WordPress Widgets for Social Photo Feed <= 1.8 - Information Disclosure

Widgets for Social Photo Feed WordPress plugin = 1.8 contains a broken access control caused by missing capability checks on specific REST API endpoints, letting unauthenticated attackers access and modify plugin settings remotely. id: CVE-2025-14726 info: name: WordPress Widgets for Social Photo...

FineCMS <5.0.9 - Open Redirect

FineCMS 5.0.9 contains an open redirect vulnerability via the url parameter in a sync action. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2017-11586 info: name: FineCMS 5.0.9 - Open...

BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting

BIBLIOsoft BIBLIOpac 2008 contains a cross-site scripting vulnerability via the db or action parameter to bin/wxis.exe/bibliopac/, which allows a remote attacker to inject arbitrary web script or HTML. id: CVE-2018-16139 info: name: BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting author:...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 is vulnerable to reflected cross-site Scripting via assets/edit/ip-address.php. id: CVE-2018-19137 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 is vulnerable to reflected cross-site Scripting via...

Uptime-Kuma < v1.23.0 - Improper Access Control

Uptime-Kuma before v1.23.0 is vulnerable to an information disclosure issue due to missing authorization on the /api/badge/1/ping/24 endpoint. An unauthenticated attacker can access this endpoint to leak ping statistics, such as average ping and ping history, for existing monitors without needing...

AppEnumGuard

AppEnumGuard AppEnumGuard is a defensive tweak for the installed-application enumeration side channel tracked as CVE-2025-31207. It supports conventional rootless and rootHide jailbreak environments on iOS 15.0–18.4.1. The repository also contains a normal sandboxed iOS test application that...

exploit-cve-2017-5715

Spectre attack Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make applications...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 Data Extractor Build root@kitploit: git clone https://github.com/JohnDoeAnonITA/CVE-2023-23752 cd CVE-2023-23752 go build . Usage root@kitploit: CVE-2023-23752.exe -h|--help -u|--url "" -t|--type 1|2 Help root@kitploit: / / / | // //// // //.'///'/ // //// /...

CVE-2023-23752

CVE-2023-23752 This is a proof-of-concept code for the CVE-2023-23752 vulnerability. It allows an attacker to extract sensitive information such as usernames, passwords, and database names from a target application. Usage To use this code, you can follow these steps: 1. Clone this repository or...

CVE-2024-24919-Bulk-Scanner

CVE-2024-24919 Bulk Scanner CVE-2024-24919 Check Point Security Gateway Information Disclosure Script based on and the credit goes to: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ This Python script scans lisy of URLs for CVE-2024-24919 vulnerability by sending specifi...

heartbleed-tools

OpenSSL Heartbleed CVE-2014-0160 vulnerability scanner, data miner and RSA key-restore tools. Author: Einar Otto Stangvik / @einaros / https://hacking.ventures Since the cat is long since out of the bag, and others have begun publishing their tools, I'm putting mine out there too. Hopefully this...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

CVE-2025-64714-privatebin-2.0.2-PoC

CVE-2025-64714 — PrivateBin Local File Inclusion via Template Cookie Path Traversal Severity: Medium CVSS v3.1: 5.8 Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected versions: PrivateBin = 1.7.7 Patched version: 2.0.3 CWE: CWE-23 Relative Path Traversal, CWE-73 External Control of File Name or...

cve-2023-40429-ez-device-name

HostName Overview HostName is a sample application demonstrating how a third-party app can access a user's device name without the com.apple.developer.device-information.user-assigned-device-name entitlement. Details In iOS 16, Apple added the...

CVE-2024-12542

CVE-2024-12542 linkID = 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure Description The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and...

CVE-2024-24919-POC

CVE-2024-24919 PoC 🚀 🔥 Description This script automates the exploitation of CVE-2024-24919 Checkpoint Security Gateway Unauthorized Information Disclosure. 📌 Features ✅ Single & Bulk URL Testing ✅ Automated Exploitation ✅ Simple & Fast 🛠️ Usage Clone this repo and run the script: root@kitploit:...

CVE-H3C-Report

H3C GR series router system management has unauthorized access vulnerability Product : GR series router version : all rating : high-risk website : http://www.h3c.com/ Hazards : Attackers can exploit this vulnerability to obtain sensitive information from routers by constructing special request...

ctl_ctloutput-leak

ctlctloutput-leak The ctlctloutput function in macOS High Sierra 10.13 ignores the return value of a call to sooptcopyin, which opens up a race window to leak uninitialized kernel heap data to user space. ctlctloutput-leak is a proof-of-concept exploit that attempts to trigger this information...

lama

lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...

Twitter-Info

Twitter Info A simple python script to grab Twitter account info like: Name Following Followers Likes Account date Profile picture just by username or profile link. Usage root@kitploit: python3 twitterinfo.py or Example Input root@kitploit: python twitterinfo.py ngll Output root@kitploit: Name:...