CGA-R988-2MQW-V765

Bulletin has no description...

CGA-4MXQ-VWVC-FR47

Bulletin has no description...

CGA-RRV3-G89R-4223

Bulletin has no description...

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – OpenSSH SCP Command Injection Vulnerability Detection Script About CVE-2020-15778 is a command injection vulnerability discovered in the scp utility provided by OpenSSH versions ≤ 8.3p1. The issue allows an attacker to execute arbitrary commands on the client system if a crafted...

CVE-2026-67595

CVE-2026-67595 — Embedded Malicious JavaScript in VaahCMS Security advisory for CVE-2026-67595 : an obfuscated JavaScript spyware payload shipped inside the official releases of VaahCMS a supply-chain / embedded-malicious-code issue, independently discovered and reported by Ilhomjon Rustamov...

terra

Terra : Terra necesita un mantenedor activo Estoy buscando un mantenedor activo para Terra. Tengo algunas ideas interesantes para nuevas funciones y otras cosas posibles con Terra / OSINT. Me encantaría saber de personas interesadas. Escríbanme a [email protected] Terra : Herramienta de...

XeytanWin32-RAT

WARNING This is a buggy RAT, not completed, not stable. It still a "work in progress" application. Introduction Project created to kill some of my free time, It is not actively maintained. There are a lot of things to improve/fix, and it will take time to reach a stability on this project. Featur...

instrumentation_callbacks

instrumentationcallbacks Instrumentation callbacks are quite a fun undocumented part of Windows. All the code in this repository is released under the MIT license. This repository uses google style C++ spacing. PRs are welcome if you find issues, bugs, or believe a specific feature should be adde...

raxe-ce

Threat Detection for AI Agents Stop prompt injection, jailbreaks, and tool attacks before they execute. 100% local. Sub-5ms rule matching. Free forever. root@kitploit: pip install raxe && raxe scan "Ignore all previous instructions" Requires Python 3.10+ • 515+ rules + ML detection included Built...

CVE-2022-0778-POC

A simple remote triggering POC for CVE-2022-0778 Why While trying to validate whether server implementations on our side where/are vulnerable to CVE-2022-0778, it proved extremely cumbersome to do so remotely. Instructions to create maliciously crafted certificates to trigger the parsing bug in...

CVE-2025-48932-Invision-Community-SQLi-Exploit

🔓 CVE-2025-48932 - Invision Community SQL Injection Exploit ⚡ Critical Vulnerability Overview CVE-2025-48932 is a critical unauthenticated blind SQL injection vulnerability discovered in Invision Community versions ≤ 4.7.20. This exploit allows remote attackers to: 🔍 Extract sensitive database...

CVE-2023-27163-InternalProber

CVE-2023-27163-InternalProber CVE-2023-27163-InternalProber is a powerful tool designed to help you to create a request basket and perform port scanning. It automates the creation of new basket and then change the configuration for each port to perform port scanning on the internal IP address. By...

CVE-2026-5061

CVE-2026-5061 Consul Template validated where a symlink pointed during template evaluation, but its later dependency fetch read the original path. Retargeting the link between those operations turned an in-sandbox file reference into an out-of-sandbox file disclosure. Intro I found this issue whi...

www-community

OWASP Community Pages OWASP Community Pages is a repository for community contributions for security-related content. The documents here create the website at https://owasp.org/www-community/. Contributing We welcome contributions for new content and updates to current pages. This repository uses...

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through many methods. Windows Support To build a binary for Windows, download the installer.ps1 script from this repository. Run it simply with no arguments to create a binary in the working directory...

Eaton-UPS-Companion-Exploit

Overview The Eaton UPS Companion software checks for an update every single week over an insecure HTTP connection and evals the content of whatever is at the update URL. This allows an attacker to craft a JavaScript function which uses the low-level OS operations that already exist in the backend...

gtfobins-cli

🚀 GTFOBins CLI Overview GTFOBins CLI is a command-line interface for GTFOBins, providing instant access to Unix binary exploitation techniques. This tool helps security professionals and system administrators identify and understand how legitimate Unix binaries can be misused to bypass security...

DG-Home1

Authenticated OS Command Injection in ElphaPex DG Home1 Web Fi...

longtongue

Generar lista personalizada de contraseñas/frases basada en información del objetivo Codificado con 💙 por edoardottt ¡Compartir en Twitter! Instalación ⬇️ pipx root@kitploit: pipx install longtongue Código fuente root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue...

quantum-security-project

OWASP Quantum Security Project Prepare Today. Protect tomorrow. An official OWASP community project mapping the security risks of the quantum era in a practical, vendor-neutral, and risk-based way - the antidote to hype and fear. Status: Bootstrap phase. The OWASP Top 10 for Quantum Security Risk...