CVE-2026-88013

A flaw was found in rclone. The HTTP backend in rclone can forward custom or authentication headers, such as API keys, Authorization, or Cookie headers, when following redirects to a different host. This can lead to the disclosure of sensitive information to untrusted destinations. Additionally, ...

CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x Under discussion and analysis... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ An attacker who has write access to the KeePass configuration file can modify it and inject malicious...

scscanner_sh

scscanner - Massive Status Code Scanner scscanner is tool to read website status code response from the lists. This tool have ability to filter only spesific status code, and save the result to a file. Feature Slight dependency. This tool only need curl to be installed Multi-processing. Scanning...

wpgarlic

wpgarlic A proof-of-concept WordPress plugin fuzzer that led to the discovery of more than 300 vulnerabilities in WordPress plugins installed on almost 30 million sites. The used technique is described in https://kazet.cc/2022/02/03/fuzzing-wordpress-plugins.html If you want to continue the...

OpenSSL_1.0.1g_After

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

vuke

vuke 脆弱なBitcoin鍵生成の分析と再現のための研究ツールです。 特徴 モジュールアーキテクチャ - プラグイン可能なソースと変換 複数の入力ソース 数値範囲（弱いシードのテスト） ワードリスト（ブレインウォレット解析） タイムスタンプ（時間ベースのPRNG悪用） 標準入力ストリーム（パイプライン統合） 歴史的脆弱性変換 直接（生バイトを鍵として） SHA256（古典的ブレインウォレット） ダブルSHA256（Bitcoinスタイルのハッシュ） MD5（レガシーな弱いハッシュ） SHA256チェーン（反復/インデックス指定による決定論的導出） Milksad（MT19937...

CVE-2022-31814

pfBlockerNG = 2.1.426 Unauth RCE This script is a proof-of-concept exploit for pfBlockerNG = 2.1.426 that allows for remote code execution. It takes a single target URL or a list of URLs, uploads a shell, executes a command, and then deletes the shell. Requirements This script requires Python 3.x...

BridgeKeeper

BridgeKeeper Scrape employee names from search engine LinkedIn profiles Hunt for emails and username formats via Hunter.io Transform names to given username formats Usage root@kitploit: usage: bridgekeeper.py flags BridgeKeeper - v1.0.0 options: -h, --help show this help message and exit Targets:...

frp

frp README | 中文文档 赞助商 frp 是一个开源项目，其持续开发完全由我们出色的赞助商的支持所推动。如果您想加入他们，请考虑赞助 frp 的开发。 金牌赞助商 为专业 Go 开发者打造的完整 IDE 让您掌控一切的自主云 一个开源、自托管的公有云替代方案，专为数据所有权和隐私而构建 Recall.ai - 会议录制 API 如果您正在寻找会议录制 API，请考虑查看 Recall.ai， 这是一个可录制 Zoom、Google Meet、Microsoft Teams、线下会议等的 API。 frp 是什么？ frp 是一个快速反向代理，允许您将位于 NAT...

poc-CVE-2026-23489

POC CVE-2026-23489 Proof of concept for CVE-2026-23489 GLPI "Fields" plugin --cookie-value COOKIEVALUE GLPI session cookie value --php PHP Raw PHP to execute on the server end statements with ';', Dropdowns...

cve-2017-10271-poc

CVE-2017-10271 POC Introduction This is an autotest poc for CVE-2017-10271. Having been tested on CentOS 7 and Windows 7/10. Building This project is written in rust language. You need to install rust environment from https://www.rust-lang.org/ first and then build the project with the following...

ysoserial.net

安全でない .NET オブジェクトのデシリアライズを悪用するペイロードを生成するための概念実証ツールです。 説明 ysoserial.net は、一般的な .NET ライブラリで発見されたユーティリティとプロパティ指向プログラミングの「ガジェットチェーン」のコレクションであり、適切な条件下でオブジェクトの安全でないデシリアライズを行う .NET アプリケーションを悪用することができます。メインドライバプログラムは、ユーザー指定のコマンドを受け取り、それをユーザー指定のガジェットチェーンでラップし、これらのオブジェクトを stdout...

POC-CVE-2021-41773

POC-CVE-2021-41773 On the 5th of October 2021, a CVE detailing a path traversal attack on Apache HTTP Server v2.4.49 was released. Assigned the number CVE-2021-41773, it was released with the following description: A flaw was found in a change made to path normalization in Apache HTTP Server...

CISA Malcolm

RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...

CVE-2018-14772

CVE-2018-14772 info This is a PoC Remote Code Execution exploit for CVE-2018-14772, a vulnerability that I discovered in the pydio file sharing platform. It requires pydio application administrator credentials to work. You can run the exploit like so: usage root@kitploit: $ python exploit.py -h...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 是 Cacti（一款网络监控与管理软件）中发现的一个安全漏洞。该漏洞允许攻击者发送特制的 HTTP 请求，在无需认证的情况下远程利用系统。利用此漏洞，攻击者可以在目标系统上执行任意系统命令。这带来了重大风险，使得未经授权的个人能够控制受影响系统，并可能以高权限实施恶意活动。该漏洞位于 remoteagent.php 中。解决方案是升级到 Cacti 1.2.23、1.3.0 或更高版本。...

x-stream__xstream_CVE-2021-21345_1-4-15

master: v-1.4.x: XStream Java to XML Serialization, and back again Binaries All binary artifacts are bundled in the -bin archive. It includes the XStream jars and any other library used at build time, or optional runtime extras. Xpp3 is recommend for use as it will greatly improve the performance...

BIT-TOMCAT-2026-73180 Apache Tomcat: Authenticated WebSocket session survives end of HTTP session

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta...

BIT-TOMCAT-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were EOL at...

BIT-TOMCAT-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, fr...