EUVD-2026-68373

NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content...

CVE-2026-40464

Nokia NSP contains a stored XSS vulnerability in its workflow application , caused by insufficient validation or encoding of user-controlled input. An authenticated attacker with access to the workflow application can embed malicious code that executes in another user's browser when they view the...

CVE-2026-40464 A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP

NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow application. An authenticated attacker with access to the workflow application could embed harmful code that runs when another user views the content...

CVE-2019-9053-exploit

CVE-2019-9053 — Unauthenticated SQL Injection in CMS Made Simple Descripción CVE-2019-9053 es una vulnerabilidad de inyección SQL time-based blind que afecta a CMS Made Simple en versiones ≤ 2.2.9. No requiere autenticación. El parámetro vulnerable es m1idlist en el módulo News moduleinterface.ph...

CVE-2023-49971

CVE-2023-49971 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "firstname" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious acto...

recipe-blog-encoding

recipe-blog-encoding !WARNING This project is entirely vibe-coded likely partially plagiarized from this repository and the author is a dumb-dumb who just thought the idea was funny Use SEO-gaming recipe preambles as a vehicle for encoding secret messages the prompt can really be anything though,...

nightcrawler — Updated!

Nightcrawler An autonomous penetration testing agent that runs entirely on a smartphone. Drop the phone on a network, walk away, and it discovers hosts, maps services, finds vulnerabilities, and generates a pentest report — all without cloud connectivity. root@kitploit: ░█▄░█ █ █▀▀ █░█ ▀█▀ █▀▀ █▀...

redis-cve-2025-62507

Exploit Scripts — CVE-2025-62507 Directory Structure root@kitploit: scripts/ ├── exploitx86.py x86-64 ROP exploit ├── exploitarm64.py ARM64 AArch64 ROP exploit └── gdbwithsymbols.sh GDB debugging helper script Vulnerability Summary Item| Description ---|--- CVE| CVE-2025-62507 Vulnerability Type|...

CVE-2024-28000-Exploit-Lab

CVE-2024-28000 — Laboratorio LiteSpeed Cache de WordPress Reproducción autorizada en laboratorio local de CVE-2024-28000 , un problema de escalada de privilegios no autenticada que afecta a versiones vulnerables del plugin LiteSpeed Cache de WordPress. Alcance: Este repositorio documenta pruebas...

ai-code-review

🔍 codereview AI-powered code review in your terminal. One command. Instant feedback. Catches security vulnerabilities, bugs, and bad patterns before they hit production. Install · Quick Start · Usage · Providers · Contributing What It Does codereview sends your code to an LLM and returns a...

CVE_2022_46395_Gazelle

Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...

prefetch-hash-cracker

预取哈希破解器 动机 在对 Windows 机器进行取证分析时，你可能会找到已删除的预取文件的名称。虽然其内容可能无法恢复，但文件名本身通常足以找到创建该预取文件的可执行文件的完整路径。 使用该工具 必须提供以下字段： 可执行文件名称 包括扩展名。该名称将嵌入预取文件名中，除非出现以下情况。 预取哈希 预取文件名末尾的 8 位十六进制数字，紧接在 .pf 扩展名之前。 哈希函数 Bodyfile 挂载点 哈希函数 已知有 3 种预取哈希函数： SCCA XP 用于 Windows XP SCCA Vista 用于 Windows Vista 和 Windows 10 SCCA 2008 ...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi bypass de parche Solo para uso en entornos controlados y propios. No usar contra sistemas sin autorización. Descripción PoC desarrollada para demostrar CVE-2021-42013 , presente en Apache HTTP Server 2.4.50. Este CVE es el bypass del parche qu...

volana

volana 马达加斯加语中的月亮 root@kitploit: 使用它 ; 🌚隐藏于; 🌞可被检测到 Shell 命令混淆，以避免 SIEM/检测系统 在渗透测试中，一个重要方面是保持隐秘 。因此，你应该在行动后清除痕迹 。然而，许多基础设施会实时记录命令并发送到 SIEM，这使得事后清理工作变得毫无意义。 volana 提供了一种简单的方法来隐藏在被攻陷机器上执行的命令：它提供了一个自己的 shell 运行环境（输入你的命令，volana 为你执行）。这样你可以在行动过程中清除痕迹 。 使用方法 你需要获取一个交互式...

CVE-2021-4045

🔍 CVE-2021-4045: Command Injection Vulnerability in TP-Link Tapo C200 CVE-2021-4045 📌 Summary CVE-2021-4045 is a command injection vulnerability discovered in the TP-Link Tapo C200 camera, allowing an attacker to take full control of the device withroot privileges. This vulnerability affects all...

btrfs_fixes

btrfsfixes: Custom BTRFS Repair Tools Custom tools written during recovery of a 12TB multi-device BTRFS pool with severe extent tree corruption that the native commands btrfs check --repair, --init-extent-tree, etc. could not repair. SeeINCIDENT-ANALYSIS.md for a structured case study of the...

CVE-2017-10271

LAB 2 - CVE-2017-10271: WebLogic XMLDecoder Deserialization Writeup I. System Analysis System Log Analysis Detected Service: Oracle WebLogic Server AdminServer belonging to basedomain running in Development Mode. Connection Port: 7001. Supported Protocols: http, t3, iiop, ldap, snmp. Attack Surfa...

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

CVE-2026-43655: AppleM2ScalerCSCDriver shared scheduler use-after-free Public technical disclosure for CVE-2026-43655 , an AppleM2ScalerCSCDriver / IOSurfaceAccelerator use-after-free reachable from the default iOS app sandbox with no special entitlements. Apple addressed this issue in iOS 26.5 /...

CVE-2025-51868

CVE-2025-51868 Vulnerability description Dippyis a popular website to chat with millions of proactive AI characters. Dippy allows users to chat with characters based on LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Lab Detection Exercise Report Classification: Internal Lab - CyberLAB Date: 24 May 2026 Platform: Elastic Stack v9.4.1 Status: Detection Confirmed Table of Contents A - Executive Summary B - Full Findings Report 1. Objective and Threat Model 2. Vulnerability Background...