426156 matches found
bluemonday
bluemonday bluemonday ๆฏไธไธช็จ Go ๅฎ็ฐ็ HTML ๅๅๅจใๅฎ้ๅบฆๅฟซไธ้ซๅบฆๅฏ้ ็ฝฎใ bluemonday ๅฐไธๅไฟกไปป็็จๆท็ๆๅ ๅฎนไฝไธบ่พๅ ฅ๏ผๅนถ่ฟๅๅทฒๆ นๆฎไธไปฝ็ปๆนๅ็ HTML ๅ ็ด ๅๅฑๆง็ๅ ่ฎธๅ่กจ่ฟ่กๅๅๅ็ HTML๏ผไป่ไฝฟไฝ ๅฏไปฅๅฎๅ จๅฐๅฐ่ฟไบๅ ๅฎนๅ ๅซๅจไฝ ็็ฝ้กตไธญใ ๅฆๆไฝ ๆฅๅ็จๆท็ๆ็ๅ ๅฎน๏ผๅนถไธไฝ ็ๆๅกๅจไฝฟ็จ Go๏ผ้ฃไนไฝ ้่ฆ bluemondayใ ็จไบ็จๆท็ๆๅ ๅฎน็้ป่ฎค็ญ็ฅ๏ผbluemonday.UGCPolicy.Sanitize๏ผไผๅฐไธ้ข่ฟไธช๏ผ root@kitploit: Hello...
CVE-2020-12116
CVE-2020-12116 Proof of concept code to exploit CVE-2020-12116: Unauthenticated arbitrary file read on ManageEngine OpManger. Summary The latest release of OpManger contains a directory traversal vulnerability that allows unrestricted access to every file in the OpManager application. This includ...
CVE-2021-42008
CVE-2021-42008 CVE-2021-42008: Exploiting A 16-Year-Old Vulnerability In The Linux 6pack Driver Vulnerability analysis and exploit development: https://syst3mfailure.io/sixpack-slab-out-of-bounds Exploit designed for: root@kitploit: Debian 11 - Kernel 5.10.0-8-amd64...
CVE-2020-35728
Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl. How to RCE pom.xml...
Android-rce-analizi
CVE Research and PoC Laboratory โ Android Security Analysis ๐จโ๐ซ Advisor Information Name and Surname| Keyvan Arasteh ---|--- GitHub| @keyvanarasteh E-mail| [email protected] LinkedIn| keyvanarasteh Web Site| qline.tech ๐ค Student Information Name and Surname| Baha Furkan Yฤฑldฤฑz ---|--- Student...
CVE-2020-1034
CVE-2020-1034 PoC demonstrating the use of cve-2020-1034 for privilege escalation. Tested on unpatched Windows 10 2004, build 19041.488. Vulnerability was dicovered by Microsoft and fixed on patch Tuesday 8/9/2020: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1034 Writeup...
CVE_2026_31694
CVE-2026-31694 Passive Scanner A passive Linux host assessment tool for CVE-2026-31694 , a FUSE readdir-cache out-of-bounds write in the Linux kernel. The scanner evaluates the running kernel, FUSE exposure, local package metadata, kernel source evidence, execution environment, and operating-syst...
CVE-2025-21298
content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. Full patch diff via ghidriff: LINK vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of...
ps5-uart
24 pin header near salina EDM-010 root@kitploit: emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800, eap fw:...
CVE-2026-66917
IDOR + Stored XSS via Broken Object-Level Authorization in JoomGallery JoomGallery โค 4.3.0 โ Editor-Role User Hijacks Any Gallery Image and Stores XSS Payload, Enabling Admin Session Takeover SUMMARY UserimageController::save in JoomGallery checks checkACL'edit', ... instead of checkACL'edit.own'...
Your Cloud Security Checklist Doesn't Work the Way You Think It Does
If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026 Cloud Security Index, Intruder analyzed misconfiguration data from 3,000 organizations across AWS, Azure, and Google Cloud and found that risk profiles across providers have...
Wildfire
CVE-2026-39154 ยท Stored XSS in CometChat group messages JS SDK 3.0.12 This directory holds an honest, self-contained reproduction of the render sink behind CVE-2026-39154: a stored cross-site scripting defect in the CometChat JavaScript SDK 3.0.12, where a group message's data.text field is...
servu-cve-2026-28318-poc
CVE-2026-28318 โ SolarWinds Serv-U "Content-Encoding: deflate" pre-auth crash Root-cause analysis + DoS proof-of-concept. The public advisory classifies this as an unauthenticated denial-of-service / uncontrolled resource consumption. Binary analysis shows the underlying defect is memory-safety :...
Threaded-CVE-2018-15473
CVE-2018-15473 โ SSH Username Enumeration Tool A Python 3 reimplementation of the classic CVE-2018-15473 OpenSSH user enumeration exploit, extended with multi-threading, wordlist support, automatic vulnerability detection, and thread-safe exploit patching. Table of Contents About the Vulnerabilit...
AndroidPentest-Framework
AndroidPentest Framework A professional-grade, modular Andr...
Security Bulletin: Multiple vulnerabilities affect IBM Db2 Warehouse container images.
Summary IBM has released the below fix for IBM Db2ยฎ on Db2 Warehouse container images in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-35701 DESCRIPTION: Improper...
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE โ Public Exploit Released
A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution โ but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no confirmed reports of exploitation i...
Scanner_CVE_OpenSSH
Scanner for identifying servers with SSH software possibly vulnerable to CVEs CVE-2024-6387 and CVE-2023-48795. Covered CVEs CVE| Name| Condition| Severity ---|---|---|--- CVE-2024-6387| regreSSHion| OpenSSH 9.8p1| CRITICAL CVE-2023-48795| Terrapin| OpenSSH 9.6| HIGH CVE-2024-6387 โ regreSSHion...
Explotacion-CVE-2023-32315-Openfire
๐ CVE-2023-32315 Description: The CVE-2023-32315 vulnerability affects Openfire servers, allowing an attacker to bypass the web admin panel login without valid credentials. The exploit adds an administrative user, allowing the attacker to upload a malicious plugin and obtain a web shell. โ๏ธ How it...
cve-2026-0828
CVE-2026-0828 โ Safetica ProcessMonitorDriver.sys BYOVD PoC Safetica DLP kernel driver ProcessMonitorDriver.sys exposes an unauthenticated IOCTL that allows any user-mode caller to terminate arbitrary processes via ZwTerminateProcess in kernel context, bypassing PPL Protected Process Light...