CVE-2017-5487-EXPLOIT

CVE-2017-5487 - WordPress User Enumeration A vulnerability has been discovered in the REST API implementation of WordPress 4.7 before 4.7.1. This vulnerability is present in the class-wp-rest-users-controller.php file located in wp-includes/rest-api/endpoints. The flaw arises from inadequate...

z80-sans

Z80 Sans ¿Cuál es tu desensamblador favorito? El mío es una fuente: https://github.com/user-attachments/assets/bb6ceb18-c2fd-40a9-be4f-202321a214d9 Esta fuente convierte secuencias de caracteres hexadecimales en minúsculas en instrucciones Z80 desensambladas, haciendo un uso extensivo de la Tabla...

CVE-2026-19219

In Progress® Telerik® UI for AJAX (ASP.NET AJAX) prior to v2026.3.812 contains a vulnerability in the RadEditor file browser (DialogHandler UploadPaths). The root cause is insufficient integrity protection of dialog request parameters, which may allow an attacker who has obtained certain applicat...

CVE-2026-19219 DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

EUVD-2026-69898

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

CVE-2026-19219 DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

COPY-FAIL

Copy Fail -- CVE-2026-31431 Hardened C implementation for redteam and authorized penetration testing operations. ⚠️ Legal Notice: This tool is intended solely for authorized security research, authorized penetration testing, and defensive analysis. Use on systems you own or have explicit written...

CVE-2024-23692

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 Overview POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticat...

MalScan

MalScan MalScan 是一个用 Python 编写的简单 PE 文件启发式扫描器，你可以用它快速分析 PE 文件并查看是否存在可疑内容。这是一个简单的工具，因此没有提供太多花哨的功能。你可以自由扩展它，或者用它做任何你想做的事情。 支持的功能 文件信息，如 MD5、SHA1、时间戳 PEiD 签名检查 自定义 Yara 规则集成 节区、导入、导出、资源和 TLS 回调概览 提供一些自定义启发式规则 :- 安装 你需要在机器上安装 Python 2.7。额外需要 yara-python。 root@kitploit: git clone...

CVE-2024-10354

Source code Petrol pump management software free download | SourceCodester Description SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, A vulnerability has been found that is rated as high risk, affecting some unknown functionality of the admin\print.php file,...

PrivescCheck v2026.09.02-1

PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...

parquet-canary-exploit-rce-poc-CVE-2025-30065

Canary Exploit（Parquet CVE-2025-30065 用） root@kitploit: -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / ...

Politician

Politician Una biblioteca de auditoría WiFi sofisticada para microcontroladores ESP32 Politician es una biblioteca C++ embebida diseñada para la auditoría de seguridad WiFi en plataformas ESP32. Proporciona una API limpia y moderna para capturar handshakes WPA/WPA2/WPA3 y recolectar credenciales...

mkdev

mkdev Real HTTPS for local dev — with a TUI and LAN sharing. mkdev runs trusted HTTPS on .local. A single Go binary: cert authority + reverse proxy + /etc/hosts + mDNS broadcast + a full TUI. What makes it different: LAN sharing Mark a route shared, hit https://app.local from your phone or any...

Zerologon_CVE-2020-1472

ZerologonCVE-2020-1472 Objective This vulnerability research aimed to establish a controlled environment for simulating a Zerologon on windows Server 2016 through Kali Linux for detection and mtigiation purposes. The primary focus was to perform a vulnerability pentration and show the possiblity ...

PrivescCheck

PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...

CVE-2023-3519-BackdoorCheck

cve-2023-3519-citrix-scanner Este script es un escáner básico de Citrix para CVE-2023-3519. Intentamos identificar puertas de enlace/ADC de Citrix vulnerables examinando las cabeceras HTTP. Cómo funciona Durante nuestro análisis de esta vulnerabilidad, nosotros y nuestros amigos de CERT-Verbund...

Exploit-CVE-2026-1357

依存関係のインストール pip3 install pycryptodome requests 基本エクスプロイト python3 wpvivi.py http://target.com カスタムWebシェル python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" 技術的な説明: Null Byte Key: RSA復号が失敗するとfalseが返り、phpseclibはそれを「\x00\x00\x00」として扱います。AES-128...

CVE-2025-0401

CVE-2025-0401 - Local Privilege Escalation via SUID Binary Abuse Summary CVE-2025-0401 is a local privilege escalation vulnerability discovered in systems where the /usr/bin/passwd binary is misconfigured, allowing unintended root-level access when combined with specific syscall sequences. This...

CVE-2020-17519

CVE-2020-17519 Apache Flink RESTful API Arbitrary File Read Apache Flink is a framework and distributed processing engine for stateful computations over unbounded and bounded data streams which developed using Java and Scala. A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and...