Lucene search
+L

1616 matches found

Kitploit
Kitploit
added 2026/09/15 7:10 p.m.120 views

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o root@kitploit: The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 4:56 p.m.10 views

windows-api-function-cheatsheets

Hoja de referencia de funciones de la API de Windows Contacto 🌨️ Snowcrash: [email protected] Tabla de contenidos Hoja de referencia de funciones de la API de Windows Operaciones de archivos Gestión de procesos Gestión de memoria Gestión de hilos Gestión de bibliotecas de vínculos dinámicos...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 3:42 p.m.56 views

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

7.8CVSS7.8AI score0.08509EPSS
SaveExploits3References25
Kitploit
Kitploit
added 2026/09/15 3:41 p.m.8 views

HaE

赋能白帽,高效作战! 网络版: overspace-labs/HaENet 文件版: overspace-labs/HaEFile README 版本: English | 简体中文 项目介绍 HaE 是一款网络安全(数据安全)领域 下的框架式项目,采用了乐高积木式 模块化设计理念,实现对本地文件和HTTP消息(包含WebSocket)精细化的标记和提取。 当前仓库作为 HaE 项目的品牌主仓使用,src/ 下的产品目录以 Git submodule 形式挂载,实际源码在下方列出的独立仓库中维护。...

5.7AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/15 2:35 p.m.8 views

macos_sandbox

Introducción a macOS: el sandbox de las Apps Continuando con mi serie de publicaciones sobre mi transición a macOS, me gustaría hablar un poco sobre el sandbox de Apps de macOS. Se recomienda encarecidamente leer primero la publicación macOS App structure: asumiré que el lector sabe la diferencia...

7.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 12:53 p.m.13 views

Log4Jolokia

Log4Jolokia Descripción: Implementación en Python3 para aprovechar y explotar MBeans de Log4J a través de Jolokia Uso: Ayuda genérica: root@kitploit: usage: log4jolokia.py -h -u USER -p PASSWD --proxy PROXY -H HEADER execjar,writefile,readfile,execscript execjar,writefile,readfile,execscript...

6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/11 11:55 p.m.10 views

CVE-2026-89692

A flaw was found in the Linux kernel's Network File System NFS daemon, nfsd. This vulnerability occurs when a delegation recall operation fails, leaving a critical internal flag uncleared. This prevents subsequent attempts to break the same delegation, leading to a denial of service where file...

7.5CVSS5.6AI score0.00432EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 3:48 p.m.8 views

CVE-2026-66493

Path Traversal en operaciones de archivos Eliminar / Copiar / Mover PhocaCommander ≤ 6.1.3 — Administrador autenticado manipula archivos fuera de la raíz web RESUMEN El manejador de acciones de archivos en PhocaCommander construye rutas de origen y destino a partir de parámetros codificados en...

6.4CVSS5.8AI score0.00377EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 2:36 a.m.11 views

windows-api-function-cheatsheets

Hojas de referencia de funciones de la API de Windows Contacto 🌨️ Tetsuo: https://www.x.com/tetsuo Tabla de contenidos Hojas de referencia de funciones de la API de Windows Operaciones de archivos Gestión de procesos Gestión de memoria Gestión de subprocesos Gestión de bibliotecas de vínculos...

6.4AI score
SaveExploits0
NVD
NVD
added 2026/09/10 4:18 p.m.6 views

CVE-2026-88899

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

9.8CVSS0.00438EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/10 3:28 p.m.7 views

CVE-2026-88899 knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

9.3CVSS6.3AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/10 3:28 p.m.11 views

EUVD-2026-75579

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

9.8CVSS0.00438EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.91 views

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...

9.8CVSS8.8AI score0.99288EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/10 12:49 a.m.9 views

CVE-2024-4577

lol CVE-2024-4577 1. comando de explotación valor RCE root@kitploit: python3 cek.py --target http://target/index.php --ls --dir /path/to/directory python3 cek.py --target https://target/index.php --dir /path/to/directory python3 cek.py --target https://target/index.php --cat /path/to/directory fi...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits68
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.14 views

PT-2026-89477

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

9.8CVSS0.00438EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2026/09/09 11:51 p.m.17 views

@openhop/server: Path Traversal in Flow ID File Operations

Path Traversal in Flow ID File Operations Summary @openhop/server passes unsanitized HTTP route parameters directly to path.join when constructing filesystem paths for flow YAML files. An unauthenticated attacker who can reach the server can read arbitrary .yaml files accessible to the OpenHop...

SaveExploits0References3Affected Software1
Kitploit
Kitploit
added 2026/09/09 7:06 p.m.13 views

IOBitUnlockerUnlocker

Introducción 0 day Mueve o copia cualquier archivo. Evita el parche anterior con un truco de suma de comprobación. Writeup: https://nathan2.com/files/iobit.pdf Información general: https://nathan2.com/posts/iobit/ Lo descubrí sin saber que ya existía otro exploit anterior que lo había descubierto...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:38 a.m.10 views

CVE-2026-22812

CVE-2026-22812 Descripción general Una herramienta de explotación en Python para la vulnerabilidad de Ejecución Remota de Código RCE en OpenCode que afecta a versiones v1.0.216. Esta herramienta proporciona múltiples vectores de ataque, incluida la ejecución de comandos, lectura/escritura de...

8.8CVSS8AI score0.16771EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/03 2:25 p.m.10 views

macnoise v0.5.0

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...

5.8AI score
SaveExploits0References19
EUVD
EUVD
added 2026/09/02 2:35 p.m.20 views

EUVD-2026-67076

NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots...

8.3CVSS5.8AI score0.0026EPSS
SaveExploits1References10
Rows per page
Query Builder