53968 matches found
hyenae-ng
Hyenae NG Hyenae NG Next Generation è una riscrittura del tool originale Hyenae che fu originariamente pubblicato nell'anno 2010. Oltre al passaggio da C a C++ e all'utilizzo di moderni concetti di progettazione, Hyenae NG è stato proprio come l'originale Hyenae scritto con la massima portabilità...
CVE-2019-19511
CVE-2019-19511 Chevereto - 1.0.0 Free - 1.1.4 Free, = 3.13.4 Core, Esecuzione di codice remoto Descrizione installer.php in Chevereto fino alla versione 1.1.4 Free e fino alla 3.13.4 Core consente agli amministratori autenticati in remoto di eseguire codice PHP arbitrario iniettando questo codice...
dheat_dos_attack_poc
DHeat DoS Attack POC CVE-2002-20001 POC para testar a existência do ataque DoS DHEat CVE-2002-20001 no serviço SSH Uso comando: python3 dheatdosattackpoc.py : Substitua pelo endereço IP real ou nome de host do servidor SSH que você tem permissão para testar. : Número da porta de destino que execu...
ROOT-OS-DEBIAN-12-CVE-2025-49506 CVE-2025-49506 in apr-util - Patched by Root
Root has patched CVE-2025-49506 in the apr-util package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-34501 CVE-2026-34501 in apr-util - Patched by Root
Root has patched CVE-2026-34501 in the apr-util package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-34191 CVE-2026-34191 in apr-util - Patched by Root
Root has patched CVE-2026-34191 in the apr-util package for Root:Debian:12. Multiple fixed versions available...
ban-exploitable-bitcoin-nodes
ban-exploitable-bitcoin-nodes अपने नोड CVE-2018-17144 से सभी सेवा-निषेध-हमला भेद्यता शोषण योग्य नोड्स पर प्रतिबंध लगाएं bash स्क्रिप्ट ban.sh के लिए आवश्यकताएँ कमांड-लाइन JSON प्रोसेसर jq डेबियन-आधारित लिनक्स पर इंस्टॉल करें root@kitploit: sudo apt-get install jq स्क्रिप्ट डाउनलोड करें और उपयोग...
nmap-CVE-2022-21907
nmap-CVE-2022-21907 CVE-2022-21907 कमज़ोरी के लिए nse स्क्रिप्ट वाला रिपॉज़िटरी। यह विंडोज़ पर एक घटक IIS कमज़ोरी है। यह रिमोट कोड निष्पादन की अनुमति देता है। यह कमज़ोरी कर्नेल मॉड्यूल http.sys को प्रभावित करती है, जो अधिकांश बुनियादी IIS संचालन को संभालता है। पेलोड अपलोड करने के बाद, सर्वर काम...
tvsz
CVE-2018-6389 PoC node js multisite with proxy Questo script è basato su CVE-2018-6389, un problema piuttosto insidioso di Wordpress che, purtroppo, probabilmente non verrà risolto dal team che sviluppa la piattaforma, nonostante sia noto da molto tempo. !!! IMPORTANTE PRIMA DI PROSEGUIRE !!!...
nextjs-cve-2026-23870-checker
@emstack/nextjs-cve-2026-23870-checker Strumento CLI per la verifica e la correzione di tutte e 13 le vulnerabilità presenti nel Security Release di Next.js di maggio 2026, inclusa CVE-2026-23870 DoS nei React Server Components. Avvio rapido root@kitploit: Modalità interattiva consigliata npx...
cve-2015-7547-public
Server di attacco PoC per la vulnerabilità CVE-2015-7547 in glibc DNS stub resolver Per testare su macchina locale con una versione vulnerabile di glibc: root@kitploit: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | su...
patch-manual-CVE-2025-26465-e-CVE-2025-26466
🛡️ Mitigazione Manuale - OpenSSH CVE-2025-26465 e CVE-2025-26466 🔍 Informazioni sullo Script Questo script applica mitigazioni manuali per i problemi di sicurezza in OpenSSH , senza la necessità di un aggiornamento immediato. 🚨 CVE-2025-26465 Rimuove VerifyHostKeyDNS per evitare l'intercettazione...
CVE-2024-6387-Mitigation-Ansible-Playbook
Playbook Ansible per la mitigazione di CVE-2024-6387 Un Playbook Ansible per mitigare il rischio della vulnerabilità regreSSHion RCE CVE-2024-6387 fino a quando le piattaforme aggiorneranno OpenSSH a una versione non vulnerabile. La mitigazione applicata qui si basa sul Consiglio di Mitigazione...
jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication
A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...
the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex
CVE-2026-68749 / CVE-2026-68750 — PoC Quadratischer Denial-of-Service in htmlsanitizeex 1.5.3. Die Bibliothek dient dazu, nicht vertrauenswürdiges HTML zu neutralisieren, doch zwei unabhängige superlineare Codepfade ermöglichen es einer einzigen präparierten Anfrage, einen BEAM-Scheduler für...
CVE-2026-0049
CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Materiale completo di ricerca e PoC. Analisi narrativa: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : overflow di interi unsigned su fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388...
CVE-2022-24999
CVE-2022-24999 يحتوي هذا المستودع على عينات استغلال للثغرة التي وجدناها في مكتبة JS "qs" في ديسمبر 2021. تم إصلاح هذه الثغرة في express v4.17.3 و qs v6.10.3 v6.9.7, v6.8.3, v6.7.3, v6.6.1, v6.5.3, v6.4.1, v6.3.3, و v6.2.4. قنابل المصفوفات والسلاسل النصية في qs الإصدارات الضعيفة من "qs" تسمح بإنشا...
ipv6tools
IPv6Tools The IPv6Tools framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper...
slowloris
slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...