2450156 matches found
CVE-2025-30921
CVE-2025-30921 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Newsletters Vulnerable version = 4.9.9.7 Component slug newsletters-lite Component link https://wordpress.org/plugins/newsletters-lite/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3: Injection Vulnerability type...
CVE-2025-25014
POC for CVE-2025-25014 A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints. Currently this POC only detects vulnerable instances. Usage root@kitploit: python CVE-2025-25014.py -u username -p password...
Vegile
Vegile - Ghost In The Shell Vegile is a tool for Post exploitation Techniques in linux. Post Exploitation techniques will ensure that we maintain some level of access and can potentially lead to deeper footholds into our targets trusted network. Donate If this project is very helpful to your...
CVE-2023-23488-pmpro-2.8
Dockerizing a Vulnerability: CVE-2023-23488 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Paid Memberships Pro v2.9.8 WordPress Plugin -...
CVE-2022-40684
CVE-2022-40684 by 1vere$k For now it's a POC copy for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Coppied from https://github.com/horizon3ai/CVE-2022-40684 Analysis The exploit uses the simple payload: root@kitploit: PUT /api/v2/cmdb/system/admin/admi...
CVE-2025-52688
CVE-2025-52688 Affected Products Alcatel AP13161 - Enterprise WIFI access point Summary There are 2 main vulnerabilities being addressed here: Lack of input sanization on multiple JSON web parameters that allows malicious characters such as ; to be injected to caused a command injection attack La...
fscan
Fscan English 内网综合扫描工具，一键自动化漏扫。 版本 : 2.2.1 功能特性 扫描能力 主机发现 - ICMP/Ping存活探测，支持大网段B/C段存活统计 端口扫描 - TCP全连接扫描，内置133个常用端口，支持端口组web/db/service/all 服务识别 - 智能协议识别，支持20+种服务指纹匹配 Web探测 - 网站标题、CMS指纹、Web中间件、WAF/CDN识别40+指纹 爆破能力 弱密码爆破 - 28种服务爆破SSH/RDP/SMB/FTP/MySQL/MSSQL/Oracle/Redis等 Hash碰撞 - 支持NTLM...
BDFProxy
New version of BDFProxy is out! Only to sponsors! Get access here: https://github.com/sponsors/secretsquirrel BLOG: http://secureallthethings.blogspot.com/2017/08/closing-door-end-of-backdoor-factory.html The Backdoor Factory Proxy BDFProxy v0.3.8 For security professionals and researchers only...
bincat
简介 什么是 BinCAT？ BinCAT 是一个 静态 二进制代码分析工具包，旨在帮助逆向工程师，可直接在 IDA 中使用或通过 Python 实现自动化。 其功能包括： 值分析（寄存器和内存） 污点分析 类型重建与传播 反向分析与前向分析 释放后使用与双重释放检测 实际演示 您可以在此查看（旧版）BinCAT 的实际运行效果： 基础分析 使用数据污点分析 请查阅教程了解对应的操作任务。 常见问题快速解答 支持的主机平台： IDA 插件：全部，版本 7.4 或更高 （仅支持 Python 3） 分析器（本地或远程）：Linux、Windows、macOS（可能支持） 目前支持分析的...
packetsifterTool
PacketSifter ¿Qué es PacketSifter? PacketSifter es una herramienta para realizar procesamiento por lotes de datos PCAP y descubrir posibles IOCs. Simplemente inicializa PacketSifter con tus integraciones deseadas VirusTotal, AbuseIPDB y pásale un pcap junto con los interruptores deseados, y...
CVE-2025-53770
SharePoint ToolPane RCE Exploit Security research toolkit for testing SharePoint ToolPane vulnerabilities Overview • Features • Getting started • Usage • Project structure This repository contains proof-of-concept exploits and analysis tools for the SharePoint ToolPane vulnerability CVE-2025-5377...
donut
Versión actual: v1.1 Índice de contenidos 1. Introducción 2. Cómo funciona 3. Compilación 4. Uso 5. Subproyectos 6. Desarrollo con Donut 7. Preguntas y discusiones 8. Aviso legal 1. Introducción Donut es un código independiente de la posición que permite la ejecución en memoria de archivos...
harbor
Team Introduction Chongqing Jiugongge Security Team is committed to sharing open-source security tools, with research directions covering red-blue confrontation, Web security, mobile security, security development, enterprise security construction, IoT/Industrial Control Security/AI/Quantum...
nmap-log4shell
Nmap Log4Shell NSE script for discovery Apache Log4j RCE CVE-2021-44228 nmap-log4shell is a NSE script for discovery Apache Log4j RCE CVE-2021-44228 vulnerability across the network. The script is able to inject the log4shell exploit payload via HTTP Headers default or via TCP/UDP socket...
CGA-39R2-MQ5G-3J93
Bulletin has no description...
CGA-Q2JW-V9JQ-GJ9V
Bulletin has no description...
CGA-6JM7-8GR4-97J7
Bulletin has no description...
CGA-3J3P-QC7P-C49G
Bulletin has no description...
vuln-bank-mobile
💳 Vulnerable Bank Mobile App Vulnerable Bank is an intentionally insecure mobile application built for security engineers, penetration testers, and mobile app security learners to practice and demonstrate real-world exploitation of insecure coding practices. This mobile app acts as a frontend for...