Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam

CVE-2026-33439 Pre-auth RCE in OpenIdentityPlatform OpenAM vi...

Exploit for SQL Injection in Zoneminder

ZoneMinder 1.29/1.30 SQLi to RCE Exploit A ready-to-run Pytho...

CVE-2026-88854

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

CVE-2026-88854

CVE-2026-88854 is an unauthenticated SQL injection in the OrdaSoft Joomla Gallery extension (mod_osgallery_search) affecting Joomla getVar()—not a real Joomla filter method—so only HTML tags are stripped while quotes and SQL syntax pass through. The value is concatenated directly into a LIKE clau...

EUVD-2026-83767

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

katana

下一代爬取与爬虫框架 特性 • 安装 • 用法 • 范围 • 配置 • 过滤器 • 加入Discord 特性 快速且完全可配置的网页爬取 标准 和无头 模式 JavaScript 解析/爬取 可自定义的自动表单填写 范围控制 - 预配置字段/正则 知识库 - 机器学习页面类型/表单分类（自动下载模型） 可自定义的输出 - 预配置字段 输入 - STDIN 、URL 和LIST 输出 - STDOUT 、FILE 和JSON 安装 katana需要Go...

CVE-2024-6028-Poc

CVE-2024-6028-Poc CVE-2024-6028 Quiz Maker メソッド getquestionscategories image image image Poc root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

ioc2rpz

ioc2rpz™ 让您的威胁情报可付诸行动 目录 简短摘要 概述 ioc2rpz™ —— 威胁情报与 DNS 的交汇点 架构概述 如何使用 ioc2rpz™ ioc2rpz™ Web 界面 协议支持 端口摘要 UDP（端口 53） TCP（端口 53） DNS over TLS / DoT（端口 853） DNS over HTTPS / DoH（端口 443/8443） 速率限制 DNS NOTIFY ioc2rpz™ 与 ISC BIND 及其他 DNS 的对比 安装 Docker 容器 环境变量 Docker Compose 在 AWS 上运行 ioc2rpz™ 证书设置 从源码构...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

CVE-2022-30040

Tenda AX1803 v1.0.0.12890 拒绝服务漏洞 概述 制造商网站信息：https://www.tenda.com.cn/profile/contact.html 固件下载地址：https://www.tenda.com.cn/download/default.html 漏洞描述 漏洞位于 rootfsubifs 文件系统中的 /bin/tdhttpd 内的 /goform/SetSysTimeCfg 函数，攻击者可以访问 http://ip/goform/SetSysTimeCfg 并通过设置 ntpserve 参数，引发栈缓冲区溢出，从而实现路由器拒绝服务的效果。...

CVE-2020-26259

CVE-2020-26259 CVE-2020-26259：XStream（1.4.14）在反序列化时容易受到任意文件删除的攻击，只要执行进程拥有足够的权限。 https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml root@kitploit: com.thoughtworks.xstream xstream 1.4.14 poc https://x-stream.github.io/CVE-2020-26259.html root@kitploit: 0 text/plain /etc/hosts 0...

pySigma-backend-opensearch

pySigma OpenSearch 后端 这是 pySigma 的 OpenSearch 后端。它提供 sigma.backends.opensearch 包，包含两个后端类： OpensearchLuceneBackend - 将 Sigma 规则转换为 Lucene 查询语法 OpenSearchPPLBackend - 将 Sigma 规则转换为 PPL（管道处理语言）查询 Lucene 后端 Lucene 后端支持以下输出格式： default：纯 Lucene 语法的 OpenSearch 查询 提示： 在 Dashboard 中，您需要从 DQL 切换为 Lucene...

Active-Directory-Exploitation-Cheat-Sheet

Active Directory エクスプロイトチートシート このチートシートには、Windows Active Directory の一般的な列挙と攻撃手法が含まれています。 ℹ️ このリポジトリは Nikos Katsiopis と Nikos Vourdas によって作成されました。 このチートシートは、PayloadAllTheThings リポジトリからインスピレーションを得ています。 概要 Active Directory エクスプロイトチートシート 概要 ツール ドメイン列挙 PowerView の使用 AD モジュールの使用 BloodHound の使用 リモート...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 LFI/RFI 漏洞升级为 RCE 测试环境：dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 在一次安全评估期间，发现了 CVE-2014-2383。本文档是一个概念验证，出于保护客户隐私的目的，不包含最初发现时的细节。不过，本文档中的内容确实模拟了该漏洞被利用时的环境。 发现 https://github.com/projectdiscovery/nuclei CVE-2014-2383 详情 root@kitploit: A vulnerability in dompdf.php in dompdf before...

wpbullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation Simply clone the repository, install requirements and run the script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Usage...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...