CVE-2026-22812-POC

OpenCode CVE-2026-22812 Exploiter Ferramentas Python simples para verificar e explorar a vulnerabilidade do OpenCode CVE-2026-22812. Instalação root@kitploit: git clone https://github.com/CayberMods/CVE-2026-22812-POC.git cd CVE-2026-22812-POC pip install requests urllib3 argparse...

DLPwn

DLPwn Data Leak Prevention via Bluetooth Speaker DLPwn ist ein Red-Team-Tool, das für die Dateiexfiltration entwickelt wurde, um Sicherheitssysteme wie EDR Endpoint Detection and Response, XDR Extended Detection and Response, DLP Data Loss Prevention und allgemein alle luftspaltend air-gapped...

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Beschreibung CVE-2026-3891 ist eine kritische Unauthenticated Arbitrary File Upload -Sicherheitslücke, die im Pix for WooCommerce WordPress-Plugin in den Versionen bis einschließlich 1.5.0 gefunden wurde. Die Schwachstelle existiert in der...

cs-token-vault

Token Vault BOF per Cobalt Strike Questo Beacon Object File BOF crea una memoria in-memory per i token di accesso Windows rubati/duplicati, consentendoti di: Hot swap/riutilizzare token già rubati senza duplicarli di nuovo. Memorizzare i token per un uso futuro nel caso un utente si disconnetta...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

CVE-2026-32475-PoC

CVE-2026-32475 — Elementor Pro Caricamento File Arbitrario Non Autenticato → RCE Proof-of-concept per CVE-2026-32475 CVSS 9.0: una vulnerabilità di caricamento file arbitrario non autenticato nel plugin WordPress Elementor Pro ≤ 4.2.1 che porta all'esecuzione remota di codice...

pmotadeee

🧠 FLATLINE - Consciousness Injection Protocol WARNING: This is not a game. It's a cognitive interface for reality hacking. 🎮 HOW TO PLAY Basic Gameplay 1. Download consciousness modules CSV files from this repository 2. Inject directly into AI interfaces as file uploads 3. Experience accelerated...

CVE-2026-81486 bsmi021 mcp-file-context-server Path Resolution index.ts read_context path traversal

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...

EUVD-2026-66833

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...

CVE-2026-81486

bsmi021 mcp-file-context-server 1.0.0 contains a path traversal vulnerability in the Path Resolution component, specifically in the function read_context within src/index.ts. Manipulating the path argument allows an unauthenticated remote attacker to read files outside the intended directory, res...

CVE-2026-20127_EXP

CVE-2026-20127EXP Exploit-EXP für die Cisco Catalyst SD-WAN Authentifizierungsumgehungs-Schwachstelle CVE-2026-20127 Grundlegende Verwendung python scan.py -f targets.txt Detaillierte Informationen anzeigen python scan.py -f targets.txt -v Thread-Anzahl anpassen und Ergebnisse speichern python...

CVE-2026-30332

CVE-2026-30332 Beschreibung Eine Time-of-Check-to-Time-of-Use TOCTOU-Schwachstelle wurde in Balena Etcher für Windows in Versionen vor 2.1.4 identifiziert. Die Anwendung erstellt eine temporäre .cmd-Datei in einem benutzerbeschreibbaren Verzeichnis und führt diese später mit erhöhten Rechten über...

collisions

Collisioni di hash e sfruttamenti Di Ange Albertini e Marc Stevens. FAQ TL;DR D: È possibile fare in modo che un file ottenga un MD2/MD4/MD5/MD6/SHA1/SHA2/SHA3 arbitrario, o lo stesso hash di un altro file? R: No. D: Si possono creare 2 file diversi con lo stesso hash? R: Con MD5, in pochi second...

CVE-2026-22241

CVE-2026-22241 : Open eClass Execução Remota de Código RCE Este exploit usa a CVE-2026-22241 para automatizar o login, a criação de ZIP, o processo de upload e fornecer uma webshell diretamente no servidor, removendo-a automaticamente assim que o exploit é concluído. Descrição Uma vulnerabilidade...

UPnPHostFileRead

Descrizione Exploit PoC per lettura arbitraria di file locale per il servizio Windows UPnP Device Host. Legge un file arbitrario nel contesto di LOCAL SERVICE. Testato su Windows 11 Pro build 26200.8457. Segnalato a Microsoft. Valutato come "non una vulnerabilità". Come compilare 1. Clona il...

cpsniper

cPanelSniper CVE-2026-41940 — Bypass de Autenticação do cPanel & WHM via Injeção CRLF em Arquivo de Sessão Cadeia de exploração em 4 estágios · Shell WHM Interativo · VERDADEIRAMENTE ESTÁVEL para 10M+ alvos · Zero uso de memória · apenas stdlib Visão Geral cPanelSniper é um framework de exploraçã...

CVE-2026-40487

CVE-2026-40487 - Postiz = 2.21.5 - Caricamento Arbitrario di File tramite Spoofing del MIME-Type per XSS Persistente fino al Furto dell'Account Scoperta e segnalata da: Astaruf Analisi completa: https://nstsec.com/en/posts/postiz-xss-cve-2026-40487/ Voce NVD:...

die-python

DetectItEasy-Python روابط Python 3.11+ أصلية لمكتبة Detect-It-Easy الخاصة بـ @horsicq التثبيت من pip أسهل طريقة للتثبيت والموصى بها هي عبر pip. root@kitploit: pip install die-python باستخدام Git root@kitploit: git clone https://github.com/elastic/die-python cd die-python ثبّت Qt في مجلد build. يم...

CVE-2026-41653

CVE-2026-41653: BentoPDF ≤ 2.8.2 - XSS persistente → Esfiltrazione di file Scoperta e segnalata da: Astaruf Analisi completa: https://nstsec.com/en/posts/bentopdf-xss-cve-2026-41653/ Avviso upstream: Avviso GHSA di alam00000/bentopdf Voce NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41653...

adwind-decryptor

AdWind Decryptor Semplice decryptor per file crittografati nella RAT Java AdWind/jRAT/jBifrost. Utilizzo root@kitploit: usage: java -jar AdWindDecryptor -a,--aeskeyfile AES key file path -i,--input input file path -o,--output decrypted output file path -r,--rsakeyfile serialized RSA KeyRep file...