CrossSiteContentHijacking

Progetto PoC di Cross-Site Content Data Hijacking XSCH Licenza Rilasciato sotto AGPL vedi LICENSE per maggiori informazioni. Descrizione Questo progetto può essere utilizzato per fornire una prova di concetto per: Sfruttare siti web con file di policy insicuri crossdomain.xml o...

dotnetpaddingoracle

dotnetpaddingoracle Piccolo script per verificare se l'applicazione web .NET è vulnerabile al padding Oracle Questo script verifica effettivamente se l'oracolo è presente e sfruttabile, non solo se la patch è stata installata. Uso root@kitploit: dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER...

diskwalker

Diskwalker un semplice script per attraversare il tuo disco e tenere traccia di insiemi interessanti di file Dopo aver ottenuto accesso a una macchina remota durante un penetration test, potresti voler trovare file di configurazione o binari interessanti per tentare un'elevazione dei privilegi. L...

loki

loki Lançado como código aberto pela NCC Group Plc - http://www.nccgroup.com/ Desenvolvido por Dave Spencer, david ponto spencer arroba nccgroup ponto com http://www.github.com/nccgroup/Loki Lançado sob AGPL, consulte LICENSE para mais informações Descrição O Loki Impersonador de Teclado Obstruti...

OneLogicalMyth_Shell

OneLogicalMythShell यह HTA शेल ब्रेकआउट मूल्यांकन में सहायता के लिए बनाया गया था। मैंने इसे शुरू में एक वर्ष से अधिक समय पहले बनाया था और सोचा कि दूसरों को यह उपयोगी लग सकता है, इसलिए अब इसे सार्वजनिक कर दिया है। कृपया बेझिझक पुल रिक्वेस्ट सबमिट करें। विशेषताएँ फ़ाइल एक्सप्लोरर ड्राइव्स सूचीबद्ध...

Sleipnir

Sleipnir Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Sleipnir Rilasciato sotto AGPL, vedi LICENSE per maggiori informazioni Descrizione Sleipnir è un piccolo eseguibile...

WinShareEnum

WinShareEnum Enumeratore di condivisioni Windows download https://github.com/nccgroup/WinShareEnum/raw/master/Info/WinShareEnum.exe eseguito contro un intervallo sulla mia rete locale non di dominio, con alcune condivisioni fittizie. Ricorda che è progettato principalmente per reti con dominio / ...

zipdefrag

Dieser Dump ist ein Puzzle oder fortgeschrittenes Shotgun-Parsing für Narren und Rebellen Es war einmal Es war einmal, liebe Leserin, lieber Leser, in einer dunklen und stürmischen Nacht: Dein treuer Autor stieß auf eine verwirrende und geheimnisvolle Situation – ein System, in dem das Einzige, w...

phpinfo-files-leaks

Badges Licenza MIT Installazione 1. Installa Python3 e pip Istruzioni qui Se non riesci a capire come fare, forse non dovresti usare questo strumento Installa tramite pip root@kitploit: pip install phpinfo-file-leaks Esegui il comando qui sotto per verificare phpinfo-file-leaks -h Configurazioni ...

CVE-2026-81931

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission routine Seller role to execute arbitrary JavaScript in the application origin. The photo validation rule...

CVE-2026-81834

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to th...

CVE-2026-81838

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code awsdac in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third part...

CVE-2026-75889

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...

DEBIAN-CVE-2026-59314

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spri...

CVE-2026-59314

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spri...

CVE-2026-59294

ResourceCacheService.getCacheName builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new FileresourceParentFolder, newFileName before writing the downloaded bytes there. Spring AI 2.0.0 Spring AI 1.1.0 -...

CVE-2026-59291

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-59292

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to $java.io.tmpdir/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring...

CVE-2026-54732

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

CVE-2026-53580

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files...