Lucene search
+L

1616 matches found

Kitploit
Kitploit
added 2026/09/16 2:40 a.m.9 views

macos_sandbox

Introduction to macOS - the App sandbox Continuing with my transition to macOS blogpost series, I'd like to discuss a bit about the macOS App sandbox. It is highly recommended to read the macOS App structure blogpost first - I will be assuming the reader knows the difference between Apps, process...

5.5CVSS7.4AI score0.07665EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 7:10 p.m.120 views

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o root@kitploit: The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 4:56 p.m.10 views

windows-api-function-cheatsheets

Windows API Function Cheatsheets Contact 🌨️ Snowcrash: [email protected] Table of Contents Windows API Function Cheatsheets File Operations Process Management Memory Management Thread Management Dynamic-Link Library DLL Management Synchronization Interprocess Communication Windows Hooks...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 3:42 p.m.56 views

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

7.8CVSS7.8AI score0.08509EPSS
SaveExploits3References25
Kitploit
Kitploit
added 2026/09/15 3:41 p.m.10 views

HaE

Empower ethical hacker for efficient operations. Network version: overspace-labs/HaENet File version: overspace-labs/HaEFile README Version: English | 简体中文 Project Introduction...

5.7AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/15 12:53 p.m.13 views

Log4Jolokia

Log4Jolokia 描述: Python3 实现,用于通过 Jolokia 利用和攻击 Log4J MBean。 用法: 通用帮助: root@kitploit: usage: log4jolokia.py -h -u USER -p PASSWD --proxy PROXY -H HEADER execjar,writefile,readfile,execscript execjar,writefile,readfile,execscript ... target target ... positional arguments:...

6.3AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/11 11:55 p.m.10 views

CVE-2026-89692

A flaw was found in the Linux kernel's Network File System NFS daemon, nfsd. This vulnerability occurs when a delegation recall operation fails, leaving a critical internal flag uncleared. This prevents subsequent attempts to break the same delegation, leading to a denial of service where file...

7.5CVSS5.6AI score0.00432EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 3:48 p.m.8 views

CVE-2026-66493

Path Traversal in File Operations Delete / Copy / Move PhocaCommander ≤ 6.1.3 — Authenticated Admin Manipulates Files Outside Webroot SUMMARY The file action handler in PhocaCommander constructs source and destination paths from attacker-controlled base64-encoded parameters pathfrom, pathwhere...

6.4CVSS5.9AI score0.00377EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 2:36 a.m.13 views

windows-api-function-cheatsheets

Windows API Function Cheatsheets Contact 🌨️ Tetsuo: https://www.x.com/tetsuo Table of Contents Windows API Function Cheatsheets File Operations Process Management Memory Management Thread Management Dynamic-Link Library DLL Management Synchronization Interprocess Communication Windows Hooks...

6.2AI score
SaveExploits0
NVD
NVD
added 2026/09/10 4:18 p.m.6 views

CVE-2026-88899

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

9.8CVSS0.00438EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/10 3:28 p.m.12 views

EUVD-2026-75579

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

9.8CVSS6AI score0.00438EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/10 3:28 p.m.7 views

CVE-2026-88899 knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

9.3CVSS6.3AI score
SaveExploits0References7
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.91 views

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...

9.8CVSS8.9AI score0.99288EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/10 12:49 a.m.9 views

CVE-2024-4577

lol CVE-2024-4577 1. exploit command RCE value root@kitploit: python3 cek.py --target http://target/index.php --ls --dir /path/to/directory python3 cek.py --target https://target/index.php --dir /path/to/directory python3 cek.py --target https://target/index.php --cat /path/to/directory find...

9.8CVSS7.8AI score0.99987EPSS
SaveExploits68
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.14 views

PT-2026-89477

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

9.8CVSS6AI score0.00438EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2026/09/09 11:51 p.m.17 views

@openhop/server: Path Traversal in Flow ID File Operations

Path Traversal in Flow ID File Operations Summary @openhop/server passes unsanitized HTTP route parameters directly to path.join when constructing filesystem paths for flow YAML files. An unauthenticated attacker who can reach the server can read arbitrary .yaml files accessible to the OpenHop...

6AI score
SaveExploits0References3Affected Software1
Kitploit
Kitploit
added 2026/09/09 7:06 p.m.13 views

IOBitUnlockerUnlocker

Intro 0 day Moves or Copies any file. Bypasses previous patch with a checksum trick. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ I discovered this without knowing that this there was another previous exploit that discovered this first. However, this...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:38 a.m.10 views

CVE-2026-22812

CVE-2026-22812 Overview A Python exploitation tool for OpenCode Remote Code Execution RCE vulnerability affecting versions v1.0.216. This tool provides multiple attack vectors including command execution, file read/write, file upload/download, and interactive shell. Disclaimer ⚠️ FOR AUTHORIZED...

8.8CVSS8.2AI score0.16771EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/03 2:25 p.m.10 views

macnoise v0.5.0

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...

6.2AI score
SaveExploits0References19
EUVD
EUVD
added 2026/09/02 2:35 p.m.20 views

EUVD-2026-67076

NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots...

8.3CVSS5.8AI score0.0026EPSS
SaveExploits1References10
Rows per page
Query Builder