CVE-2020-10199

CVE-2020-10199 Prima, durante un PT penetration test, mi sono imbattuto in un ambiente target con un Nexus Repository Manager installato; dopo alcuni intoppi sono comunque riuscito a ottenere una shell. Ho deciso di documentare l'accaduto, così in futuro sarà più semplice rivedere i passaggi...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

jadx

JADX jadx - Dex से Java डिकम्पाइलर Android Dex और Apk फ़ाइलों से Java स्रोत कोड उत्पन्न करने के लिए कमांड लाइन और GUI उपकरण !WARNING कृपया ध्यान दें कि ज़्यादातर मामलों में jadx 100% कोड को डिकम्पाइल नहीं कर सकता, इसलिए त्रुटियाँ होंगी। समाधान के लिए समस्या निवारण गाइड देखें। मुख्य विशेषताएँ: APK...

CVE-2026-44402

CVE-2026-44402 Esecuzione Remota Completa di Comandi senza autenticazione in Voltronic Power SNMP Web Pro 1.1 Contenuto Vendor interessato: https://voltronicpower.com/ Prodotto interessato: SNMP Web pro 1.1 SNMP Web Pro 1.1 contiene una vulnerabilità di esecuzione remota di codice non autenticata...

CVE-2026-54754

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:41+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-p7gw-2pcp-5pf8 2026-08-28 22:07:18+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu6eqjex2f2c...

CVE-2026-54755

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:39+00:00| published-proof-of-concept| https://github.com/klever-io/klever-go/security/advisories/GHSA-cgc5-v3f2-8m2v 2026-08-28 22:07:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu6eqrkko42m...

SharpSphere

SharpSphere - Atacando a Infraestrutura vSphere Créditos @jkcoote & @grzryc Passo a passo completo e exemplos disponíveis aqui. Histórico de Versões 1.0 - Lançamento Inicial 2.0 - Adicionado suporte para autenticação pass-through usando SSPI. 2.1 - Adicionado suporte para VMs Linux alvo com...

CVE-2026-54766

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:32+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-f27p-pw2p-9pr4...

CVE-2026-55065

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:30+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-gg93-x632-9ccv...

CVE-2026-55066

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:28+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-5pg6-m483-7vrg...

CVE-2026-55067

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:26+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-569v-q83c-3j3g...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

wholeaked

Introduction root@kitploit: , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked is a file-sharing tool that allows you to find the responsible person in case...

wholeaked

Introduzione root@kitploit: , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked è uno strumento di condivisione file che ti permette di trovare la persona...

noPac

Über Ausnutzung von CVE-2021-42278 und CVE-2021-42287, um DA von einem normalen Domänenbenutzer zu imitieren Geändert von sam-the-admin. Verwendung root@kitploit: SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used to authenticate to DC...

gogs

👉 Distribuisci su DigitalOcean e ottieni $200 in crediti gratuiti! 🔮 Visione Il progetto Gogs /gɑgz/ mira a costruire un servizio Git self-hosted semplice, stabile ed estensibile che possa essere configurato nel modo più indolore possibile. Con Go, questo può essere realizzato con una distribuzio...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — PoC CVE-2026-43499 kernel Qualcomm 4.19 Escalata locale di privilegi che sfrutta CVE-2026-43499 — un bug in rtmutex removewaiter che lascia un struct rtmutexwaiter pendente sullo stack del kernel del waiter kernel/locking/rtmutex.c, CWE-416 use-after-free. Adattato da...

CVE-2018-3245

CVE-2018-3245 Passo 1 java -jar ysoserial-cve-2018-3245.jar root@kitploit: WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-3245.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933...

EUVD-2026-66417

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...