CVE-2026-23003-Cross-Chain-Bridge-Message-Forging-via-Missing-Origin-Chain-ID

CVE-2026-23003 – Forgiatura di messaggi del ponte cross‑chain tramite ID della catena di origine mancante Codice del programma exploit in Solidity + Python root@kitploit: // Bridge.sol - Vulnerable bridge contract contract Bridge mappingbytes32 = bool public processed; event Depositedaddress from...

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ /\ \ / / // / ' / -/ / // // / / / / /, /// /\// root@kitploit: ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do...

CVE-2025-51869

CVE-2025-51869 Descrizione della vulnerabilità Liner è un motore di ricerca AI affidabile con oltre 10 milioni di utenti in tutto il mondo. Liner costruisce un motore di ricerca basato su LLM, che è vulnerabile a un Insecure Direct Object Reference IDOR nel suo componente chat. Un attaccante può...

CVE-2023-26984

CVE-2023-26984 Erklärung der Sicherheitslücke: Ein Problem in der Passwort-Reset-Funktion von Peppermint v0.2.4 ermöglicht es Angreifern, über eine manipulierte Anfrage auf die E-Mails und Passwörter der Tickets-Seite zuzugreifen. Angriffsvektoren: Der Angreifer musste sich mit der Benutzerrolle...

FreeBSD -- Unauthorized credential switching

Problem Description: In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This...

PT-2026-81891

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.43 through 7.0.109...

PT-2026-81892

Name of the Vulnerable Software and Affected Versions code-projects Simple Inventory System version 1.0 Description An issue exists in the /InventoryManagement/edit.php endpoint where the manipulation of the ID argument allows for SQL injection. This allows a remote attacker to interfere with the...

CVE-2023-43144

CVE-2023-43144 Descrizione Assets Management System 1.0 è vulnerabile a SQL injection tramite il parametro id in delete.php PoC root@kitploit: sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch Revisione del codice delete.php root@kitploit: ?php...

CVE-2023-23583-Reptar-

CVE-2023-23583-Reptar- Questo script può aiutare a determinare l'ID della CPU per il processore del tuo sistema, tieni presente che non ho aggiunto tutti gli ID CPU a questo script, modifica secondo necessità...

CVE-2025-65670

CVE-2025-65670 Un Riferimento Diretto a Oggetto Insicuro IDOR in classroomio 0.1.13 permette agli studenti di accedere a endpoint sensibili di admin/docente manipolando gli ID dei corsi negli URL, causando la divulgazione non autorizzata di dati sensibili del corso, dell'admin e degli studenti. L...

CVE-2024-13488

CVE-2024-13488 LTL Freight Quotes – Estes Edition = 3.3.7 - Nicht authentifizierte SQL-Injection Beschreibung Das LTL Freight Quotes – Estes Edition Plugin für WordPress ist anfällig für SQL-Injection über die Parameter 'dropshipeditid' und 'editid' in allen Versionen bis einschließlich 3.3.7,...

CVE-2026-69836-EXP

CVE-2026-69836 Prova di concetto di RCE non autenticata in Entra ID Panoramica CVE-2026-69836 è una vulnerabilità critica di esecuzione remota di codice non autenticata in Microsoft Entra ID, causata da una deserializzazione impropria di dati non attendibili CWE-502. La falla consente agli...

CVE-2026-74603

A flaw was found in the Linux kernel's ptp: ocp module. This vulnerability occurs because the EEPROM board ID, a fixed-size field, is not guaranteed to be null-terminated. When this ID is processed as a C string, it may lead to an over-read beyond its intended memory boundary. This memory...

CVE-2026-78247

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...

EUVD-2026-64852

act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied...

CVE-2026-78247

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , triggered through manipulation of the ID argument in the file /fos/admin/ajax.php?action=confirm_order. The flaw allows a remote, unauthenticated attacker to inject SQL commands, leading to low impact ...

EUVD-2026-64838

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...

IkeAbuser

IkeAbuser Ein einfaches Tool-Wrapper zur Automatisierung der Enumeration, des Fingerprintings und der PSK-Extraktion eines IPSec-VPN-Gateways. Nichts Besonderes, nur ein Skript, das ich zusammengestellt habe, um bei CTFs und beim Lernen für die CPENT Zeit zu sparen. Es verknüpft ike-scan, nmap un...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

paniclock

PanicLock è un'utility per la barra dei menu di macOS che disabilita istantaneamente Touch ID e blocca lo schermo con un singolo clic o chiudendo il coperchio del laptop. PanicLock colma una lacuna lasciata aperta da macOS: non esiste un modo integrato per disabilitare istantaneamente Touch ID...