CVE-2023-28432

Explotación de vulnerabilidad en MinIO CVE-2023-28432 Descripción Este script en python3 está diseñado para explotar CVE-2023-28432, que potencialmente afecta a ciertas configuraciones del servidor MinIO. El script realiza una solicitud POST a un hostname especificado, intentando recuperar...

CVE-2009-5147

CVE-2009-5147 and CVE-2015-7551 PoC to run it: root@kitploit: make foo export FOO=./foo.so ruby -v foo.rb with different versions of ruby you should get different results: root@kitploit: vpereira@kimura:/poc rvm use 2.1.7 vpereira@kimura:/poc ruby -v foo.rb ruby 2.1.7p400 2015-08-18 revision 5163...

CVE-2026-35585-poc

CVE-2026-35585: PoC de Inyección de Comandos del Sistema Operativo en File Browser English version Resumen Este repositorio es una Prueba de Concepto PoC de la grave vulnerabilidad de inyección de comandos del sistema operativo CVE-2026-35585 encontrada en File Browser versiones 2.0.0 a 2.33.1...

EUVD-2026-42683

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft...

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft

Summary Mockoon's admin API commons-server/src/libs/server/admin-api.ts is mounted on the same Express listener as the user-defined mock routes, enabled by default in every shipped runtime commons-server, CLI, serverless, serves Access-Control-Allow-Origin: on every endpoint with all HTTP methods...

CVE-2026-87987

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to cause...

CVE-2026-87987

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks by placing environment variable assignments before allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to trigger c...

EUVD-2026-76122

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to cause...

dumpscan

Public development on this tool has been paused but is still being worked on privately. Expect a massive update Q3/Q4 2024. Dumpscan is a command-line tool designed to extract and dump secrets from kernel and Windows Minidump formats. Kernel-dump parsing is provided by volatility3. Features x509...

Joomla-3.10.12-languagehelper-hotfix

ESTE REPO ESTÁ OBSOLETO Y DEBERÍAS USAR ESTE EN SU LUGAR: https://github.com/TLWebdesign/Joomla-3-EOL-Security-Fixes Joomla-3.10.12 LanguageHelper.php Parche Temporal Este pequeño plugin te ayudará a actualizar el archivo LanguageHelper con la corrección de seguridad que backporté desde Joomla...

ansible-bashpocalypse

Parche para CVE-2014-6271 https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ Uso instala ansible en tu equipo local. agrega los servidores que deseas parchear al inventario. ejecuta ansible-playbook ./deploy.yml -i inventory...

CVE-2026-13745 Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

Ashwesker-CVE-2026-24061

🚨 CVE-2026-24061 : Critical Remote Authentication Bypass in GNU InetUtils telnetd 🧠 Overview CVE-2026-24061 is a critical vulnerability affecting the telnetd service in GNU InetUtils. It allows an unauthenticated remote attacker to log in as root by exploiting improper handling of environment...

CVE-2024-37081

VMware vCenter - CVE-2024-37081 Proof of Concept Descripción Este repositorio contiene una prueba de concepto PoC para la vulnerabilidad CVE-2024-37081 en VMware vCenter. La vulnerabilidad se debe a una mala configuración en el archivo /etc/sudoers que permite la preservación de variables...

CVE-2021-41277

CVE-2021-41277 Usage 1. show help info root@kitploit: /CVE-2021-41277 ❯ go run main.go -h Usage of main: -f string File containing list of targets to verfity -o string File to write output to optional -s Show VulnInfo output -t int Number of concurrent goroutines for resolving default 10 -u strin...

patched-bash-4.3

patched-bash-4.3 patched-bash-4.3 for CVE-2014-6271 This is just bash 4.3 , pulled from the gnu website, and patched with the patches available on 9/26/2014, including the pkgsrc functionality changes that just disable the silly "execute functions in env variables" altogether. The patches are als...

CVE-2014-6271

CVE-2014-6271 Existe una vulnerabilidad conocida como "ShellShock" en GNU Bash hasta la versión 4.3, debida a la forma en que procesa cadenas finales en los valores de las variables de entorno después de las definiciones de funciones. Esta vulnerabilidad permite a atacantes remotos ejecutar códig...

CVE-2021-4034

CVE-2021- Se encontró una vulnerabilidad de escalada de privilegios local en la utilidad pkexec de polkit. La aplicación pkexec es una herramienta setuid diseñada para permitir que usuarios no privilegiados ejecuten comandos como usuarios privilegiados según políticas predefinidas. La versión...

CVE-2026-79678

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...

PT-2026-86758

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...