93927 matches found
gpp-encrypt
gpp-encrypt Descrizione Questo piccolo script crittografa la password in cpassword gpp. È utile per creare un lab AD vulnerabile. Requisiti Questo pacchetto richiede: python3 Libreria standard di python3 Installazione root@kitploit: git clone "https://github.com/mauricelambert/gpp-encrypt.git" cd...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.11 packages and security update
Red Hat OpenShift Container Platform release 4.22.11 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...
golang: Go os.Root: Symlink following vulnerability allows directory traversal
A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...
CVE-2022-26923-Powershell-POC
CVE-2022-26923-Powershell-POC Ein PowerShell-PoC, um Certify und Rubeus aus dem Speicher zu laden und automatisch auszuführen. Wie funktioniert es? 1. Lädt Certify.exe und Rubeus.exe in den Speicher. 2. Scannt das Zielgerät auf falsch konfigurierte Zertifikatsvorlagen. Mehr unter...
CVE-2025-4138
CVE-2025-4138 Vulnerabilità di Directory Traversal nel modulo Tarfile di Python con overflow incrociato di Directory Impatto : Escalation dei privilegi Funzionamento : I metodi TarFile.extractall e TarFile.extract di Python supportano una funzionalità che consente di impostare un filtro per...
CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT
UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...
ninjasworkout
Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...
CVE-2018-11235-PoC
CVE-2018-11235 के लिए PoC शोषण root@kitploit: repository: http://REDACTED/2018-11235PoC.git/ return: Submodule 'aaa' https://repo1 registered for path 'aaa' Submodule '../../fakegit/modules/evil' https://repo2 registered for path 'evil' Submodule path 'aaa': checked out...
eviltree
EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...
CVE-2026-77140
TYPO3 extension Telephone Directory (telephonedirectory) suffers from a Broken Access Control flaw. The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, but not in the action that persists the change. As a result, an unauthenticated visi...
CVE-2026-77140 Broken Access Control in extension "Telephone Directory" (telephonedirectory)
The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, not in the action that persists the change. An unauthenticated visitor who knows the UID of a visible employee record can send a direct POST request to the update action and overwrite...
CVE-2026-77142 Broken Access Control in extension "Industry Directory" (yellowpages2)
The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own, but the corresponding write operation does not repeat this ownership check on the server side. As a result, a visitor who knows the...
CVE-2026-77141
CVE-2026-77141 is a Broken Access Control vulnerability in the TYPO3 extension Club Directory (clubdirectory). The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions but performs no ownership check in any of them. A...
CVE-2026-77142
CVE-2026-77142 is a Broken Access Control vulnerability in the TYPO3 extension Industry Directory (yellowpages2) . The frontend self-service editing feature hides the edit form using a template-level visibility flag for company records a visitor does not own, but the corresponding server-side wri...
CVE-2026-77141 Broken Access Control in extension "Club Directory" (clubdirectory)
The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activa...
TYPO3-EXT-SA-2026-020: Broken Access Control in extension "Industry Directory" (yellowpages2)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-020...
TYPO3-EXT-SA-2026-018: Broken Access Control in extension "Telephone Directory" (telephonedirectory)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-018...
TYPO3-EXT-SA-2026-019: Broken Access Control in extension "Club Directory" (clubdirectory)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-019...
cve-2024-32002-submodule-aw
CVE-2024-32002 Submódulo AW Um submódulo para demonstrar a CVE-2024-32002. Demonstra escrita arbitrária no .git. Veja cve-2024-32002-poc-aw para o POC funcional que utiliza este repositório. O que este repositório contém Simplesmente, um arquivo aleatório para que possamos detectá-lo ao clonar o...
cve-2024-32002-poc-aw
CVE-2024-32002 PRC AW Una POC per CVE-2024-32002 che dimostra la scrittura arbitraria nella directory .git. Vedi cve-2024-32002-submodule-aw per il repository del sottomodulo correlato. Cosa contiene questo repo Un symlink con un nome arbitrario che punta alla directory .git. Un file .gitmodules...