CVE-2024-24142

CVE-2024-24142: School-Task-Manager-System-SQL-Injection-2 Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24142.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24142/blob/main/CVE-2024-24142.md...

phishlulz

PhishLulz PhishLulz è un insieme di strumenti Ruby progettato per automatizzare le attività di Phishing. Quando avvii una campagna di phishing, viene generata un'istanza dedicata Amazon EC2 Debian 7. La VM viene fornita con vari strumenti open source che sono stati combinati. I due componenti...

CVE-2025-34028-PoC-Commvault-RCE

CVE-2025-34028 - Remote Code Execution su Commvault Command Center Uno script Python per CVE-2025-34028, una vulnerabilità di esecuzione di codice in remoto in Commvault Command Center. Questo strumento consente di testare singoli target o di scansionare più host in blocco. Caratteristiche Capaci...

red-detector

Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

AWS-Loot

AWSLoot Cerca segreti in un ambiente AWS enumerando le variabili d'ambiente e il codice sorgente. Questo strumento consente un'enumerazione rapida su grandi insiemi di istanze e servizi AWS. Installazione root@kitploit: pip install -r requirements.txt È necessario un file di credenziali AWS...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

EUVD-2026-63985

Incus has a project restriction bypass in instance copy across projects...

CVE-2026-19264

CVE-2026-19264 - Path Traversal não autenticado para assunção total da instância no Postiz Autor: Krithik Babu P @DarkLycn1976 Publicado: 2026-08-10 CVE: CVE-2026-19264 Gravidade: Crítica - CVSS 4.0 9.3 / CVSS 3.1 9.8 CWE: CWE-22 - Limitação inadequada de nome de caminho a um diretório restrito...

CVE-2026-55559 Yamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api/instances and PATCH /api/instances/instance into YAML through VarStatement.append in yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java without YAML-context escaping. The...

EUVD-2026-67843

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api/instances and PATCH /api/instances/instance into YAML through VarStatement.append in yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java without YAML-context escaping. The...

CVE-2026-74936-gc-potato

CVE-2026-74936 Eine nicht ausgefeilte Reproduktion. Die Grundlage erforderte hier etwas Feinarbeit. Mozilla beschreibt dieses Problem als WebAssembly-Use-after-Free. Der öffentliche Fix 9823b5c86ffa hält das exakt abfangende wasm::Code in JitActivation am Leben. Der Test führt einen...

CVE-2015-2166-EXPLOIT

CVE-2015-2166 - Vulnerabilidade de Travessia de Diretórios no Ericsson Drutt Mobile Service Delivery Platform MSDP CVE-2015-2166 é uma vulnerabilidade de travessia de diretórios que afeta o Instance Monitor no Ericsson Drutt Mobile Service Delivery Platform MSDP versões 4, 5 e 6. A vulnerabilidad...

CVE-2022-29221-PoC

CVE-2022-29221-PoC Non ospito più su Github, ma sulla mia istanza di hosting Git personale. Vai qui per vedere il codice: https://git.sbani.net/sbani/CVE-2022-29221-PoC...

CVE-2026-18886

ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ...

CVE-2026-18885

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond...

Kcfinder-Mass-Scanner

Kcfinder-Mass-Scanner Python 2.7 Come si usa? Installa Python 2.7 Scarica qui python file.py...

CVE-2025-68613-n8n-lab

CVE-2025-68613 Laboratorio locale n8n Questo repository fornisce una semplice configurazione Docker Compose che esegue un'istanza n8n vulnerabile per test locali di CVE-2025-68613. Requisiti Docker Desktop o Docker Engine Docker Compose v2 Avvio rapido 1. Avvia il container: root@kitploit: docker...

EUVD-2026-67220

ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ...

EUVD-2026-67219

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond...