CVE-2026-5059-poc

Where is CVE-2026-5059 in the code? The vulnerability is in two files working together: File 1: tools.py — The Root Cause The old version used shell=True in executepipedcommand: python OLD VULNERABLE CODE process = subprocess.run command, ← raw string passed to shell shell=True, ← THIS is the...

CVE-2026-73570

CVE-2026-73570 PoC - Probador de Inyección de Comandos SMTP Un script personalizado de prueba de concepto PoC en Python de bajo nivel para probar vulnerabilidades de inyección de comandos SMTP CVE-2026-73570. Esta herramienta envía una dirección RCPT TO malformada que contiene sustitución de...

POC-CVE-2025-52970

POC-CVE-2025-52970 root@kitploit: python POC-CVE-2025-52970.py -h usage: POC-CVE-2025-52970.py -h -t TARGET | -l LIST options: -h, --help show this help message and exit -t, --target TARGET Single target URL e.g., https://xx.xx.xx.xx -l, --list LIST Path to file containing target URLs, one per li...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-84452

Windows ML CLI (a command-line tool for building AI models for Windows) is vulnerable to arbitrary code execution via a CORS misconfiguration on its localhost HTTP API. Prior to version 0.4.0 , the cli_api.py and app.py components expose WinML CLI commands on localhost without authentication and ...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-22679

CVE-2026-22679: Weaver E-cology RCE no autenticado vía Endpoint de Depuración dubboApi -critical TL;DR Weaver E-cology 10.0 anterior a la compilación 20260312 contiene una vulnerabilidad crítica de ejecución remota de código sin autenticación en el endpoint...

FortiSandbox-RCE-Exploit-CVE-2026-39808

Escáner RCE FortiSandbox — CVE-2026-39808 Inyección de comandos del sistema operativo sin autenticación como root en Fortinet FortiSandbox Vulnerabilidad • Instalación • Uso • Cómo funciona • Pipeline • Dorks de Shodan • Aviso legal Vulnerabilidad CVE-2026-39808 es una vulnerabilidad crítica de...

CVE-2026-44402

CVE-2026-44402 Ejecución remota de comandos completa preautenticada en Voltronic Power SNMP Web Pro 1.1 Contenido Proveedor afectado: https://voltronicpower.com/ Producto afectado: SNMP Web Pro 1.1 SNMP Web Pro 1.1 contiene una vulnerabilidad de ejecución remota de código no autenticada en el...

trufflehog v3.97.2

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

CVE-2026-32710

CVE-2026-32710 Heap buffer overflow in MariaDBJSONSCHEMAVALID → persistent privilege escalation → UDF RCE | ---|--- Affected| MariaDB 11.4.x confirmed on 11.4.9 Bug| OOB write in jsongetnormalizedstring — strncpy into 128-byte DYNAMICSTRING with no bounds check Impact| SELECT-only user → ALL...

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new initiative called the Fairwind Program. "The Fairwind Program gives high-priority defenders like governments,...

electroniz3r

electroniz3r 使用 electroniz3r 接管 macOS Electron 应用的 TCC 权限。该工具首次亮相于拉斯维加斯 DEFCON31 大会，在我的 ELECTRONizing macOS privacy - a new weapon in your red teaming armory 演讲中进行了展示。 概述 root@kitploit: $ electroniz3r OVERVIEW: macOS Red Teaming tool that allows code injection in Electron apps by Wojciech Reguła...

PyPsPipeJack

PyPsPipeJack Esta herramienta es la continuación de mi otra herramienta, OpenPsPipeJack. Esta versión está basada en Python y funciona en Linux utilizando principalmente Impacket. En resumen, si tienes administrador local en un host remoto, puedes conectarte a sesiones remotas de PowerShell en es...

cpanel-malware-cleaner-cve-2026

cPanel malware, CVE-2026-41940, virus removal 🚨 cPanel Malware Cleaner – CVE-2026-41940 Fix Tool A lightweight and powerful security tool to detect, remove, and prevent malware infections caused by recent cPanel vulnerabilities including CVE-2026-41940. 🔥 Features Detects and removes malware,...

cve-2025-55182

🛡️ React2Shell CTF 🚀 Welcome to React2Shell-CTF , a Dockerized environment designed to practice exploiting React2Shell CVE-2025-55182. React2Shell is a critical vulnerability affecting React-based applications. This repository provides a safe, locally deployable Capture The Flag CTF challenge to...

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

vsFTPd 2.3.4 Exploit Python Proof of Concept for the vsFTPd...

Malicious code in @stellarshift/abi-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebef764845634817dcc9905a146c3ba898707dcc9937ebfe0060a4f10852d27 On npm install, the package's postinstall hook resolves a URL that is stored as an XOR-encoded integer array in endpoint-registry.json self-labeled...

MAL-2026-15821 Malicious code in @stellarshift/abi-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebef764845634817dcc9905a146c3ba898707dcc9937ebfe0060a4f10852d27 On npm install, the package's postinstall hook resolves a URL that is stored as an XOR-encoded integer array in endpoint-registry.json self-labeled...