329966 matches found
CVE-2026-76175
SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...
CVE-2026-76175 Multiple vulnerabilities in Ocsreports for OCS Inventory NG
SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...
CVE-2026-76175 Multiple vulnerabilities in Ocsreports for OCS Inventory NG
SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...
ralph
Ralph Ralph Wiggum 自主循环技术在 Claude Code 中的一个可用实现。 背景 Anthropic 插件市场中的官方 ralph-wiggum 插件目前因 Claude Code v1.0.20（2025 年 8 月）的安全更新而无法正常工作。 该安全补丁（CVE-2025-54795）正确阻止了 $ 命令替换和多行 bash 命令，以防止命令注入攻击。然而，官方插件的命令文件包含多行 bash，从而触发此保护： root@kitploit: Error: Bash command permission check failed for pattern "..."...
sql-injection-poc
SQL Injection PoC – gptcdharmapurico.in 🚨 LEGAL DISCLAIME...
secure-by-default-rce-demo
Node.js RCE 缓解：DevOps 作为最后一道防线 本项目演示了 Next.js 应用程序（特别是通过服务器操作）中的一个严重远程代码执行 RCE 漏洞，以及基础设施加固 如何在代码漏洞仍然存在的情况下有效阻止攻击。 它对比了使用Distroless 镜像和只读文件系统 的标准“不安全”部署与强化后的“安全”部署。 🛡️ 概念：深度防御 软件漏洞不可避免。当代码失效时，你的基础设施必须阻止攻击者扩大立足点。 漏洞 Next.js 使用的 React 服务器组件 RSC 实现中存在一个严重 RCE 漏洞（CVE-2025-55182，又名 React2Shell） 。 CVSS...
CVE-2026-3852 Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode Parameter
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skypeurl shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: 1 the skypeurl field is not included in the $urloptions...
CVE-2026-3852 Divi <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Media Follow 'skype_url' Shortcode Parameter
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the skypeurl shortcode attribute of the Social Media Follow module in all versions up to, and including, 4.27.6. This is due to a three-part sanitization failure: 1 the skypeurl field is not included in the $urloptions...
rustdllproxy
rustdllproxy 一个 Rust crate 工具，用于轻松生成和开发 Windows 应用程序的代理 DLL。 安装 root@kitploit: cargo install rustdllproxy 兼容性 该 crate 目前仅支持标准 DLL PE 格式。 当前限制 使用自定义代码对函数进行 Hook 时，必须知道函数签名 可以使用反汇编器和逆向工程工具（如 Ghidra）来获取。 命令 Rustdllproxy 附带两个子命令： 命令| 用途 ---|--- rustdllproxy new| 根据一个或多个现有 DLL 生成一个新的代理 cdylib crate。...
skyvern v1.0.52
🐉 Automate Browser-based workflows using LLMs and Computer Vision 🐉 Skyvern automates browser-based workflows using LLMs and computer vision. It provides a Playwright-compatible SDK that adds AI functionality on top of playwright, as well as a no-code workflow builder to help both technical and...
LinusWare-Source-Code-Internal
Linusware 1.2 — Arquitectura del Código Fuente y del Motor Reconstruido, Ingeenería Inversa y Documentado por tekkenbugatti Plataforma objetivo: Linux x8664 / Luau / Motor de ejecución de Roblox Descripción general Linusware 1.2 es una extensión de runtime nativa para Linux x8664 y un motor de...
homelab-CVE-2021-44228
Homelab: Log4Shell CVE-2021-44228 on Apache Solr Controlled Docker environment to reproduce and study the Log4Shell vulnerability in Apache Solr. The Environment Target solr-lab: Apache Solr v8.11.0 vulhub/solr:8.11.0 running a vulnerable version of Log4j. Attacker kali-lab: Basic Kali Linux...
Bypass_AV
这是一个能绕过绝大部分杀软、沙箱的木马样本 下面我会对木马所涉及的技术进行阐述我会针对shellcode和加载器两方面解释 加载器部分 1.反沙箱 众说周知反沙箱的检测常规就是针对主机的cpu、内存、硬盘等操作，但是我个人认为这样不妥因为一些杀软或云沙箱会检测反沙箱功能，会对一些敏感api进行监控从而被抓包，所以我的思路是对桌面的快捷方式检测比如qq、微信、钉钉这些常规使用的软件进行检测逃避云沙箱。 2.ntdll的重载和api的动态调用...
CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ
InSAT MasterSCADA BUK-TS - 未认证 RCE CVE-2026-22553 | CVSS 9.8 严重 | 漏洞利用作者 Mohammed Idrees Banyamer 📝 描述 InSAT MasterSCADA BUK-TS 在 MMadmServ Web 界面中存在一个未认证的 OS 命令注入 漏洞。该缺陷允许远程攻击者在无需任何身份认证的情况下实现完全远程代码执行（RCE） 。 受影响产品 ：InSAT MasterSCADA BUK-TS（所有版本） 漏洞类型 ：OS 命令注入（CWE-78） 严重性 ：严重（CVSS v3.1 评分：9.8）...
CVE-2026-54088-poc
CVE-2026-54088: 认证钩子的Shell替换导致命令注入（预认证RCE） English version 概要 此仓库是 File Browser 版本 = 2.63.5 中存在的一个严重OS命令注入漏洞 CVE-2026-54088 的 Proof of Concept PoC。 该漏洞存在于 Hook Authentication 功能中。当管理员配置 File Browser 使用外部命令进行用户认证时，登录时提交的 username 和 password 会被未经转义地通过 os.Expand 展开到已配置的命令字符串中。未认证的远程攻击者可以通过登录请求注入 She...
CVE-2026-2573
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) via the postBodyCss parameter in all versions up to and including 2.4.4 . The root cause is insufficient input sanitization and output escapin...
EUVD-2026-70316
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This mak...
CVE-2026-2573 GutenKit <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss'
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This mak...
CVE-2026-2573 GutenKit <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss'
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This mak...