CVE-2010-1872-BlazeDVD-SEH-Exploit

BlazeDVD 5.0 - '.PLF' Playlist SEH Buffer Overflow Exploit CVE-2010-1872 Proof-of-Concept PoC exploit targeting a buffer overflow vulnerability in BlazeDVD version 5.0 via a crafted .plf playlist file. The exploit uses SEH Structured Exception Handler overwrite to achieve code execution. Details...

CVE-2024-1380

CVE-2024-1380 Relevanssi – A Better Search = 4.22.0 - Falta de autorización permite la exportación no autenticada del registro de consultas Descripción El plugin Relevanssi – A Better Search para WordPress es vulnerable al acceso no autorizado de datos debido a la falta de una comprobación de...

CVE-2024-23334-PoC

路径遍历 PoC CVE-2024-23334 此脚本是针对漏洞 CVE-2024-23334 的概念验证 PoC，该漏洞与路径遍历 相关。脚本尝试通过操作 HTTP 请求中的路径来访问允许根目录之外的文件。 要求 要执行此脚本，你需要安装以下依赖： Python 3.x curl （必须在你的系统上安装） requests 和 colorama（用于处理请求和彩色输出） 变量 file 将是我们想要指向的文件 你可以用以下命令安装依赖： root@kitploit: pip install -r requirements.txt...

webcvescanner

shitsniffer Recopila una lista de dispositivos Citrix en un par país/estado y verifica si son vulnerables a CVE-2019-19781. Los resultados se generan como JSON, que se pueden manipular muy bien para crear un informe significativo en PowerBI. Esto se logra consultando Shodan para obtener todos los...

Security Bulletin: IBM Event Processing is affected by Multiple vulnerabilities

Summary IBM Event Processing is affected by Multiple vulnerabilities and were addressed in IBM Event Processing version 1.5.5 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output...

CVE-2024-2387

CVE-2024-2387 Advanced Form Integration – 连接 WooCommerce 和 Contact Form 7 到 Google Sheets 及其他平台 = 1.82.0 - 通过 integrationid 的 SQL 注入到反射型跨站脚本 描述 Advanced Form Integration – 连接 WooCommerce 和 Contact Form 7 到 Google Sheets 及其他平台的 WordPress 插件在 1.82.0 及之前的所有版本中，由于对用户提供的参数转义不足且对现有 SQL 查询缺乏充分准备，通过...

CVE-2026-94033 SourceCodester Drug Recommendation System User Management add_user cross site scripting

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

CVE-2026-94033

A cross-site scripting (XSS) vulnerability affects the User Management component of SourceCodester Drug Recommendation System 1.0 , specifically in the file /drug_recommender/Admin/add_user. Manipulation of the txtname, txtemail, or txtpassword arguments enables the XSS payload. The attack is rem...

CVE-2026-94033 SourceCodester Drug Recommendation System User Management add_user cross site scripting

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

EUVD-2026-83749

A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drugrecommender/Admin/adduser of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross site scripting. It is...

CVE-2024-25092

CVE-2024-25092 NextMove Lite 2.18.0 - Instalación/Activación Arbitraria de Plugins por Suscriptor+ Descripción: El plugin NextMove Lite – Thank You Page for WooCommerce para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de comprobación de capacidades en la...

memory-forensic

memory-forensic A memory forensics toolkit that profiles Windows kernels itself — and is cross-checked, process-for-process, against Volatility 3. mem4n6 reads every common dump format LiME, AVML, ELF core, Windows crash dumps, hibernation files, VMware save-states, kdump, raw… and walks processe...

dwarf2json

Introducción dwarf2json es una utilidad de Go que procesa archivos que contienen información de símbolos y tipos para generar la salida JSON de Intermediate Symbol File ISF de Volatility3, adecuada para el análisis de Linux y macOS. Para compilar se requiere Go 1.18+: root@kitploit: $ go build Pa...

Root-My-Galaxy-S938B

Root My Galaxy — S938B Root My Galaxy es un instalador basado en perfiles de firmware para root temporal de KernelSU en builds de Samsung compatibles. Este fork se mantiene para el Galaxy S25 Ultra SM-S938B que ejecuta: root@kitploit: Build: BP4A.251205.006.S938BXXSBCZG3 Kernel:...

SprayingToolkit

Aviso de desuso Este proyecto ya no recibe mantenimiento. Los siguientes proyectos alternativos son mejores y se mantienen activamente: TREVORspray CredMaster SprayingToolkit Descripción Un conjunto de scripts/utilidades de Python que intenta hacer que los ataques de spraying de contraseñas contr...

gorilla

gorilla gorilla es la herramienta definitiva de listas de palabras, que incluye un montón de utilidades increíbles como: construcción de listas de palabras basadas en patrones como crunch construcción de listas de palabras basadas en formatos comunes de contraseñas/nombres de usuario como cupp...

CVE-2018-7422

CVE-2018-7422 Exploit for CVE-2018-7422: Local File Inclusion in WordPress Plugin Site Editor 1.1.1 T1574.008 Syntax root@kitploit: ruby Lab Environment OffSec Proving Grounds - Readys Usage...

metasploitable2-vsftpd-exploitation

Metasploitable 2 - vsFTPd 2.3.4 Exploitation Lab Overview This project demonstrates a penetration testing workflow against a deliberately vulnerable machine, Metasploitable 2. The objective was to identify, exploit, and analyze a known vulnerability in the FTP service, ultimately achieving...

CVE-2018-18912

🐞 CVE-2018-18912: Easy File Sharing Web Server 7.2 - Desbordamiento de búfer basado en pila SEH Desbordamiento de búfer basado en SEH en Easy File Sharing Web Server 7.2 que demuestra cómo un parámetro HTTP POST autenticado puede corromper la cadena del manejador de excepciones. 📑 Tabla de...

boha v0.20.2

@agntn/puzzles Public crypto puzzles and bounties, as typed records. You ask for a puzzle, you get its address, its key material and what happened on chain. Why? Every puzzle thread has the same three things: the addresses, the prizes, and who solved what. Every scanner and tracker re-types them...