Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection

Ivanti Endpoint Manager Mobile EPMM versions 12.5.0.0 through 12.7.0.0 contain a code injection vulnerability that allows unauthenticated remote attackers to achieve arbitrary code execution on the target system. id: CVE-2026-1281 info: name: Ivanti EPMM =12.7.0.0 - Unauthenticated Code Injection...

Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code

Langflow = 1.2.x exposes POST /api/v1/validate/code without any authentication. The endpoint calls validatecode which execs user-supplied Python code. Default-argument expressions in Python execute at function-definition time, allowing arbitrary OS command execution without authentication. id:...

ruflo MCP Bridge - Unauthenticated RCE via terminal_execute

ruflo MCP bridge 3.16.3 in its default docker-compose deployment exposes POST /mcp with no authentication and binds to all interfaces 0.0.0.0:3001. The executeTool function has no server-side deny list for dangerous tools, allowing an unauthenticated attacker to invoke tools/call with...

Divi Form Builder <=5.1.8 - Unauthenticated Arbitrary File Upload RCE

The Divi Form Builder plugin for WordPress versions 5.1.8 and prior contains an unauthenticated arbitrary file upload vulnerability in the doimageupload AJAX handler. The user-controlled acceptFileTypes POST parameter is injected unsanitized into a PHP regex for file extension validation. By...

CVE-2023-23752

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated information disclosure To execute this script, we need to install few missing gems: root@kitploit: sudo gem install httpx sudo gem install docopt sudo gem install paint root@kitploit: ruby exploit.rb http://dev.devvortex.htb...

bbscope

bbscope.com Web interface and API for aggregating bug bounty program scopes from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Quick start Docker root@kitploit: cd website cp .env.example .env Edit .env — at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d --build...

CVE-2025-64155

CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution Proof of concept exploit for Fortinet FortiSIEM which abuses an argument injection to write a file to gain code execution as root Blog Post Deep-dive analysis here: Horizon3.ai - CVE-2025-64155: Three Years of Remotely...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

CVE-2023-49979

CVE-2023-49979 Best Student Management System v1.0 - Incorrect Access Control - Directory Listing Description : A directory listing vulnerability in Best Student Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring...

threatcl

threatcl Threat Modeling with HCL What happened to hcltm? hcltm has been renamed to threatcl. Welcome! Overview !TIP Want to read the new documentation? Head over to threatcl.dev There are many different ways in which a threat model can be documented. From a simple text file, to more in-depth wor...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Privilege Escalation Perl version of CVE-2013-1775 Apple Mac OSX 10.8.4 - Privelege Escalation exploit. References: https://www.exploit-db.com/exploits/27965/...

CVE-2024-4577-Nuclei-Template

CVE-2024-4577 Nuclei Template This repository contains a Nuclei template to detect the PHP CGI Argument Injection vulnerability identified as CVE-2024-4577. Template Details root@kitploit: id: CVE-2024-4577 info: name: CVE-2024-4577 PHP CGI Argument Injection author: Hüseyin TINTAŞ severity:...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

CVE-2015-8299

knAx20150101 Title: Remote code execution vulnerability in the KNX management software ETS Category/Abstract: Buffer overflow vulnerability Product: ETS Engineering Tool Software Affected versions: ETS 4.1.5 Build 3246 no other versions tested Fixed in version: unknown Vendor: KNX Association...

CVE-2021-38647-POC-and-Demo-environment

Details OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, formerly known as NanoWBEM is an open source Common Interface Model CMI management server by Microsoft and The Open Group. OMI is a software agent found on most of Azure's Linux VMs, yet many do not know of it's presence. On...

CVE-2024-23700-C2-Server

CVE-2024-23700 - C2 Server: Command and Control and Data Collection Server This project illustrates the design and construction of a Command & Control C2 server used for the experimental exploitation scenario of the privilege escalation vulnerability CVE-2024-23700. This server is responsible for...

sherloq

An open source digital image forensic toolset Introduction "Forensic Image Analysis is the application of image science and domain expertise to interpret the content of an image and/or the image itself in legal matters. Major subdisciplines of Forensic Image Analysis with law enforcement...

CVE-2021-24145

CVE-2021-24145 WordPress File Upload Vulnerability, Modern Events Calendar Lite WordPress plugin before 5.16.5 https://nvd.nist.gov/vuln/detail/CVE-2021-24145 Installation and Execution Steps 1. WordPress Installation When proceeding with installation, please perform port forwarding in the...

CVE-2023-2732

CVE-2023-2732 MStore API = 3.9.2 - Authentication Bypass https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/mstore-api/mstore-api-392-authentication-bypass Description root@kitploit: The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to...

CVE-2018-2628

CVE-2018-2628 WebLogic Deserialization Vulnerability Reproduction weblogic getshell python CVE-2018-2628-Getshell.py ip port shell1.jsp root@kitploit: C:\Users\CTF\Desktoppython CVE-2018-2628-Getshell.py 10.10.20.166 7001 jason1.jsp / \ \ / / | | \ / / |/ \ | \ / /| \ / \ | | \ \ / /| | | | | || ...