bola-CVE-2023-27524

bola-CVE-2023-27524 📄 README.md — BOLA CVE-2023-27524 Progetto dimostrativo root@kitploit: 🔐 Dimostrazione di Broken Object Level Authorization BOLA CVE-2023-27524 Analisi di sicurezza e correzione --- 📌 Panoramica del progetto Questo progetto dimostra una vulnerabilità reale di Broken Object Lev...

CVE-2025-51869

CVE-2025-51869 Descrizione della vulnerabilità Liner è un motore di ricerca AI affidabile con oltre 10 milioni di utenti in tutto il mondo. Liner costruisce un motore di ricerca basato su LLM, che è vulnerabile a un Insecure Direct Object Reference IDOR nel suo componente chat. Un attaccante può...

CVE-2023-26984

CVE-2023-26984 Erklärung der Sicherheitslücke: Ein Problem in der Passwort-Reset-Funktion von Peppermint v0.2.4 ermöglicht es Angreifern, über eine manipulierte Anfrage auf die E-Mails und Passwörter der Tickets-Seite zuzugreifen. Angriffsvektoren: Der Angreifer musste sich mit der Benutzerrolle...

OutOfTune

OutOfTune Inspiriert vom ursprünglichen Pytune, registriert OutOfTune ein nicht autorisiertes Gerät in Entra ID, meldet es bei Intune MDM an und prüft den resultierenden Compliance-Status. Unterstützt nur Windows-Geräte, da dies mein Hauptziel war. Möglicherweise werden in Zukunft weitere...

ASSAMEE

ASSAMEE ASSAMEE è uno strumento di crittografia avanzato gratuito che può essere utilizzato per crittografare file e directory e caricarli su Anonfiles.com. Utilizza la crittografia AES-256, un metodo di crittografia robusto e sicuro. Per accedere ai file crittografati, è necessario un ID di...

PT-2026-81891

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.43 through 7.0.109...

FreeBSD -- Unauthorized credential switching

Problem Description: In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This...

PT-2026-81892

Name of the Vulnerable Software and Affected Versions code-projects Simple Inventory System version 1.0 Description An issue exists in the /InventoryManagement/edit.php endpoint where the manipulation of the ID argument allows for SQL injection. This allows a remote attacker to interfere with the...

CVE-2023-43144

CVE-2023-43144 Descrizione Assets Management System 1.0 è vulnerabile a SQL injection tramite il parametro id in delete.php PoC root@kitploit: sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch Revisione del codice delete.php root@kitploit: ?php...

CVE-2023-23583-Reptar-

CVE-2023-23583-Reptar- Questo script può aiutare a determinare l'ID della CPU per il processore del tuo sistema, tieni presente che non ho aggiunto tutti gli ID CPU a questo script, modifica secondo necessità...

CVE-2025-65670

CVE-2025-65670 Un Riferimento Diretto a Oggetto Insicuro IDOR in classroomio 0.1.13 permette agli studenti di accedere a endpoint sensibili di admin/docente manipolando gli ID dei corsi negli URL, causando la divulgazione non autorizzata di dati sensibili del corso, dell'admin e degli studenti. L...

CVE-2024-13488

CVE-2024-13488 LTL Freight Quotes – Estes Edition = 3.3.7 - Nicht authentifizierte SQL-Injection Beschreibung Das LTL Freight Quotes – Estes Edition Plugin für WordPress ist anfällig für SQL-Injection über die Parameter 'dropshipeditid' und 'editid' in allen Versionen bis einschließlich 3.3.7,...

CVE-2026-69836-EXP

CVE-2026-69836 Prova di concetto di RCE non autenticata in Entra ID Panoramica CVE-2026-69836 è una vulnerabilità critica di esecuzione remota di codice non autenticata in Microsoft Entra ID, causata da una deserializzazione impropria di dati non attendibili CWE-502. La falla consente agli...

CVE-2026-74603

A flaw was found in the Linux kernel's ptp: ocp module. This vulnerability occurs because the EEPROM board ID, a fixed-size field, is not guaranteed to be null-terminated. When this ID is processed as a C string, it may lead to an over-read beyond its intended memory boundary. This memory...

CVE-2026-78247

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...

EUVD-2026-64852

act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied...

CVE-2026-78247

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , triggered through manipulation of the ID argument in the file /fos/admin/ajax.php?action=confirm_order. The flaw allows a remote, unauthenticated attacker to inject SQL commands, leading to low impact ...

EUVD-2026-64838

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...

IkeAbuser

IkeAbuser Ein einfaches Tool-Wrapper zur Automatisierung der Enumeration, des Fingerprintings und der PSK-Extraktion eines IPSec-VPN-Gateways. Nichts Besonderes, nur ein Skript, das ich zusammengestellt habe, um bei CTFs und beim Lernen für die CPENT Zeit zu sparen. Es verknüpft ike-scan, nmap un...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...