306360 matches found
CVE-2026-82853
Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed (CRLF) characters, enabling attackers with elev...
CVE-2026-82853 Nodemailer before 8.0.5 SMTP Command Injection via CRLF
Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject...
OPENSUSE-SU-2026:20660-1 Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 147.0.7727.137 boo1263158 CVE-2026-7363: Use after free in Canvas CVE-2026-7361: Use after free in iOS CVE-2026-7344: Use after free in Accessibility CVE-2026-7343: Use after free in Views CVE-2026-7333: Use afte...
cve-2026-29923
CVE-2026-29923 тАФ pstrip64.sys Local Privilege Escalation A minimal proof-of-concept for CVE-2026-29923, a vulnerability in the pstrip64.sys kernel driver EnTech Taiwan PowerStrip тЙд 3.90.736 that allows an unprivileged user-mode process to escalate to NT AUTHORITY\SYSTEM. The Bug pstrip64.sys...
CVE-2025-55182-in-go
CVE-2025-55182 тАФ React Server Components RCE Exploit for RCE in React Server Components via prototype pollution. Usage root@kitploit: go run main.go -t -c Examples root@kitploit: go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.go -t...
CVE-2026-48030
CVE-2026-48030 тАФ OS Command Injection in Pheditor Overview...
CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-
CVE-2026-6666 тАУ ┘З╪м┘И┘Е ╪е┘Д╪║╪з╪б ╪к╪│┘Д╪│┘Д NSKeyedUnarchiver ┘Б┘К ╪о╪п┘Е╪й XPC ┘Е╪н╪з┘Г╪з╪й macOS/iOS ┘Г┘И╪п ╪з┘Д╪и╪▒┘Ж╪з┘Е╪м ┘Е╪н╪з┘Г╪з╪й Python root@kitploit: !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess, socketserver, struct Mach message...
wifit3 v0.0.5
wifit3: USB Wireless Auditor A wireless auditor that runs on Linux and Windows, comes with its own built-in drivers. At least one of the supported USB adapters is required. wifit3 is fundamentally different from its predecessor, wifite2: Only supports certain popular USB cards see Supported...
CVE-2026-76071
CVE-2026-76071: ╪к╪м╪з┘И╪▓ ╪│╪╣╪й ┘Е╪о╪▓┘Ж ┘Е╪д┘В╪к ┘Е┘Г╪п╪│┘К ╪║┘К╪▒ ┘Е┘П╪╡╪з╪п┘О┘В ╪╣┘Д┘К┘З ┘В╪и┘Д ╪з┘Д┘Е╪╡╪з╪п┘В╪й ╪╣╪и╪▒ sscanf %^, ┘Б┘К ┘Е╪╣╪з┘Д╪м ipFilterList ┘Б┘К skkset.cgi ┘Б┘К Netis NC63 ╪з┘Д╪и╪з╪н╪л: ╪г┘И╪▓╪м╪з┘Ж ╪е╪▒╪│╪з┘Ж @ozcanpng ╪н╪з┘Д╪й ╪з┘Д╪е┘Б╪╡╪з╪н CVE: CVE-2026-76071 ╪з┘Д╪и╪з╪ж╪╣: Netis Systems Co., Ltd. ╪з┘Д┘Е┘Ж╪к╪м: ╪▒╪з┘И╪к╪▒ Netis NC63 AC1200 ╪з┘Д┘Д╪з╪│┘Д┘Г┘К ╪л┘Ж╪з╪ж┘К ╪з┘Д┘Ж╪╖╪з┘В ╪м┘К╪м╪з╪и╪к...
