wp2shell-poc2

wp2shell-poc WordPressコアの未認証SQLインジェクションをリモートコード実行に連鎖させる概念実証（PoC）です。RESTバッチルートの混乱（CVE-2026-63030）を利用します。 このエクスプロイトは、到達可能なターゲット以外に資格情報も設定も必要としません。単一のエンドポイント POST /wp-json/batch/v1 を通じてインジェクションに到達します。 この調査結果そのものは、未認証SQLインジェクションです。check はそれを確認し、read は任意のデータベース読み取りを実証します。shell...

CVE-2025-52691

CVE-2025-52691 SmarterMail Build 9406 and earlier is vulnerable to arbitrary file upload. An unauthenticated attacker can upload arbitrary files to any location on the mail server, potentially enabling remote code execution. How does this detection method work? Sends a GET request to...

wp2shell

wp2shell by: ek0ms savi0r Unauthenticated Remote Code Execution for WordPress Core POC CVE-2026-63030 + CVE-2026-60137 wp2shell exploit for a critical vulnerability chain in WordPress core. It chains a REST API batch route confusion bug with an SQL injection in WPQuery to achieve unauthenticated...

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components 検出ツール React Server Components と Next.js アプリケーションを特定するための軽量検出ユーティリティ 🎯 目的 RSC-Detect は、React Server Components RSC と Next.js フレームワークを使用する Web サイトを特定するために設計された、シンプルで焦点を絞ったツールです。以下のような用途に役立ちます: セキュリティ研究者 - 評価中にテクノロジースタックを特定する Web 開発者 - 競合他社が使用しているフレームワークを把握する...

Pentagram-exploit-tester

Pentagram-exploit-tester A test app to check if your device is vulnerable to CVE-2021-30955. This tool incorporates @b1n4r1b01's kernel exploit based on CVE-2021-30955 and will run it on your device to test if the device is compatible. Exploit is known to work with iOS 15.0 to 15.1.1 and 15.2 BET...

cve-2025-49844

CVE-2025-49844 My personal proof-of-concept for CVE-2025-49844, also known as RediShell. Supported target builds: x86-64 Linux redis:8.2.1-alpine Docker image x86-64 Linux redis:8.2.1-bookworm Docker image It's a bit clumsy, probably not as good as Wiz Research's. Still, I'm glad I managed to get...

blueshrimp

Proof-of-concept for CVE-2025-48593 based on examining the patch. You shouldn't worry about this. As far as I can tell, phones are NOT vulnerable to CVE-2025-48593. The issue only affects Android devices that support acting as Bluetooth headphones / speakers, such as some smartwatches, smart...

blueshrimp

CVE-2025-48593のパッチを基にした概念実証です。 心配する必要はありません。私の知る限り、スマートフォンはCVE-2025-48593に対して脆弱ではありません 。この問題は、Bluetoothヘッドフォン/スピーカーとして動作できるAndroidデバイス（スマートウォッチ、スマートグラス、車など）にのみ影響します。さらに、攻撃者は被害者にペアリングさせてからでないとヘッドセットサービスにアクセスできません。スマートウォッチ/スマートグラス/車でペアリングリクエストを受け入れなければ、問題はありません。 この概念実証には何の役にも立ちません。Android...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686 - 門を開くTCP/IPの脆弱性 Windows TCP/IPスタックにおける重大なRCE脆弱性（CVE-2025-26686）は、機密メモリのロックを解除し、リモート攻撃者によるシステム乗っ取りを可能にします。ネットワーク経由で悪用可能で、完全なシステム侵害のリスクがあります。今すぐパッチを適用してください。 作者: Mark Mallia 種類: リモートコード実行（RCE） 重要度: 重大 攻撃ベクトル: ネットワークベース 影響を受けるシステム: Windows 10, 11 および Server エディション エグゼクティブサマリー...

censys-enumeration

Censys Enumeration A script to extract subdomains/emails for a given domain using SSL/TLS certificates dataset on Censys The output is in JSON format Demo Screenshots Non verbose mode Verbose mode Sample JSON output 3rd party package dependency censys click Setup Clone this repo root@kitploit: $...

CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX プラグイン + WPL Real Estate │ │ ├─ privatekey = │ │ ├─ cmd = setproperty │ │ └─ file = imageNxabc.php │ │─────────────────────────────────────────►│ │ │ API validates keys ✓ │ │ Saves file no type check │ "success": true │ │◄──────────────────────────────────────...

CVE-2025-48932-Invision-Community-SQLi-Exploit

🔓 CVE-2025-48932 - Invision Community SQL Injection Exploit ⚡ Critical Vulnerability Overview CVE-2025-48932 is a critical unauthenticated blind SQL injection vulnerability discovered in Invision Community versions ≤ 4.7.20. This exploit allows remote attackers to: 🔍 Extract sensitive database...

firejail

Firejail Firejail is a lightweight security tool intended to protect a Linux system by setting up a restricted environment for running potentially untrusted applications. More specifically, it is an SUID sandbox program that reduces the risk of security breaches by using Linux namespaces,...

krane v0.1.6

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

database-sentinel

🛡️ Database Sentinel A Claude Skill that audits your database backends for security vulnerabilities. Drop it into Claude Code, Cursor, or any Claude-powered environment. Say "audit my database" and get a comprehensive security report with exact fix code — in minutes, not days. 170+ Lovable apps...

Langflow 1.8.4 - Path Traversal to Remote Code Execution

Exploit Title: Langflow 1.8.4 - Path Traversal to Remote Code Execution Google Dork: N/A Date: 2026-07-20 Exploit Author: cardosource Vendor Homepage: https://www.langflow.org/ Software Link: https://github.com/langflow-ai/langflow Version: Dictstr, Any: return "target": target.rstrip'/', "lhost"...

UBUNTU-CVE-2026-19873

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...

PT-2026-83863

WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the columns parameter of the GET /api/v3/hosts endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL query constructed by WAPT. By exploiting t...

PT-2026-83775

Name of the Vulnerable Software and Affected Versions HTML::FormFu versions prior to 2.09 Description Repeatable elements allow resource exhaustion through an unbounded repeat count provided via the query string. When a Repeatable element has counter name set, the process function reads the repea...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftcounter: serialize reset with spinlock CVE-2026-45897 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: revert commitmutex usage in reset path CVE-2026-45901 In...