CVE-2021-27651

Résumé Un attaquant peut contourner toutes les étapes du flux de réinitialisation de mot de passe et réinitialiser le compte de n'importe quel utilisateur sur Pega Infinity. Cela est réalisé en 1 initiant le flux de réinitialisation de mot de passe et en saisissant l'e-mail de la victime, puis 2 ...

wp-ulike-cve-2025-32259-poc

WP ULike ≤ 4.7.9.1 - Неаутентифицированный спуфинг контента CVE-2025-32259 🔬 Простой PoC, демонстрирующий CVE-2025-32259 в плагине WP ULike для WordPress. 🚨 Только для образовательных целей – не тестируйте на системах без явного разрешения. 🧠 Обзор WP ULike — популярный плагин для WordPress,...

CVE-2019-14537

YOURLS: CVE-2019-14537 PoC When you get a valid timestamp you will be able to make requests to the api. http://domain.com/yourls-api.php?signature=0e1&action=db-stats&timestamp=VALIDTIMESTAMP Usage root@kitploit: usage: main.py -h --vhost VHOST --threads THREADS --path PATH --port PORT ip...

PwnXSS

A powerful XSS scanner made in python 3.7 Installing Requirements: BeautifulSoup4 root@kitploit: pip install bs4 requests root@kitploit: pip install requests python 3.7 Commands: root@kitploit: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Usag...

Security Bulletin: IBM Security SOAR is vulnerable to using components with known vulnerabilities (CVE-2026-41254, CVE-2026-47057)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM Security SOAR has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an...

ImageMagick-lfi-poc

ImageMagick-lfi-poc ImageMagick Arbitrary Read Files - CVE-2022-44268 also used in htb pilgrimage ImageMagick LFI PoC CVE-2022-44268 The researchers at MetabaseQ discovered CVE-2022-44268, i.e. ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image e.g., for...

CVE-2026-13158

CVE-2026-13158: Everest Toolkit 빠른 링크: DEV.to 글에서 전체 심층 기술 권고를 읽거나 연구원의 공식 사이버보안 포트폴리오를 확인하세요. 📌 요약 및 기술 메타데이터 🔍 근본 원인 분석 CVE-2026-13158의 근본 원인은 EverestToolkit 관리자 핸들러 클래스 내의 안전하지 않은 파일 업로드 처리에서 비롯됩니다. 인증된 관리자 또는 관리 권한을 가진 사용자가 파일 업로드 엔드포인트예: 템플릿 가져오기, 사용자 지정 아이콘 업로드, 자산 구성 루틴를 호출할 때, 플러그인은 실행 가능...

Mahoraga-Webapp-Defender

Mahoraga Webapp Defender AI-powered reactive webapp defense system designed to withstand AI-powered hacks in real-time. Table of Contents Mahoraga Webapp Defender Table of Contents Introduction Target Website Mahoraga Defender Architecture Dual Environments Agent Pipeline How to Start Getting rea...

kali-rpi-luks-crypt

Chiffrement complet du disque pour Kali sur Raspberry ou autre architecture similaire avec LUKS Ce tutoriel est dédié à l'exécution de Kali sur Raspberry ou autre architecture similaire, par ex. ODROID-C2 avec chiffrement complet du disque avec LUKS. Basé sur le document un peu obsolète ici...

ssh-enum

ssh-enum Статистическое валидационное исследование CVE-2016-6210 Воспроизводимое повторное исследование перебора имён пользователей OpenSSH с использованием статистического анализа. Этот проект заново исследует CVE-2016-6210 , документированный побочный канал по времени в OpenSSH, чтобы определит...

CVE-2025-54309

CVE-2025-54309 CrushFTP Authentication Bypass Overview CVE-2025-54309 is an authentication bypass vulnerability in CrushFTP that allows unauthorized administrative user creation through AS2 header manipulation. Technical Details Vulnerability Location File : crushftp/server/ServerSessionHTTP.java...

CVE-2024-34102

CVE-2024-34102 POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce. Overview This POC will attempt to read files from target hosts that are vulnerable to the recent Magento / Adobe Commerce CVE-2024-34102. This POC is based on this security advisory...

CVE-2025-24813-noPoC

CVE-2025-24813-noPoC После бесчисленных часов я не смог придумать ни одного реального PoC. Хотя десериализация загруженных файлов может представлять угрозу, все протестированные мной цепочки payload не сработали. Протестировано на версиях 9.0.90 и 10.1.15 Apache Tomcat Больше здесь нечего смотрет...

auditpolCIS

auditpolCIS CIS Benchmark testing of Windows SIEM configuration This is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings. A few points: The tested system was Windows Server 2019, and the benchmark used was also Windows...

CVE-2018-6574

CVE-2018-6574 CVE-2018-6574 go get...

CVE-2023-4294

CVE ID : CVE-2023-4294 Vulnerability Type : Cross-Site Scripting Description : The URL Shortify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the referrer header in versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes ...

Get-ReconInfo

Get-ReconInfo root@kitploit: NAME Get-ReconInfo SYNOPSIS Lists connections and relevant info about a system Author: Chris King @raikiasec SYNTAX Get-ReconInfo DESCRIPTION This script runs the following commands on the local system, parses the output, and prints the results to the screen: netstat...

CVE-2024-4956

CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Repository Manager 3 The Nexus Repository Manager is a repository manager that organizes, stores, and distributes artifacts needed for development. A path traversal vulnerability has been discovered in Nexus Repository 3, in versions prior t...

PichichiH0ll0wer

PichichiH0ll0wer PichichiH0ll0wer About Features Injection methods Installation Usage Credits About --== Process hollowing loader written in Nim for PEs only ==-- I built PichichiH0ll0wer to learn and contribute, sure. but also because I'm quite tired of shellcodes everywhere. Loading PEs might b...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...