CVE-2026-100622 capgo.app through 12.129.0 Cache Restoration of Deleted Bundles

capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts from the public file read endpoint. Unauthenticated attackers can download deleted bundles using cached URLs and trigger restoration of deleted objects into R2 storage on cache hits...

CVE-2026-100615 Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikeymanager to rotate a higher-privileged orgsuperadmin sibling key and recover its plaintext credential. Attackers with apikeymanager role can enumerate same-owner API keys, rotate a strong...

CVE-2023-30212

CVE-2023-30212 LAB SETUP Prerequisite Download docker.io sudo apt install -y docker.io STEPS 1. Download all files from my repository using the below command. git clone https://github.com/AAsh035/CVE-2023-30212.git 2. Now to make a docker image run the following command: sudo docker build -t vuln...

CVE-2017-16245

CVE-2017-16245 Source code for CVE-2017-16245 Avecto Defendpoint bypass originally disclosed by Nettitude The PowerShell implementation of CVE-2017-16245 can and should be copied and pasted straight into PowerShell. If PowerShell is blocked, try to execute powershell.exe from the command prompt...

CVE-2023-24278

CVE-2023-24278 - Reflected XSS Vulnerabilities in Squidex Overview CVE ID: CVE-2023-24278 Affected Products: Squidex versions prior to 7.4.0 Reported By: Ioannis Christodoulakos This repository provides information and an exploit for two Reflected Cross-Site Scripting XSS vulnerabilities discover...

CVE-2026-49049

CVE-2026-49049 This repository contains a Python-based scanner and proof-of-concept for a vulnerability in the Joomla Helix3 component. The bug is an arbitrary file write issue that can lead to remote code execution RCE when an attacker is able to write a PHP payload into a web-accessible locatio...

CVE-2023-45828

CVE-2023-45828 RumbleTalk Live Group Chat = 6.1.9 - Falta de autorización a través de handleRequest Descripción: El plugin RumbleTalk Live Group Chat para WordPress es vulnerable a acceso no autorizado de datos, modificación de datos y pérdida de datos debido a una falta de comprobación de...

cve-2024-3552

Descripción El plugin Web Directory Free WordPress anterior a la versión 1.7.0 contiene una vulnerabilidad de inyección SQL. La función de ejecución AJAX no está suficientemente filtrada/saneada, lo que permite a un atacante neutralizar la consulta SQL o inyectar cláusulas adicionales UNION,...

CVE-2018-9995_dvr_credentials

Tool show DVR Credentiales root@kitploit: Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit: root@kitploit: $ curl...

CVE-2024-50488

CVE-2024-50488 Token Login input type="submit" value="Submit...

Metabase-Setup-Endpoint-SQLi-Fix

CVE-2026-72898: Metabase Setup Endpoint SQLi Patch This repository contains the hotfix for CVE-2026-72898 , an unauthenticated SQL Injection vulnerability in the setup endpoint of self-hosted Metabase instances. Left unpatched, attackers can bypass the setup token validation, execute arbitrary...

CVE-2021-26084

uso: python poc.py http://host:port/...

CVE-2025-59843-CVE-2025-59932

CVE-2025-59843 & CVE-2025-59932 1. Public Exposure of User Email Addresses CVE-2025-59843 In Scope / Affected Application: FlagForge Web Application API Endpoint: /api/user/username Details: The endpoint returns user email addresses without authentication. Any username can be queried publicly...

cve-2019-17240

Bludit = 3.9.22 - Bypass de Mitigación de Fuerza Bruta Este es un pequeño proyecto donde reescribo este script de Python en Golang. El propósito de este proyecto era aprender Golang y entender cómo funciona este exploit. Uso root@kitploit: $ ./brutepass -sdasds flag provided but not defined:...

CVE-2026-72898

🔴 CVE-2026-72898 - Unauthenticated SQL Injection Metabase — Unauthenticated SQL Injection → Full Administrator Takeover 📌 Overview CVE-2026-72898 is a maximum-severity CVSS 10.0 unauthenticated SQL injection vulnerability in Metabase that allows a remote attacker to inject arbitrary SQL into the...

CVE-2025-58179-Check

CVE-2025-58179-Check CVE-2025-58179-Check es un script simple de Python para verificar la vulnerabilidad SSRF Server-Side Request Forgery / Content Spoofing en el endpoint /image del framework Astro. Esta vulnerabilidad se rastrea como GHSA-qpr4-c339-7vq8 y CVE-2025-58179. Antecedentes de la...

Qemuno

About Qemuno is a portable, minimalistic emulated infrastructure for offensive operations. This framework aims to help executing Red Team operations and evade detection of endpoint security solutions, without the need for administrative privileges. This framework is based on: QEMU TinyCore...

Windows-SignedBinary

Generate Windows Signed Binary With a Different Hash The idea was to bypass endpoint solution that block known "malicious" signed application such as "regsvr32.exe". I wanted to find a way to get a valid signed file with a different hash. The Analysis Using signtool verify /v /a cmd.exe...

lab-cve-2025-3515

CVE-2025-3515 Laboratorio WordPress Drag and Drop Multiple File Upload for Contact Form 7 Levanta un entorno vulnerable de WordPress para reproducir y validar CVE-2025-3515 — subida de archivos sin restricciones a través de ddmuuploadfile en el plugin...

CVE-2019-0232

CVE-2019-0232 Descripción Esta es una herramienta que automatiza el flujo de trabajo de explotación para CVE‑2019‑0232 proporcionando tanto el modo de ejecución de comandos como el modo de shell inversa. Soporta codificación automática de URLs para comandos, inicia un servidor HTTP temporal para...