CVE-2023-37252

CVE-2023-37252 affects the CheckUser extension for MediaWiki through version 1.39.3 . The Special:CheckUserLog page displays usernames that were intended to be hidden, resulting in an information disclosure to users with low privileges. The CVSS 3.1 base score is 3.1 (LOW) with a network attack v...

EUVD-2023-60664

An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables...

CVE-2023-50461

An issue was discovered in the directmail aka Direct Mail extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitrary TSConfig page for folders configured as Direct Mail. Exploiting this may lead to Configuration...

CVE-2024-23176

An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS...

CVE-2023-37252

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden...

CVE-2026-38526-POC

CVE-2026-38526 - Krayin CRM RCE Exploit Krayin CRM ≤ 2.2.x - Unrestricted File Upload leading to Remote Code Execution. This PoC exploits the vulnerable TinyMCE upload endpoint /admin/tinymce/upload to upload a PHP webshell and achieve command execution on the server. Features Full automatic logi...

nextjs-react2shell-detect

Chrome extension that runs next.version locally and injects a warning popover if the site runs a next version vulnerable to react2shell This is a Plasmo extension project bootstrapped with plasmo init. Getting Started First, run the development server: root@kitploit: bun dev Open your browser and...

FolkPatch

🌏 README Language: English / 中文 / 日本語 FolkPatch - A Root management tool focused on interface optimization and feature extension Built on KernelPatch, FolkPatch delivers a stable Root experience along with a brand-new interface and a three-tier extension system: APM / KPM / Plugins. Get started...

generator-burp-extension

Burp拡張機能ジェネレーター インストール まず、npm（node.jsが事前にインストールされていることを前提とします）を使用してYeomanとgenerator-burp-extensionをインストールします。 root@kitploit: npm install -g yo npm install -g generator-burp-extension 次に、新しいプロジェクトを生成します。 root@kitploit: yo burp-extension Burp拡張機能の機能...

SliverKeylogger

Sliver Keylogger This extension to sliver was written mostly as a learning exercise into how sliver handles extensions. I would like to thank the entire Sliver team for there work on this public implant framework. I would especially like to thank @rkervell for answering many of my questions relat...

pentest-mapper

Pentest Mapper Pentest Mapper es una extensión de Burp Suite que integra el registro de solicitudes de Burp Suite con un checklist personalizado de pruebas de aplicaciones. La extensión proporciona un flujo sencillo para las pruebas de penetración de aplicaciones. La extensión incluye...

CVE-2024-9264

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...

Joomla! JCE extension < 2.9.99.5 unauthenticated RCE

Joomla JCE editor extension contains an unrestricted file upload vulnerability caused by allowing unauthenticated users to create new editor profiles, letting attackers upload and execute PHP code remotely, exploit requires no authentication. id: CVE-2026-48907 info: name: Joomla! JCE extension...

Suprema BioStar <2.8.2 - Local File Inclusion

Suprema BioStar before 2.8.2 Video Extension allows remote attackers can read arbitrary files from the server via local file inclusion. id: CVE-2020-15050 info: name: Suprema BioStar 2.8.2 - Local File Inclusion author: gy741 severity: high description: Suprema BioStar before 2.8.2 Video Extensio...

Ghidrathon

Ghidrathon Ghidrathon es una extensión de Ghidra que añade capacidades de scripting en Python 3 a Ghidra. ¿Por qué? Ghidra admite scripting de forma nativa en Java y Jython. Desafortunadamente, muchas herramientas de análisis de código abierto, como capa, Unicorn Engine, angr, etc., están escrita...

CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

🔐 CVE-2024-38063 — Análisis de Ejecución Remota de Código IPv6 TCP/IP 📌 Descripción del Proyecto Este proyecto presenta un análisis técnico y una demostración práctica de la vulnerabilidad crítica CVE-2024-38063 , divulgada por Microsoft durante el Patch Tuesday 13 de agosto de 2024. La...

cve-2024-37762

Description MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution. The application offers the possibility of a creation of a form with a file upload functionality. While by default the accepted files are restricted to a common sa...

heartbleed-extention

This repository does not have a README...

CVE-2024-57484

CVE-2024-57484 Directory listing vulnerability was found in the FoxyProxy extension. This issue allows unauthorized users to view the structure and content of the extension internal files including log.js,commands.js,schema.json,authentication.js and location.js along with their last-modified...

live-server-evil-crawler

Live Server Evil Crawler A GitHub Pages site for demonstrating the Live Server VSCode extension vulnerability CVE-2025-65717. Overview This tool demonstrates a vulnerability where Live Server allows requests from any origin, enabling malicious web pages to access the Live Server running on...