amasty-chekout-POC-rce

CVE-2026-53787 - Amasty Order Attributes Caricamento File Non Autenticato Descrizione CVE-2026-53787 è una vulnerabilità critica di caricamento file arbitrario non autenticato nell'estensione Amasty Order Attributes per Magento 2 nelle versioni precedenti alla 4.0.0. La vulnerabilità consente agl...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

CVE-2026-32475-PoC

CVE-2026-32475 — Elementor Pro Caricamento File Arbitrario Non Autenticato → RCE Proof-of-concept per CVE-2026-32475 CVSS 9.0: una vulnerabilità di caricamento file arbitrario non autenticato nel plugin WordPress Elementor Pro ≤ 4.2.1 che porta all'esecuzione remota di codice...

pmotadeee

🧠 FLATLINE - Consciousness Injection Protocol WARNING: This is not a game. It's a cognitive interface for reality hacking. 🎮 HOW TO PLAY Basic Gameplay 1. Download consciousness modules CSV files from this repository 2. Inject directly into AI interfaces as file uploads 3. Experience accelerated...

CVE-2021-36750

CVE-2021-36749 Sobre - No sistema de ingestão do Druid, o InputSource é usado para ler dados de uma determinada fonte de dados. No entanto, o HTTP InputSource permite que usuários autenticados leiam dados de outras fontes além das pretendidas, como o sistema de arquivos local, com os privilégios ...

CVE-2026-81486 bsmi021 mcp-file-context-server Path Resolution index.ts read_context path traversal

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...

CVE-2026-81486

bsmi021 mcp-file-context-server 1.0.0 contains a path traversal vulnerability in the Path Resolution component, specifically in the function read_context within src/index.ts. Manipulating the path argument allows an unauthenticated remote attacker to read files outside the intended directory, res...

EUVD-2026-66833

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...

CVE-2026-20127_EXP

CVE-2026-20127EXP Exploit-EXP für die Cisco Catalyst SD-WAN Authentifizierungsumgehungs-Schwachstelle CVE-2026-20127 Grundlegende Verwendung python scan.py -f targets.txt Detaillierte Informationen anzeigen python scan.py -f targets.txt -v Thread-Anzahl anpassen und Ergebnisse speichern python...

CVE-2026-30332

CVE-2026-30332 Beschreibung Eine Time-of-Check-to-Time-of-Use TOCTOU-Schwachstelle wurde in Balena Etcher für Windows in Versionen vor 2.1.4 identifiziert. Die Anwendung erstellt eine temporäre .cmd-Datei in einem benutzerbeschreibbaren Verzeichnis und führt diese später mit erhöhten Rechten über...

collisions

Collisioni di hash e sfruttamenti Di Ange Albertini e Marc Stevens. FAQ TL;DR D: È possibile fare in modo che un file ottenga un MD2/MD4/MD5/MD6/SHA1/SHA2/SHA3 arbitrario, o lo stesso hash di un altro file? R: No. D: Si possono creare 2 file diversi con lo stesso hash? R: Con MD5, in pochi second...

CVE-2026-22241

CVE-2026-22241 : Open eClass Execução Remota de Código RCE Este exploit usa a CVE-2026-22241 para automatizar o login, a criação de ZIP, o processo de upload e fornecer uma webshell diretamente no servidor, removendo-a automaticamente assim que o exploit é concluído. Descrição Uma vulnerabilidade...

UPnPHostFileRead

Descrizione Exploit PoC per lettura arbitraria di file locale per il servizio Windows UPnP Device Host. Legge un file arbitrario nel contesto di LOCAL SERVICE. Testato su Windows 11 Pro build 26200.8457. Segnalato a Microsoft. Valutato come "non una vulnerabilità". Come compilare 1. Clona il...

cpsniper

cPanelSniper CVE-2026-41940 — Bypass de Autenticação do cPanel & WHM via Injeção CRLF em Arquivo de Sessão Cadeia de exploração em 4 estágios · Shell WHM Interativo · VERDADEIRAMENTE ESTÁVEL para 10M+ alvos · Zero uso de memória · apenas stdlib Visão Geral cPanelSniper é um framework de exploraçã...

CVE-2026-40487

CVE-2026-40487 - Postiz = 2.21.5 - Caricamento Arbitrario di File tramite Spoofing del MIME-Type per XSS Persistente fino al Furto dell'Account Scoperta e segnalata da: Astaruf Analisi completa: https://nstsec.com/en/posts/postiz-xss-cve-2026-40487/ Voce NVD:...

die-python

DetectItEasy-Python روابط Python 3.11+ أصلية لمكتبة Detect-It-Easy الخاصة بـ @horsicq التثبيت من pip أسهل طريقة للتثبيت والموصى بها هي عبر pip. root@kitploit: pip install die-python باستخدام Git root@kitploit: git clone https://github.com/elastic/die-python cd die-python ثبّت Qt في مجلد build. يم...

CVE-2026-41653

CVE-2026-41653: BentoPDF ≤ 2.8.2 - XSS persistente → Esfiltrazione di file Scoperta e segnalata da: Astaruf Analisi completa: https://nstsec.com/en/posts/bentopdf-xss-cve-2026-41653/ Avviso upstream: Avviso GHSA di alam00000/bentopdf Voce NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41653...

adwind-decryptor

AdWind Decryptor Semplice decryptor per file crittografati nella RAT Java AdWind/jRAT/jBifrost. Utilizzo root@kitploit: usage: java -jar AdWindDecryptor -a,--aeskeyfile AES key file path -i,--input input file path -o,--output decrypted output file path -r,--rsakeyfile serialized RSA KeyRep file...

CVE-2021-4034

Exploit CVE-2021-4034 Utilizzo root@kitploit: $ git clone https://github.com/Anonymous-Family/CVE-2021-4034.git $ cd CVE-2021-4034 $ make ! CVE-2021-4034 Exploit By whokilleddb ! Initializing Setup + Setup Done :D ! Setting Root Privileges ! Launching Root Shell /bin/whoami root Patch...

ExportHider

ExportHider ExportHider genera un template DLL C++ che contiene uno stub di codice che permette di nascondere le Funzioni Esportate dalla Directory di Esportazione della DLL sul filesystem. Dopo aver inserito le definizioni delle funzioni e compilato il file, non vedrai le funzioni di esportazion...