CVE-2025-5777

CVE-2025-5777 - Citrix NetScaler Memory Leak Exploit 📌 Overview This tool demonstrates CVE-2025-5777 , a critical memory disclosure vulnerability in Citrix NetScaler ADC/Gateway devices. The exploit leaks sensitive memory contents via malformed authentication requests. Key Features: ✔ Memory leak...

CVE-2021-43798

CVE-2021-43798 Recorrido de directorios de Grafana Programa simple para explotar el recorrido de directorios de Grafana instalación gem install httparty gem install colorize gem install timeout ruby cve-2021-43798.rb...

keepass_dump

Keepass-Dumper This is my PoC implementation for CVE-2023-32784 My version is a python port of @vdohney's PoC along with a few changes and additional features. Changes One change, was to use known strings that can be found within the dump file in order to more accurately jump to the location of t...

Vulnerability-Disclosure-Policy

Vulnerability Disclosure Policy We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must participate in co-ordinated vulnerability disclosure. When Enable Security discovers vulnerabilities through its own research, it will notify vendors of these...

ColorOS-CVE-2025-10184

信息来源 漏洞原理及解决方案技术原理 漏洞说明 类型：数据库注入攻击1=1 AND 效果：任意APP读取短信数据。 无需权限、无需用户交互、无感知读取 影响：本机的所有短信信息、短信验证码泄露 涉及范围：OPPO 及其子品牌一加、realme 影响范围：根据maoyixuan提交的机型显示， 17年发布的ColorOS 6.0.1存在漏洞，此漏洞可能伴随了OPPO的OEM生涯 修复情况：10月4日开始对ColorOS 15推送系统文件更新：15.0.0.860Patch01|1.9MB，10月9日对ColorOS 12-14推送 测试漏洞：国内下载...

ctl_ctloutput-leak

ctlctloutput-leak The ctlctloutput function in macOS High Sierra 10.13 ignores the return value of a call to sooptcopyin, which opens up a race window to leak uninitialized kernel heap data to user space. ctlctloutput-leak is a proof-of-concept exploit that attempts to trigger this information...

CVE-2022-45771

CVE-2022-45771 The PwnDoc is vulnerable to both path traversal and local file inclusion LFI, which allows unprivileged users to disclose JWT secrets and achive code execution. Requirements: An attacker has valid account with user role The application has a report template with either...

CVE-2025-50422

Poppler before version 25.04.0 When pdftocairo renders a malicious PDF and calls cairodebugresetstaticdata on exit, heap memory containing PDF object streams is not properly cleared. An attacker with local access can dump process memory and recover clear-text PDF content e.g., /stream /endstream...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Veeam Backup & Replication Vulnerability Vulnerability Description Veeam Backup & Replication contains a vulnerability that allows encrypted credentials stored in the configuration database to be obtained, allowing attackers to access backup infrastructure hosts. Nuclei Template...

Blackash-CVE-2025-66516

🚨 CVE-2025-66516 — Critical Apache Tika Vulnerability CVSS: 10.0 | Exploit Type: XXE Injection | Risk Level: MAXIMUM 🎯 Executive Summary CVE-2025-66516 is a critical XML External Entity XXE vulnerability in Apache Tika’s core processing engine. A single malicious PDF with XFA content can trigger:...

CVE-2020-11579

CVE-2020-11579 Introducción PHPKB 9.0 Enterprise Edition base de datos MySQL está afectado por una divulgación arbitraria de archivos no autenticada a través de un servidor MySQL malicioso. Un atacante remoto puede leer cualquier archivo en un host víctima remoto con privilegios de servidor web p...

CVE-2017-7529-

CVE-2017-7529-Desbordamiento de Entero en el Encabezado Range de Nginx Nginx es un servidor web de alto rendimiento y un servidor proxy inverso, de caché, etc., ampliamente utilizado. En versiones de Nginx 1.13.2 e inferiores, existe una vulnerabilidad de desbordamiento de enteros que permite a u...

scanginx

Scanginx Escáner para Nginx - Vulnerabilidad de desbordamiento de entero remoto Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a la vulnerabilidad de desbordamiento de entero en el módulo de filtro de rango de nginx, lo que resulta en una fuga de información...

CVE-2025-54352

CVE-2025-54352 PoC Usage Steps to install and test the WordPress PoC: 1. Install a fresh version of WordPress using Docker: 1.1 Start the MySQL database container: root@kitploit: docker run --name wp-db -e MYSQLDATABASE=wp-db -e MYSQLUSER=wpuser -e MYSQLPASSWORD=password -e...

CVE-2023-49103

CVE-2023-49103 PoC para el CVE-2023-49103 Resumen Este script de Python está diseñado para procesar de manera eficiente una gran lista de URLs y verificar la presencia de la salida de phpinfo. Utiliza múltiples hilos multi-threading para manejar un gran número de URLs de forma concurrente,...

CVE-2024-57484

CVE-2024-57484 Directory listing vulnerability was found in the FoxyProxy extension. This issue allows unauthorized users to view the structure and content of the extension internal files including log.js,commands.js,schema.json,authentication.js and location.js along with their last-modified...

r3con

R3CON Multifunctional Web Recon & Vulnerability Scanner Tool r3con is a Multifunctional Web Recon & Vulnerability Scanner Tool and incredibly fast crawler that can find multiple vulnerabilitys and gather information. Check for vulnerabilities Reflected XSS Multi-threaded crawling Open-redirection...

CVE-2022-25584

Flexwatch Flexwatch-CVE This document is for CVE-2022-25584 "RESERVED" https://vulners.com/cve/CVE-2022-25584 This vulnerability has been indexed by CNVD, but has not yet been made public CNVD ID:CNVD-2021-103443 Vulnerability to reproduce: We found that the FlexWATCH FW3170-PS-E Network Video...

GitDorker

GitDorker GitDorker is a tool that utilizes the GitHub Search API and an extensive list of GitHub dorks that I've compiled from various sources to provide an overview of sensitive information stored on github given a search query. The Primary purpose of GitDorker is to provide the user with a cle...

CVE-2019-15514

CVE-2019-15514 Type: Information Disclosure Affected Users, Versions, Devices: All Telegram Users Still not fixed/unpatched. brute.py is available exploit written under python. Description Suppose ali is hacktivist. His telegram user ID is 21788973 and mobile number is hidden. He lives in pakista...