Kangaroo

Kangaroo Un exploit che bypassa l'autenticazione sui server telnet che eseguono la versione 2.7 o inferiore. Noto anche come cve-2026-32746 Come difendersi da questo attacco Disattivare Telnet: interrompere e spegnere immediatamente il demone telnetd sui propri server e dispositivi di rete se non...

CVE-2026-78182

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

sh4d0wup

sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...

CVE-2024-21338-Exploit

CVE-2024-21338 Exploit Projektübersicht Dies ist ein PoC für CVE-2024-21338, eine Privilege-Escalation-Schwachstelle im Windows-AppLocker-Treiber appid.sys. Sie wurde von der Lazarus-Gruppe als 0-Day ausgenutzt, um eine lokale Rechteerweiterung unter Windows zu erreichen. Hintergrund der...

CVE-2026-78182 Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injection

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

CVE-2026-78182

A SQL injection vulnerability in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System (versions up to 300R004C00B300 ) is triggered via the order/sort argument of the PlanController.getImmediatePlans function at /xbreport/api/v1/plamange/plansImmediate. The attack is remote, ...

EUVD-2026-64709

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

zygote-CVE-2024-31317

Zygote Toolkit - CVE-2024-31317 Questo è un toolkit che utilizza CVE-2024-31317 per estrarre dati privati delle app tramite ADB o per avviare una shell con l'UID di un'app. Questa vulnerabilità riguarda le versioni di Android dalla 9 alla 14 con livello di patch di sicurezza 2024-06-01 o inferior...

CVE-research

CVE-research Ein Repository, das alle funktionierenden PoCs enthält, die ich für bekannte CVEs erstellt habe, sowie Details zu laufenden Forschungsarbeiten, an denen ich derzeit arbeite hauptsächlich IoT-Geräte Hinweis zu funktionierenden PoC-Exploit-Skripten/Payloads 1. Verwenden Sie die...

LogHound

LogHound Analizzatore EVTX Post-Sfruttamento per la Mappatura di BloodHound LogHound raccoglie e analizza i registri eventi di sicurezza di Windows .evtx per estrarre eventi di autenticazione, dati delle sessioni e metadati di accesso, da inserire in BloodHound e per una telemetria avversaria più...

CVE-2026-78167

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...

Chimera

Chimera Emulazione hardware e sfruttamento di prossimità Perché L'attrezzatura Hak5 è pesante e fin troppo visibile. Il mio telefono contiene un kernel Linux completo, quindi l'ho fatto fare lo stesso lavoro — emulazione HID, RNDIS, mass storage, tutto quanto — direttamente via ConfigFS. Nessun...

WordPress-CVE-2026-63030-Analysis

🛡️ CVE-2026-63030: Technische Analyse & Audit Umfassende defensive Aufschlüsselung, Bedrohungsanalyse und Richtlinien zur nicht-destruktiven Verifikation. Zusammenfassung • Matrix • Technischer Deep Dive • Verifikation • Behebung 📑 Zusammenfassung !IMPORTANT Nur zu Verteidigungszwecken: Dieses...

EUVD-2026-64691

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

Deep-Reaver

Deep Reaver Deep Reaver è un potente toolkit di valutazione delle vulnerabilità e sfruttamento potenziato dall'IA, costruito in Python. Ispirato a strumenti come Nmap e Nessus, Deep Reaver è progettato per una scansione approfondita e modulare di applicazioni web e servizi. Caratteristiche Analis...

EUVD-2026-64687

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...

CVE-2026-78167

EFM ipTIME T16000M (firmware 14.20.2 ) contains an improper authentication vulnerability in the httpcon_check_session_url function of the Session Validation Handler . The flaw allows remote exploitation over the network with no privileges required and low complexity , rated CVSS 4.0: 10.0 (CRITIC...

CVE-2026-78167 EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...

CVE-2020-0796-PoC

CVE-2020-0796-PoC vincitori! Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso Vedi qui : https://github.com/danigargu/CVE-2020-0796...

CVE-2025-2304

CVE-2025-2304 - Escalação de Privilégios no Camaleon CMS Este repositório contém um script Python que automatiza a exploração da vulnerabilidade de escalação de privilégios CVE-2025-2304 no Camaleon CMS. Ele foi testado na versão 2.9.0. Uso root@kitploit: python exp.py http://target.exmaple user...