CVE-2026-54766

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:32+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-f27p-pw2p-9pr4...

CVE-2026-55065

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:30+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-gg93-x632-9ccv...

CVE-2026-55066

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:28+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-5pg6-m483-7vrg...

CVE-2026-55067

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:26+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-569v-q83c-3j3g...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

wholeaked

Introduction root@kitploit: , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked is a file-sharing tool that allows you to find the responsible person in case...

wholeaked

Introduzione root@kitploit: , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked è uno strumento di condivisione file che ti permette di trovare la persona...

noPac

Über Ausnutzung von CVE-2021-42278 und CVE-2021-42287, um DA von einem normalen Domänenbenutzer zu imitieren Geändert von sam-the-admin. Verwendung root@kitploit: SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used to authenticate to DC...

gogs

👉 Distribuisci su DigitalOcean e ottieni $200 in crediti gratuiti! 🔮 Visione Il progetto Gogs /gɑgz/ mira a costruire un servizio Git self-hosted semplice, stabile ed estensibile che possa essere configurato nel modo più indolore possibile. Con Go, questo può essere realizzato con una distribuzio...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — PoC CVE-2026-43499 kernel Qualcomm 4.19 Escalata locale di privilegi che sfrutta CVE-2026-43499 — un bug in rtmutex removewaiter che lascia un struct rtmutexwaiter pendente sullo stack del kernel del waiter kernel/locking/rtmutex.c, CWE-416 use-after-free. Adattato da...

CVE-2018-3245

CVE-2018-3245 Passo 1 java -jar ysoserial-cve-2018-3245.jar root@kitploit: WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-3245.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933...

EUVD-2026-66417

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

jsubfinder

JSubFinder é uma ferramenta escrita em golang para pesquisar páginas web e javascript por subdomínios ocultos e segredos na URL fornecida. Desenvolvido pensando em caçadores de Bug Bounty, o JSubFinder aproveita o incrível desempenho do Go, permitindo utilizar conjuntos de dados grandes e ser...

demiguise

Demiguise - HTA encryption tool Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Warren, richard dot warren at nccgroup dot trust http://www.github.com/nccgroup/demiguise Released under AGPL, see LICENSE for more information What does it do? The aim of th...

CopyEscape-CVE-2026-17106

CopyEscape: Taking Over Docker Hosts with docker cp CVE-2026-17106 This is the proof-of-concept repository for the blog post CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape allows a malicious running container to race Docker's archive producer and create an...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway Gateway di sicurezza runtime per AI Agent: legame crittografico di ogni chiamata di strumento alla reale completazione del modello, esecuzione di policy zero-trust, isolamento in sandbox e approvazione umana in un'unica soluzione. Contesto: perché...

email-header-analyzer

Analizzatore di Intestazioni Email MHA Cos'è l'Analizzatore di Intestazioni Email MHA: L'Analizzatore di Intestazioni Email è uno strumento scritto in flask per analizzare le intestazioni email e convertirle in un formato leggibile dall'uomo; può anche: Identificare i ritardi dei salti...

CBM

Car Backdoor Maker O Car Backdoor Maker é um software para criar templates de ataque e carregá-los no The Bicho. Antes de começar, leia como obter o hardware do The Bicho. Captura de tela Instalação e uso Este projeto tem sua wiki onde você encontrará a seguinte documentação útil: Instalação...

AtlasReaper

AtlasReaper AtlasReaper एक कमांड-लाइन टूल है जो आक्रामक सुरक्षा उद्देश्यों के लिए विकसित किया गया है, मुख्य रूप से Confluence और Jira की टोह लेने पर केंद्रित है। यह क्रेडेंशियल फार्मिंग और सोशल इंजीनियरिंग जैसे कार्यों के लिए सहायक विभिन्न सुविधाएँ भी प्रदान करता है। यह टूल C में लिखा गया है। ब्ल...