EUVD-2026-68459

A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component Administrative Console. Such manipulation of the argument dmcommand leads to os command...

CVE-2026-82678

diem-project diem (up to 5.1.3 ) contains an OS command injection vulnerability in the Administrative Console component. The affected element is the executeCommand function in dmAdminPlugin/modules/dmConsole/actions/actions.class.php , where manipulation of the dm_command argument allows command ...

CVE-2026-82678 diem-project diem Administrative Console actions.class.php executeCommand os command injection

A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component Administrative Console. Such manipulation of the argument dmcommand leads to os command...

sandcat

Sandcat Browser Sandcat is a lightweight multi-tabbed web browser that combines the speed and power of Chromium and Lua. Sandcat comes with built-in live headers, an extensible user interface and command line console, resource viewer, and many other features that are useful for web developers and...

CVE-2021-26700

RCE in NPM VSCode Extension Fixed 10th February 2021 in https://github.com/microsoft/vscode-npm-scripts/commit/cdd5e507564e0cc0f60bcccf184822be3fd73e07 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26700 Summary Remote code execution vulnerability in the eg2.vscode-npm-script...

MADLIRA

MADLIRA Detección de malware mediante aprendizaje y recuperación de información para Android Resumen MADLIRA es una herramienta para la detección de malware en Android. Consiste en dos componentes: el componente TFIDF y el componente de aprendizaje SVM. En general, toma como entrada un conjunto d...

Pentest-Windows

Pentest-Windows11 v3.2 The First Windows Penetration Testing Environment on Mac M Chips 中文文档 | English README 📖 Project Overview 📝 System Introduction This environment aims to provide a ready-to-use Windows penetration testing environment. Reposting is welcome. Please indicate the original author...

RHSA-2026:61313 Red Hat Security Advisory: rhc security update

Bulletin has no description...

RHSA-2026:61253 Red Hat Security Advisory: golang security update

Bulletin has no description...

RHSA-2026:61245 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

CVE-2023-23397-Patch

CVE-2023-23397 Windows Update Patch CVE-2023-23397 powershell patch script for Windows 10 and 11 This version of the script allows you to check if your device has the most reach sent patches for the latest Microsoft exploit. if the security updates are not found using the Powershell Command...

Solr-GRAB

Solr-GRAB Steal Apache Solr instance Queries with or without a username and password. DISCLAIMER : This project should be used for authorized testing and educational purposes only. Download root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB Usage You can search for Apache Solr...

MrRAT

MrRAT 这是一个跨平台的 Python 2.x 远程访问木马（RAT），MrRAT 的创建是为了保持一个干净设计的全功能 Python RAT。目前仍在开发中，并且仍在积极修改中。 免责声明：此 RAT 仅用于研究目的，只能在经授权的系统上使用。未经授权或明确许可访问计算机系统或网络是非法的。 功能 跨平台（Windows、Linux 和 macOS） 带有 D-H 交换的 AES GCM 加密 C2 接受来自多个客户端的连接 命令执行 文件上传/下载（自加密更改以来有点缺陷） 标准实用程序（wget、unzip） 系统调查 用法 root@kitploit: $ python...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses langchain-text-splitters 0.3.9, flask 3.1.0, coreutils 8.32-39.el9 and libxml2 2.9.13-14.el98.1 which are vulnerable to PSIRT-GHSA-fv5p-p927-qmxr, CVE-2025-47278, CVE-2026-27205, CVE-2025-5278 and CVE-2025-6170. This bulletin contains information regarding the...

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon CVE-2020-1472, extracted NTLM hashes, gained SYSTEM shell, and established a Meterpreter session. Executive Summary This exercis...

CVE-2019-15107-Exploit

CVE-2019-15107 Python エクスプロイト このエクスプロイトは CVE-2019-15107 Webmin 1.890-1.920 を対象とした 認証不要の RCE であり、Python で実装されています。 使用方法 root@kitploit: python3 webminExploit.py python3 webminExploit.py 10.200.198.200 10000 whoami python3 webminExploit.py 10.200.198.200 10000 "curl -h"...

vamp-forticheck

vamp-forticheck Multi-Vendor Edge Device CVE Scanner — VampSecure Labs Overview vamp-forticheck is an asynchronous, non-destructive security scanner that detects CVE vulnerabilities across seven major network security vendors. It performs a structured three-phase analysis: 1. Passive detection —...

CVE-2025-46295-fix-fms

FileMaker Apache Commons JAR Replacer Overview The FileMaker Apache Commons JAR Replacer is an automation solution that addresses CVE-2025-46295 by replacing vulnerable Apache Commons JAR files in FileMaker Server installations. Instead of upgrading the entire FileMaker Server, this solution...

ghostcat

This tool exploits an LFI vulnerability within Apache Tomcat named CVE-2020-1938 to not only view sensitive files, but also to run malicious JSP payloads. It can be downloaded here you will need to run it from the command line Usage:...

stegseek

⚡ Stegseek Stegseek es un cracker de steghide extremadamente rápido que se puede usar para extraer datos ocultos de archivos. Está construido como un fork del proyecto steghide original y, como resultado, es miles de veces más rápido que otros crackers y puede recorrer la totalidad de rockyou.txt...