norimaci

Norimaci "Norimaci" è una sandbox leggera e semplice per l'analisi di malware su macOS. Questo strumento è stato ispirato da "Noriben". Norimaci utilizza le funzionalità di OpenBSM o Monitor.app per monitorare l'attività di sistema su macOS invece di Sysinternals Process Monitor procmon. Norimaci...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

aad-sso-enum-brute-spray

aad-sso-enum-brute-spray POC della recente vulnerabilità di brute force sulle password di Azure Active Directory scoperta da SecureWorks Descrizione Questo codice è una proof-of-concept della recentemente rivelata vulnerabilità di brute force sulle password di Azure Active Directory annunciata da...

bandexploit

استغلال السوار CVE-2018-11631 نص بايثون بسيط يستخدم Gatttool لاستغلال ساعة ذكية غير آمنة بتقنية Bluetooth Low Energy سوار M1. CVE-2018-11631 : https://nvd.nist.gov/vuln/detail/CVE-2018-11631 الاستخدام: bandexploit.py خيارات العنوان الخيارات: -h, --help عرض رسالة المساعدة هذه والخروج -s, --sms إرس...

CVE-2021-26086

CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 – Eingeschränktes Remote-Datei-Lesen/-Einbinden Verwundbare Endpunkte: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties...

CVE-2021-26085

CVE-2021-26085 Atlassian Confluence Server 7.5.1 vulnerabilità di lettura arbitraria di file senza autorizzazione POC Endpoint vulnerabili: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml...

maigret

Maigret English · 简体中文 Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors IPcook provides reliable residential proxies for online...

CVE-2017-14263

HoneywellNVRvul CVE-2017-14263 xfuturesec Co., Ltd Zuerst die SessionID für einen Gastbenutzer erhalten. Wir können die SessionID aus jeder HTTP-Anfrage finden. Zum Beispiel: POST https://192.168.1.104/RPC2 HTTP/1.1 Accept: text/javascript, text/html, application/xml, text/xml X-Requested-With:...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd Primo, ottieni l'hash MD5 della password dell'account 'admin'. Invia: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows...

CVE-2018-9995_Batch_scanning_exp

CVE-2018-9995Batchscanningexp（last 2018-8-9） Script di scansione batch DVR per la vulnerabilità CVE-2018-9995 Script di exploit originale per CVE-2018-9995 Original code Preparazione dell'ambiente Environmental preparation python3, ubuntu root@kitploit: user@ubuntu:$ sudo pip3 install grequests...

CVE-2026-8732

⚔️ CVE-2026-8732 WP Maps Pro ≤ 6.1.0 — Escalation dei Privilegi Non Autenticata Automazione dell'Exploit in 8 Fasi | Multiprocessing + Asyncio | Creazione Admin Verificata 🎯 Informazioni sulla Vulnerabilità Il plugin WordPress WP Maps Pro versione ≤ 6.1.0 presenta una vulnerabilità di escalation...

Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form Handler

Elementor Pro plugin for WordPress in versions =4.2.1 is vulnerable to unauthenticated arbitrary file upload in the Forms module File Upload field. The validation and processfield methods iterate over submitted file entries with different early-exit logic for UPLOADERRNOFILE entries. When an...

vBulletin 6.x - Remote Code Execution

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contain an eval injection vulnerability caused by insufficiently restrictive regex filtering in vB5TemplateRuntime::runMaths, letting unauthenticated remote attackers execute arbitrary PHP code via the pagenavpagenumber parameter in ajax/render...

CVE-2024-22641

CVE-2024-22641 Tipo de Vulnerabilidade Negação de Serviço por Expressão Regular ReDoS Produto e Versão Afetados TCPDF root@kitploit: AddPage; $pdf-ImageSVG$file='poc.svg'; ?...

CVE-2023-49471

CVE-2023-49471 Tipo di vulnerabilità Blind SSRF Prodotto e versione interessati Bar assistant / -----------------------------8290129562507108753887567115 Content-Disposition: form-data; name="images0copyright"...

linux-security-audit

Strumento di Audit di Sicurezza per Linux Strumento di Audit di Sicurezza per Linux basato sul CIS - Red Hat Enterprise Linux 8 Benchmark v3.0.0 Se lo trovi utile, per favore lascia una "stellina" 🌟 per supportare ulteriori miglioramenti. Indice dei Contenuti 1. Funzionalità 2. Anteprima 3. Log...

wordpress-exploits

wordpress-exploits Zufällige WordPress-Exploits, die möglicherweise funktionieren oder auch nicht. CVE-2019-19985 Info root@kitploit: Description: Unauthenticated File Download w/ Information Disclosure CVE ID: CVE-2019-19985 CVSS v3.0 Score: 5.8 Medium CVSS Vector String:...

CVE-2023-48194

CVE-2023-48194 Panoramica Sito web di download del firmware: https://www.tenda.com.cn/download/detail-3683.html https://down.tenda.com.cn/uploadfile/AC8/V16.03.34.09.zip https://static.tenda.com.cn/tdcweb/download/uploadfile/AC8/V16.03.34.09.zip Versione interessata AC8/V16.03.34.09 Dettagli dell...

Security Bulletin: Security Vulnerabilities have been found in IBM Sovereign Core

Summary Security Vulnerabilities have been addressed in IBM Sovereign Core Vulnerability Details CVEID:CVE-2026-45022 DESCRIPTION: go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-git may parse malformed Git objects in a way that differs...

CVE-2021-40444

〖EXP〗Ladon CVE-2021-40444 Nachstellung der Office-Sicherheitslücke Überblick über die Sicherheitslücke Am 8. September Pekinger Zeit entdeckte das CERT von NSFOCUS, dass Microsoft ein Sicherheitsbulletin veröffentlichte, das die Sicherheitslücke zur Remote-Codeausführung in Microsoft MSHTML...