CVE-2026-29909-MRCMS-vulnerability

CVE-2026-29909: MRCMS V3.1.2 - Unauthenticated Directory Enumeration CVE ID CVE-2026-29909 Description MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input...

reconness

Aplicación Web de ReconNess ¿Por qué ReconNess? Bueno, hemos visto a muchos hackers de bugbounty organizando su recon usando archivos txt y haciendo muchos scripts bash para filtrar la salida y mantener todo organizado con la intención de centrarse solo en los objetivos potencialmente vulnerables...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

git-vuln-finder

git-vuln-finder Encontrando posibles vulnerabilidades de software a partir de mensajes de confirmación de git. El formato de salida es un JSON con la confirmación asociada que podría contener una corrección relacionada con una vulnerabilidad de software. La búsqueda se basa en un conjunto de...

fuzzowski

Fuzzowski root@kitploit: █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski Network Fuzzer █ █ █ █ 🄯 Fuzzers, inc. ██ ██ by Mario Rivas The idea is to be the Network Protocol Fuzzer that we will want to use. The aim of this tool is to assist during t...

CVE-2026-40175-poc

CVE-2026-40175 — Axios CRLF Injection / HTTP Request Smuggling PoC Overview A CRLF injection vulnerability caused by AxiosHeaders.set in the Axios HTTP client =1.0.0 1.15.0, 0.31.0 failing to validate \r\n within header values. An attacker can chain this with Prototype Pollution lodash, qs, etc. ...

CVE-2026-23980-Exploit

CVE-2026-23980 - Apache Superset Authenticated SQL Injection root@kitploit: / \ | | | | | || | \\ sqlExpression goes straight to the query. no parameterization. no hope. Apache Superset ChartDataRestApi.data - QueryContext.getdfpayload - SqlaTable.getsqlaquery - adhoc column sqlExpression /...

iVANTI-CVE-2021-38560

iVANTI-CVE-2021-38560 Ivanti Service Manager 2021.1 infected with reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx. Vulnerability Type: Cross Site Scripting XSS Vendor of Product: IVANTI Affected Product Versions: Service Manager - =...

pyrexecd

PyRexecd PyRexecd es un servidor SSH independiente para Windows. Características: Aplicación Win32 independiente no un servicio que reside en la bandeja del sistema. Soporta un solo usuario / autenticación solo con clave pública. Notifica conexiones entrantes mediante ventana emergente...

pyrexecd

PyRexecd PyRexecd is a standalone SSH server for Windows. Features: Standalone Win32 app not a service that resides in SysTray. Supports a single user / pubkey auth only. Notifies incoming connections via popup. Sends/Receives the clipboard text via stdin/stdout. PyPI Project page:...

Searpy

🥀 Searpy 🔧 Herramienta de búsqueda por lotes, útil para recopilación y trazabilidad Compatible con py2 y py3 1. Instalación root@kitploit: git clone https://github.com/j3ers3/Searpy pip install -r requirements.txt 配置API及账号 ./config.py python Searpy -h 2. Ayuda root@kitploit: Searpy Engine Tookit...

CVE-2021-46005

CVE-2021-46005 All Details about CVE-2021-46005 Software: Online Car Rental System 1.0 Software Link: https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html Vulnerability Type: Stored Cross Site Scripting Affected Component: vehicalorcview in post-avehical page Impac...

CVE-2021-43789

CVE-2021-43789 Prestashop = 1.7.5.0 1.7.8.2 - SQL injection POC root@kitploit: GET /prestashop1.7.8.1/admin860ykaqhn/index.php/sell/orders/?token=tPhFxoTyY8HLoCWbfVDKdY8Io1BVL3ZVebYNljeM9M&orderorderBy=idorder&ordersortOrder= AND SELECT 2331 FROMSELECT COUNT,CONCAT0,MIDIFNULLCASTCURRENTUSER AS...

CVE-2024-12856

CVE-2024-12856 This is an exploit for Four-Faith router models F3x24 and F3x36 to get a reverse shell. "The Four-Faith router models F3x24 and F3x36 are affected by an operating system OS command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to...

CVE-2026-21962_Java_GUI_Exploit_Tool

CVE-2026-21962 Java GUI Exploit Tool Java GUI version of the Oracle WebLogic Server Proxy Plug-In RCE Remote Code Execution vulnerability exploitation tool. Project Structure root@kitploit: java-version/ ├── pom.xml Maven project configuration file ├── README.md Project documentation ├── run.bat...

CVE-2026-22738-POC

CVE-2026-22738 — SpEL Injection RCE in Spring AI SimpleVectorStore Unauthenticated remote code execution via Spring Expression Language SpEL injection in SimpleVectorStore.similaritySearch. Affected Versions | Flag | Default | Description | |---|---|---| | --target | http://localhost:8082 | Base...

CVE-2025-55315-detection-playground

Here are some tests that can be performed against these services to observe different behavior on GET/POST routes between the patched and unpatched versions of Kestrel. GET against unpatched sends 200 and socket remains open root@kitploit: printf 'GET / HTTP/1.1\r\nHost:...

VHostScan

VHostScan Un escáner de hosts virtuales que puede usarse con herramientas de pivote, detectar escenarios de catch-all, alias y páginas predeterminadas dinámicas. Presentado por primera vez en SecTalks BNE en septiembre de 2017 presentación. Esta es una versión mejorada del VHostScan original...

CVE-2026-41940

CVE-2026-41940 — WHM/cPanel Authentication Bypass Research Tool This repository contains a Proof-of-Concept PoC script based on the authentication bypass chain for cPanel/WHM via the whostmgrsession cookie and HTTP headers. After a successful compromise, the script changes the root password and...

CVE-2023-6567-poc

CVE-2023-6567-poc Time-based SQLi Description The plugin does not properly sanitise and escape the orderby parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users 1. Vulnerable GET request:...