40595 matches found
CVE-2025-71420 UVdesk core-framework before 1.1.7 Authorization Bypass via Saved Reply
UVdesk core-framework before 1.1.7 contains an authorization bypass vulnerability in the saved reply endpoint that allows authenticated agents to access replies restricted to other support groups. Attackers with ROLEAGENT can enumerate saved reply identifiers and read content reserved for groups...
CVE-2025-71420
UVdesk core-framework before 1.1.7 contains an authorization bypass in the saved reply endpoint. Agents holding the ROLE_AGENT permission can enumerate saved reply identifiers and read reply content restricted to other support groups or teams, resulting in a low confidentiality impact (CVSS 3.1 b...
CVE-2025-71419 UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer
UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration action. Attackers with ROLEAGENT can inject malicious script into the identifier field, which is persisted and executed wh...
CVE-2025-71419 UVdesk core-framework before 1.1.7 Stored XSS via SwiftMailer
UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration action. Attackers with ROLEAGENT can inject malicious script into the identifier field, which is persisted and executed wh...
CVE-2025-71419
UVdesk core-framework versions before 1.1.7 are affected by a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration action. An attacker with the ROLE_AGENT privilege can inject a malicious script into the identifier field;...
EUVD-2025-210975
UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration action. Attackers with ROLEAGENT can inject malicious script into the identifier field, which is persisted and executed wh...
CVE-2023-35674
Description CVE-2023-35674 is a high-severity zero-day security vulnerability in the Android Framework. This vulnerability allows an attacker to escalate their privileges without requiring user interaction or additional execution permissions. The vulnerability occurs in how the Android Framework...
framework_base_AOSP10_r33_CVE-2021-0513
This repository does not have a README...
shisoserial
shisoserial What is this A simple tool targeted at shiro framework attacks with ysoserial. Contributor 4nth0ny @Fridaylab Runtime python 3.x JDK 1.8 Installation root@kitploit: python3 -m pip install -r requirements.txt for AttributeError: module 'Crypto.Cipher.AES' has no attribute 'MODEGCM' or ...
CVE-2025-55182
π β οΈ Unauthorized penetration testing is prohibited Build Steps root@kitploit: go get fyne.io/fyne/v2@latest go build -ldflags="-s -w" . Screenshots...
CVE-2022-22965-PoC
CVE-2022-22965 PoC Minimal example of how to reproduce CVE-2022-22965 Spring RCE. Run using docker compose 1. Build the application using Docker compose root@kitploit: docker-compose up --build 2. To test the app browse to http://localhost:8080/handling-form-submission-complete/greeting 3. Run th...
ESFang
ESFang This is a tool devised for modular consumption of EndpointSecurity Framework ESF events from the MacOs environment. This is my attempt to overcome a number of issues encountered with existing tools including things such as silent data dropping, strict event type consumption, lack of suppor...
detectree
Detectree Detectree es una herramienta de visualizaciΓ³n de datos para equipos azules. Proporciona una representaciΓ³n grΓ‘fica de los datos de detecciΓ³n, lo que permite a un analista generar opiniones casi instantΓ‘neas sobre la naturaleza de la actividad subyacente y comprender relaciones complejas...
Pre-render-data-spoofing-on-React-Router-framework-mode-CVE-2025-43865
Welcome to React Router! A modern, production-ready template for building full-stack React applications using React Router. Features π Server-side rendering β‘οΈ Hot Module Replacement HMR π¦ Asset bundling and optimization π Data loading and mutations π TypeScript by default π TailwindCSS for stylin...
safenet-soho-security-framework
SafeNet SOHO Security Framework SafeNet is a production-grade Zero-Trust Network Access ZTNA framework specifically engineered for Small Office/Home Office SOHO environments. By orchestrating a secure, identity-aware VPN overlay utilizing the WireGuard protocol, SafeNet provides granular control...
apache-struts-cve-2017-9805
The Apache Struts web framework The Apache Struts web framework is a free open-source solution for creating Java web applications. Web applications differ from conventional websites in that web applications can create a dynamic response. Many websites deliver only static pages. A web application...
LLM-MCP-Security-Field-Guide
π‘οΈ AI Security Field Guide β LLM + MCP Security The most comprehensive, up-to-date, practitioner-first security reference for LLM applications and Model Context Protocol MCP deployments. Covers real CVEs, live attack patterns, OWASP frameworks, red teaming tools, and actionable checklists β update...
vUSBf
vusbf-Framework root@kitploit: / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / // // / / / / / // / / / // // / / // ,/ ///// A KVM/QEMU based USB-fuzzing framework. Sergej Schumilo, OpenSource Security...
KUMO-Domain-Recon-Tool
One domain. One command. Everything. Kumo is a domain OSINT & security reconnaissance framework. Drop a domain β get everything back in real time across 26 parallel modules : DNS, open ports, leaked credentials, infostealer infections, vulnerable endpoints, subdomains, CVEs, malware families, and...
cve-2024-38819-lab
CVE-2024-38819 Customer Vault Lab This is a Cloud Foundry-ready Spring Boot demo for CVE-2024-38819, a Spring Framework path traversal vulnerability in functional static resource handling. What Is Patched? CVE-2024-38819 is patched in Spring Framework , not directly in Spring Boot. Spring Boot is...