cc.py
cc.py ╪з╪│╪к╪о╪▒╪з╪м ╪▒┘И╪з╪и╪╖ ┘З╪п┘Б ┘Е╪╣┘К┘Ж ╪и┘Ж╪з╪б┘Л ╪╣┘Д┘Й ┘Ж╪к╪з╪ж╪м "commoncrawl.org". ╪к┘Е ╪з┘Д╪к╪н╪п┘К╪л ╪е┘Д┘Й ╪з┘Д╪е╪╡╪п╪з╪▒ v.0.3 | ┘Е╪з ╪з┘Д╪м╪п┘К╪п: ╪к┘Ж┘Б┘К╪░ ╪г╪│╪▒╪╣ ╪и┘Ж╪│╪и╪й 65% ╪к╪н╪п┘К╪п ╪│┘Ж╪й ╪╣╪и╪▒ -y/--year╪М ┘Е╪л╪з┘Д: -y 2018 ╪к╪н╪п┘К╪п ┘Е┘Д┘Б ╪е╪о╪▒╪з╪м ╪╣╪и╪▒ -o/--out╪М ┘Е╪л╪з┘Д: -o whatever.txt ╪з┘Д╪▓╪н┘Б ╪е┘Д┘Й ╪м┘Е┘К╪╣ ╪з┘Д╪╡┘Б╪н╪з╪к ┘Д┘Б┘З╪▒╪│ ┘Е╪н╪п╪п ╪╣╪и╪▒ -i/--index╪М ┘Е╪л╪з┘Д: cc.py army.mil -i...
libsrtp
Introduction to libSRTP This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel. The SRTP API is documented in include/srtp.h, and the library is in libsrtp2.a after compilation. This...
GoogleRecaptchaBypass тАФ Updated!
Google Recaptcha Solver We love bots тЭдя╕П, but Google doesn't. So, here is the solution to bypass Google reCAPTCHA. Solve Google reCAPTCHA less than 5 seconds! ЁЯЪА This is a Python script to solve Google reCAPTCHA using the DrissionPage library. Selenium implementation will be added soon. Recent...
HTB-Reactor-Linux-Machine-Walkthrough
HTB: Reactor !CAUTION Spoiler warning. This is a full walkthrough including flags. If you want to solve the machine yourself, close this now and come back when you're stuck. Machine Info Field| Details ---|--- Name| Reactor OS| Ubuntu 24.04 LTS Noble Difficulty| Medium CVE| CVE-2025-55182 CVSS 10...
libunwind_CVE-2015-3239
-- mode: Outline - - ┘З╪░┘З ┘З┘К ╪з┘Д╪е╪╡╪п╪з╪▒╪й 1.0 ┘Е┘Ж ┘Е┘Г╪к╪и╪й unwind. ╪к╪п╪╣┘Е ┘З╪░┘З ╪з┘Д┘Е┘Г╪к╪и╪й ╪╣╪п╪й ┘Е╪м┘Е┘И╪╣╪з╪к ┘Е┘Ж ╪з┘Д┘Е╪╣┘Е╪з╪▒┘К╪з╪к/╪г┘Ж╪╕┘Е╪й ╪з┘Д╪к╪┤╪║┘К┘Д: Linux/x86-64: ╪к╪╣┘Е┘Д ╪и╪┤┘Г┘Д ╪м┘К╪п. Linux/x86: ╪к╪╣┘Е┘Д ╪и╪┤┘Г┘Д ╪м┘К╪п. Linux/ARM: ╪к╪╣┘Е┘Д ╪и╪┤┘Г┘Д ╪м┘К╪п. Linux/IA-64: ╪к┘Е ╪з╪о╪к╪и╪з╪▒┘З╪з ┘И╪п╪╣┘Е┘З╪з ╪и╪з┘Д┘Г╪з┘Е┘Д. Linux/PARISC: ╪к╪╣┘Е┘Д ╪и╪┤┘Г┘Д ╪м┘К╪п╪М ┘Д┘Г┘Ж ┘Е┘Г╪к╪и╪й C ╪к┘Б╪к┘В╪▒ ╪е┘Д┘Й...
CVE-2026-5027-Langflow
CVE-2026-5027 рдФрд░ CVE-2026-10520 CVE-2026-25089 рд╢реЛрд╖рдг рдЙрдкрдХрд░рдг: рдХреНрд▓реЛрди рдХрд░реЗрдВ root@kitploit: git clone https://github.com/Layer-6/CVE-2026-5027-Langflow.git cd CVE-2026-5027-Langflow рдЙрдкрдпреЛрдЧ exploit.py рдлрд╝рд╛рдЗрд▓ рд╕реНрд╡рдЪрд╛рд▓рд┐рдд рдкрд░реАрдХреНрд╖рдг рдФрд░ рд╢реЛрд╖рдгред root@kitploit: python3 exploit.py -u https://target.com CLI рдХрд╕реНрдЯрдо рд╕реЗрдЯрд┐рдВрдЧреН...
