CVE-2026-50522

🛡️ CVE-2026-50522 — Untersuchung zur Microsoft-SharePoint-RCE-Sicherheitslücke Kritische SharePoint-Deserialisierungsschwachstelle unter aktiver Ausnutzung Erstellt von Pratik Chhetri Berichtsdatum: 2026-07-27 📌 Kurzüberblick...

mose

MOSE Master Of SErvers...

cve-2025-53770

CVE-2025-53770 PoC di Deserializzazione RCE di SharePoint Critico — Esecuzione remota di codice non autenticata tramite deserializzazione non sicura in Microsoft SharePoint Server CVE-2025-53770 Descrizione La deserializzazione di dati non attendibili in Microsoft SharePoint Server on-premises...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

exploit_cve-2023-26326_using_cve-2024-2961

Exploit für BuddyForms CVE-2023-26326 mit Iconv CVE-2024-2961 Diese Arbeit wurde von mir, Omar Elshopky, und Nour El Dien Bassiouny erstellt. Dieses Repository enthält einen Exploit für das WordPress-BuddyForms-Plugin CVE-2023-26326, dessen Sicherheitslücke ursprünglich im Advisory von Joshua...

CVE-2023-22515

CVE-2023-22515 Exploit-Skript Betroffene Versionen root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Ausnutzung der Schwachstelle root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx....

Log4Jolokia

Log4Jolokia Описание: Python3-реализация для использования и эксплуатации MBean-компонентов Log4J через Jolokia Использование: Общая справка: root@kitploit: usage: log4jolokia.py -h -u USER -p PASSWD --proxy PROXY -H HEADER execjar,writefile,readfile,execscript execjar,writefile,readfile,execscri...

mjet

mjet Kit de exploração de extensões de gerenciamento Java JMX da Mogwai Security mjet é uma ferramenta que pode ser usada para explorar serviços JMX configurados de forma insegura. Baseia-se no post do blog "Exploiting JMX-RMI" de Braden Thomas/Accuvant...

msf-auxiliarys

msf-auxiliarys meine Sammlung von Metasploit-Auxiliary-Post-Modulen Beschreibung root@kitploit: Dieses Arbeitsverzeichnis enthält verschiedene Metasploit-Auxiliary-Module, die von mir geschrieben wurden, um bei häufigen Post-Exploitation-Aufgaben zu helfen. Herunterladen/Installieren 1º - Modul v...

ChromSploit-Framework

ChromSploit Framework v3.0 Professionelle Sicherheitsforschungsplattform für Browser-Schwachstellenanalyse Multi-CVE-Ausbeutungsketten mit fortschrittlicher Verschleierung, intelligenter Erkennung und umfassender Analytik Überblick Das ChromSploit Framework ist ein modernes Bildungswerkzeug für d...

mimicry

Mimicry Mimicry Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a lower cost with Active deception...

mimicry

Mimicry Mimicry Mimicry è uno strumento di sicurezza sviluppato da Chaitin Technology per l'inganno attivo nello sfruttamento e nel post-sfruttamento. L'inganno attivo può migrare dal vivo l'attaccante verso l'honeypot senza che se ne accorga. Possiamo raggiungere un livello di sicurezza più...

CVE-2026-78199

A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/viewprod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and...

ysoserial

ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections 3.x and...

activemq-ids-ips-lab

IDS/IPS-Labor – Schutz von Apache ActiveMQ vor RCE-Angriffen Dieses Projekt bewertet, wie IDS- und IPS-Mechanismen die Ausnutzung der Apache-ActiveMQ-Schwachstelle CVE-2023-46604 in einer kontrollierten Laborumgebung erkennen und verhindern können. Projektübersicht Das Labor wurde mit getrennten...

apache-struts-cve-2017-5638-project

apache-struts-cve-2017-5638-project Kursprojekt zu Angriff und Verteidigung mit Fokus auf Analyse, Ausnutzung und Eindämmung von CVE-2017-5638...

CVE-2023-46604

CVE-2023-46604 Por Ruben Fobe & Klaas Stessens Introdução AVISO Este projeto destina-se apenas a fins educacionais e de laboratório. Utilize estas técnicas apenas em ambientes que você possui ou está autorizado a testar. Este laboratório simulará a exploração do CVE-2023-46604, utilizando uma VM...

EUVD-2026-64740

A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file adminclass.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...

CVE-2026-78201

CVE-2026-78201 is a SQL injection vulnerability in itsourcecode Payroll System 1.0 , specifically in the Login function of admin_class.php . The Username parameter is vulnerable to unsanitized input, allowing a remote, unauthenticated attacker to inject arbitrary SQL. The CVSS 3.1 score is 7.3 (H...