CVE-2018-8097-PoC

CVE-2018-8097 POC per CVE-2018-8097. Questo script sfrutta CVE-2018-8097 e può recuperare file e contenuti utilizzando un metodo RCE blind basato sul tempo. Utilizzo root@kitploit: python cve-2018-8097.py -h -u URL -c COMMAND -t TIME -id OBJECTID -d FILEPATH options: -h, --help show this help...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

DolibabyPhp

DolibabyPhp Ein authentifizierter RCE-Exploit für Dolibarr ERP/CRM CVE-2023-30253. Installation Du kannst das Paket entweder aus dem PyPi-Repository mit pip installieren oder den Quellcode direkt von GitHub mit git clone klonen. root@kitploit: pip install dolibabyphp Verwendung root@kitploit:...

Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

CVE-2021-29447-POC

CVE-2021-29447 Prova di Concetto Prova di concetto per CVE-2021-29447 scritta in Python. I dettagli sulla CVE sono disponibili su https://vulners.com/cve/CVE-2021-29447 Disclaimer Questo script è una PoC destinata esclusivamente a test di sicurezza etici autorizzati. Utilizzo root@kitploit: usage...

EUVD-2026-65217

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

CVE-2026-75574 Grav before 4.2.2 Remote Code Execution via Email Twig

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

CVE-2026-75574

CVE-2026-75574 is a remote code execution vulnerability in the Grav Email plugin (getgrav/grav-plugin-email) versions before 4.2.2 . The root cause is that page-editor-controlled Email action parameters are rendered as unsandboxed Twig templates . An authenticated remote user possessing only api....

CVE-2026-75574 Grav before 4.2.2 Remote Code Execution via Email Twig

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

Exploit for CVE-2026-32475

CVE-2026-32475 — Elementor Pro Unauthenticated Arbitrary File...

evtx-baseline

evtx-baseline Un repository che ospita esempi di log evtx goodware con installazioni di software campione e interazioni utente di base Donazioni win10-client.tgz di @phantinuss win11-client.tgz di @frack113 win7-x86.tgz di @pH-T win2022-evtx.tgz di @Neo23x0 win2022-ad.tgz di @frack113...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

Vmware-ESXI

CVE-2024-37085 upload di shell non autenticato fino a diventare amministratore completo su hypervisor esxi appartenenti a un dominio. Scarica ESXIVORTEX Dettagli: un bypass dell'autenticazione che porta all'upload di una shell nel contesto di vpxuser, consentendo di ottenere pieni permessi...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

CVE-2024-53345

CVE-2024-53345 Critical 0 Day in Car Rental Management System Versioni 1.0 - 1.3 Descrizione: Esiste una vulnerabilità critica nella funzionalità di caricamento file del modulo System Settings all'interno del Car Rental Management System versioni da 1.0 a 1.3, che consente a utenti con privilegi...

Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: Servizio HTTP non autenticato di ES File Explorer Un harness di ricerca implementato indipendentemente, attento alla sicurezza, e un'analisi tecnica per CVE-2019-6447 , un servizio HTTP non autenticato esposto da versioni vulnerabili di ES File Explorer per Android. Solo ricerca...

PT-2026-81882

Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the server is vulnerable to an unauthenticated denial of service in which a single malformed command crashes the entire process. Its wire protocol is line-based, and several command handlers slice or index the...