGuard/forbidIfIsUntrustedRequest does not run, and when the request includes the sort paramet...

EUVD-2026-76050

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a .json.php script, AVideo's automatic CSRF guard autoCSRFGuard/forbidIfIsUntrustedRequest does not run, and when the request includes the sort paramet...

CVE-2026-89148

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a *.json.php script, AVideo's automatic CSRF guard does not execute. When a request includes the sort parameter, the script sets the Location header to...

CVE-2023-4596-Vulnerable-Exploit-and-Checker-Version

CVE-2023-4596 PoC Script for CVE-2023-4596, An efficient Python tool created to perform unauthenticated Remote Command Execution via arbitrary file uploads. Resources Installation Usage Usage Installation root@kitploit: git clone...

CVE-2024-24919-POC

CVE-2024-24919 PoC 🚀 🔥 Description This script automates the exploitation of CVE-2024-24919 Checkpoint Security Gateway Unauthorized Information Disclosure. 📌 Features ✅ Single & Bulk URL Testing ✅ Automated Exploitation ✅ Simple & Fast 🛠️ Usage Clone this repo and run the script: root@kitploit:...

CVE-2024-22120-RCE-with-gopher

Usage root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Example Scenario You have identified a Zabbix server running on IP 192.168.1.100, and you have access to a low-privileged user with the following details: Session ID sid: d82bf6715e1d3c1f25 Host ID hosti...

cve-2022-29464

cve-2022-29464 Descargo de responsabilidad root@kitploit: El script es solo para fines de aprendizaje y referencia, no ataques de forma maliciosa los sitios web de otras personas Si se cometen actos ilegales o faltas a la disciplina, todas las consecuencias serán asumidas por el usuario La...

batchql

BatchQL BatchQL is a GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. This script is not complex, and we welcome improvements. When exploring the problem space of GraphQL batching attacks, we found that there were a few blog posts on the internet,...

Detection-script-for-cve-2021-23358

Detection-script-for-cve-2021-23358 CVE-2021-23358 的检测脚本 我为 CVE-2021-23358 创建了一个检测脚本，该脚本将检测易受攻击的 node underscore 版本，无论是作为开源工具安装还是仅使用其库。 此脚本具有三个功能，它将从以下来源检测 underscore 的版本： 1. 直接使用 npm 命令 2. 写在库的 PATH 中的版本 3. 库本身内部 underscore 包版本 1.13.0-0 至 1.13.0-2 之前，以及 1.3.2 至 1.12.1...

Nmap-Cheat-Sheet

Nmap 速查表 Nmap 目标选择 root@kitploit: 扫描单个 IP nmap 192.168.1.1 扫描主机 nmap www.testhostname.com 扫描 IP 范围 nmap 192.168.1.1-20 扫描子网 nmap 192.168.1.0/24 从文本文件扫描目标 nmap -iL list-of-ips.txt Nmap 端口选择 root@kitploit: 扫描单个端口 nmap -p 22 192.168.1.1 扫描端口范围 nmap -p 1-100 192.168.1.1 扫描 100 个最常见端口（快速） nmap -F...

CVE-2021-20294-POC

CVE-2021-20294-POC 2023年1月21日, Altin tin-z, github.com/tin-z PoC 下载并编译 root@kitploit: wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so -Wl,--version-script=poc.ver 运行PoC...

http-stalling-detector

Detector de estancamiento HTTP Los ataques DoS por estancamiento HTTP aprovechan la incapacidad de los servidores web para determinar si un cliente remoto simplemente está conectado a través de un enlace lento o si el cliente remoto está enviando datos deliberadamente muy despacio para evitar que...

SQLi_Sleeps

SQLiSleeps Es un script sencillo que permite encontrar vulnerabilidades SQLi, obteniendo un tiempo de respuesta superior a 20 segundos mediante inyección basada en tiempo. root@kitploit: usage: SQLiSleeps2.py -h -u URLS -d DATA -c COOKIE Realiza una petición GET a múltiples URLs con diferentes...

CVE-2021-21975

CVE-2021-21975 检测漏洞 CVE-2021-21975 的 Nmap 脚本 漏洞参考： https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html 博客 https://www.guayoyo.io/post/cve-2021-21975-vmware-vrealize-operations-manager-ssrf-lo-que-necesitas-saber 示例 nmap -p443...

pythia

Introduction / tl;dr This tool scans an executable file for Delphi data, including RTTI and virtual function tables. It outputs a JSON file with information about identified classes and functions, which can be used for additional analysis, for example: Generate a class tree. Generate names &...

safetext

safetext Este no es un producto con soporte oficial de Google. Bibliotecas seguras por construcción para producir formatos como YAML, para reemplazar bibliotecas que no conocen la sintaxis, como text/template y sprintf, que corren el riesgo de sufrir vulnerabilidades de inyección. Caso de uso de...

Vmware-ESXI

CVE-2024-37085 unauthenticated shell upload to full administrator on domain-joined esxi hypervisors. Download ESXIVORTEX Details: an authentication bypass which leads to shell upload in context of vpxuser leading to full administrative permission on domain-joined ESXI hypervisors. in order to...

WordPress-RCE-CVE-2019-8942

WordPress Crop Image RCE — CVE-2019-8942 / CVE-2019-8943 Python3 implementation of the authenticated WordPress crop-image exploitation chain. The repository is organized around two independent workflows: a manual OSCP-style script and a fully automated script with an integrated reverse-shell...