CVE-2020-12432

CVE-2020-12432 Collabora CODE Click here 4. The victim opens the link and gets redirected to another service with all his cookies and local storage data sent over to anot...

system_bt_AOSP10_r33-CVE-2020-0138

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...

CVE-2026-33186

CVE-2026-33186 gRPC-Go RBAC Authorization Policy Bypass via Missing :path Slash Auth Bypass Description The authz package in google.golang.org/grpc implements SDK-level RBAC authorization using deny and allow rules matched against the :path pseudo-header. The HTTP/2 server transport stores the ra...

cms-exploitation-campaign

CMS 漏洞利用活动 Nuclei 模板 针对 ASD 的澳大利亚网络安全中心于 2026 年 7 月 9 日报告的大规模 CMS 漏洞利用活动的防御性 Nuclei 模板包。 公告：https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/large-scale-exploitation-campaign-targeting-website-content-management-systems-cms 背景 此警报与所有澳大利亚网站所有者和网站管理员相关，面向技术受众。 ASD 的 ACSC...

Eris

Eris Eris is a desktop PGP workstation written in Go with Fyne. It stores keys in an encrypted vault and gives you a clean UI for signing, encryption, decryption, and verification. Features...

insect

insect - Web 路径发现 当前版本: v1.4 20222.09.03 一个高级命令行工具，用于暴力破解 Web 服务器中的目录和文件，也称为 Web 路径扫描器 想法 来自 @maurosoria 和 @shelld3v Developement-2022 由 @nu11secur1ty 积极开发中 目录 安装 字典列表 选项 配置 如何使用 简单用法 暂停进度 递归 线程 前缀 / 后缀 黑名单 过滤器 原始请求 字典格式 排除扩展名 扫描子目录 代理 报告 更多示例命令 支持 Docker 在 Linux 上安装 Docker 构建 insect 镜像 使用 insect...

HIKRAVEN

HIKRAVEN 🛡️ Advanced Hikvision Security Assessment Platform - Professional Edition Features • Quick Start • Installation • Usage • Documentation • Disclaimer ⚠️ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...

CVE-2025-47810

PunkBuster LPI CVE-2025-47810 Background PunkBuster installs itself as two services, and an optional? kernel driver. PnkBstrA: Service that runs constantly in the background, and in charge of managing PunkBuster as a whole PnkBstrB: Service that starts when a protected game starts. Comes with mor...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 Meta-Command Filter Command Execution Summary The PLAIN restore meta-command filter introduced in pgAdmin as part of the fix for Issue 9320 does not detect meta-commands when a SQL file begins with a UTF-8 Byte Order Mark EF BB BF or other special sequences. The implemented filter...

Exploit for Out-of-bounds Write in Hp Linux_Imaging_And_Printing

🔬 Join Telegram for the latest vulnerability research and exploi...

CVE-2020-13671

CVE-2020-13671 通过文件上传实现 RCE —— Drupal Core 软件： Drupal Core 8.7.5（受影响版本：7.x 7.78、8.x 8.8.11、8.9.x 8.9.9、9.0.x 9.0.8） CVSS： 8.8（高危） CWE： CWE-434 —— 危险类型文件的无限制上传 CISA KEV： 是 —— 已知被利用漏洞 公告： SA-CORE-2020-012 什么是 Drupal Drupal 是一个用 PHP 编写的开源内容管理系统（CMS），与 WordPress 或 Joomla...

RvbbitSafe

RvbbitSafe: The Hacker's Nightmare – A Six-Fortress Anti-Ransomware Architecture for Windows 🛡️ Overview RvbbitSafe is a research prototype demonstrating a paradigm shift in ransomware defense. It's an active, multi-layered fortress that combines hardware virtualization, AI-driven deception,...

CVE-2026-48908

🚨 CVE-2026-48908 — Full Server Compromise via Arbitrary File Upload Critical Unauthenticated File Upload → Remote Code Execution RCE A critical vulnerability in SP Page Builder allows unauthenticated attackers to upload arbitrary files and achieve Remote Code Execution RCE , potentially leading t...

WP-Bricks-Exploit-CVE-2024-25600

BricksRCE Exploiter CVE-2024-25600 — WordPress Bricks Builder Unauthenticated RCE Authorized security assessment tool for CVE-2024-25600 Author: Sudeepa Wanigarathna · Tool: BricksRCE Exploiter v1.0 Main script: cve-2024-25600.py !IMPORTANT Authorized use only. This tool is for security research,...

CVE-2024-21413

Exploitation of CVE-2024-21413 Outlook Project status: On hold incomplete practice; failed to capture NTLM hashes Objectives Attempt to exploit vulnerability CVE-2024-21413, which allows leakage of NTLM hashes in Outlook when interacting with malicious links. The goal of the practice was not to...

xCrack Python Tools For Hackers

TG Download Link: https://t.me/+0z9FapS4mBgyZjhl xCrack Python Hacking Tool for Hackers And Spammers Requirements: Python 3.x Tested On: Python 3.10.4 ► cPanel Section ◄ Mass cPanel Active Checker Mass cPanel To Shell Uploader Mass cPanel To SMTP Cracker Mass cPanel To Webmail Cracker Mass cPanel...

CVE-2026-9999-Serverless-Event-Injection-to-Code-Overwrite

3. CVE-2026-9999 – 无服务器函数事件注入（路径遍历 → 代码覆盖） 概述 处理对象存储事件的无服务器平台未对 object.key 字段进行清理，从而允许攻击者通过路径遍历覆盖函数源代码。 严重性： 严重（下次调用时 RCE） 漏洞利用与模拟（Python） root@kitploit: !/usr/bin/env python3 """ vulnerableserverless.py - Simulated AWS Lambda-like runtime with event injection. """ import json, os, shutil,...

mkchain

mkchain 开源工具，帮助你构建有效的SSL证书链。 描述 • 使用方法 • 参数 • 工作原理 • 必备条件 • 其他 • 许可证 描述 是一款开源工具，帮助你构建有效的SSL证书链。它还能帮助你修复不完整的证书链，并下载所有缺失的CA证书。你也可以从远程服务器下载所有证书，并正确构建你的证书链。 使用方法 很简单： root@kitploit: 克隆此仓库 git clone https://github.com/trimstray/mkchain 进入仓库目录 cd mkchain 安装 ./setup.sh install 运行应用 mkchain -i /data/cert...

Security Bulletin: IBM Quantum Safe Remediator is affected by mutiple vulnerabilities

Summary The vulnerabilities are found in the dependent open source libraries used in IBM Quantum Safe Remediator code base. IBM Quantum Safe Remediator has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION:...