CVE-2022-25765-exploit
CVE-2022-25765 тАФ Command Injection in pdfkit Description CVE-2022-25765 is a command injection vulnerability affecting pdfkit Ruby gem in versions 0.8.7.2. The vulnerability has a CRITICAL severity with CVSS 9.8, as it allows remote command execution without authentication. The problem lies in th...
CVE-2019-0211-exploit
CVE-2019-0211 тАФ Apache HTTP Server Local Privilege Escalation CARPE DIEM Description CVE-2019-0211 is a local privilege escalation vulnerability affecting Apache HTTP Server between versions 2.4.17 and 2.4.38 using modprefork and modphp or PHP-FPM. The vulnerability allows an attacker with a shel...
nightcrawler тАФ Updated!
Nightcrawler An autonomous penetration testing agent that runs entirely on a smartphone. Drop the phone on a network, walk away, and it discovers hosts, maps services, finds vulnerabilities, and generates a pentest report тАФ all without cloud connectivity. root@kitploit: тЦСтЦИтЦДтЦСтЦИ тЦИ тЦИтЦАтЦА тЦИтЦСтЦИ тЦАтЦИтЦА тЦИтЦАтЦА тЦИтЦА...
redis-cve-2025-62507
рдПрдХреНрд╕рдкреНрд▓реЙрдЗрдЯ рд╕реНрдХреНрд░рд┐рдкреНрдЯреНрд╕ тАФ CVE-2025-62507 рдирд┐рд░реНрджреЗрд╢рд┐рдХрд╛ рд╕рдВрд░рдЪрдирд╛ root@kitploit: scripts/ тФЬтФАтФА exploitx86.py x86-64 ROP рдПрдХреНрд╕рдкреНрд▓реЙрдЗрдЯ тФЬтФАтФА exploitarm64.py ARM64 AArch64 ROP рдПрдХреНрд╕рдкреНрд▓реЙрдЗрдЯ тФФтФАтФА gdbwithsymbols.sh GDB рдбреАрдмрдЧ рд╕рд╣рд╛рдпрдХ рд╕реНрдХреНрд░рд┐рдкреНрдЯ рдХрдордЬреЛрд░реА рд╕рд╛рд░рд╛рдВрд╢ рдЖрдЗрдЯрдо| рд╡рд┐рд╡рд░рдг ---|--- CVE| CVE-2025-62507 рдХрдордЬреЛрд░реА рдкреНрд░рдХрд╛рд░| рд╕реНрдЯреИрдХ рдмрдлрд░...
CVE-2026-31431-C
copy-fail CVE-2026-31431 Copy Fail C рднрд╛рд╖рд╛ PoC, рддрд╛рд░реНрдХрд┐рдХ рд░реВрдк рд╕реЗ theori-io/copy-fail-CVE-2026-31431 рдореВрд▓ Python exploit рдХреЗ рд╕рд╛рде рд╕рдВрд░реЗрдЦрд┐рддред рдХреЗрд╡рд▓ рдЕрдзрд┐рдХреГрдд рд╕реБрд░рдХреНрд╖рд╛ рдЕрдиреБрд╕рдВрдзрд╛рди рдФрд░ рдкреНрд░рдпреЛрдЧрд╢рд╛рд▓рд╛ рд╡рд╛рддрд╛рд╡рд░рдг рдХреЗ рд▓рд┐рдПред рдЕрдирдзрд┐рдХреГрдд рдкреНрд░рдгрд╛рд▓рд┐рдпреЛрдВ рдкрд░ рдЙрдкрдпреЛрдЧ рдкреНрд░рддрд┐рдмрдВрдзрд┐рддред рд╕рд┐рджреНрдзрд╛рдВрдд рдХрд╛ рд╕рдВрдХреНрд╖рд┐рдкреНрдд рд╡рд┐рд╡рд░рдг Linux AFALG рдореЗрдВ...