FOFA-API-Threaded-Searcher

FOFA API Threaded Searcher A powerful multi‑threaded Python tool to query the FOFA Fofa.so API, extract selected fields, and save unique results with intelligent formatting. ✨ Features Multi‑threaded – Fetch multiple pages concurrently configurable threads Custom fields – Choose any valid FOFA...

POC_CVE-2026-41940

POCCVE-2026-41940 Quick start root@kitploit: python3 pocCVE-2026-41940.py -h Usage examples Scan one host root@kitploit: python3 pocCVE-2026-41940.py -u https://target.example:2086 List accounts after successful chain root@kitploit: python3 pocCVE-2026-41940.py -u https://target.example:2086...

marimo_CVE-2026-39987_RCE_PoC

CVE-2026-39987 - Marimo This script is ONLY for educational purposes and authorized testing. Unauthorized use of this tool against systems without explicit permission is ILLEGAL. The author is not responsible for the misuse of this information. 📋 Description Marimo versions prior to 0.23.0 presen...

CVE-2021-4034-NoGCC

CVE-2021-4032-NoGCC Test in: Ubuntu 20.04.3 LTS Kali 2021.4a CentOS Linux release 7.5.1804 Use: 1:interactive shell ./cve-2021-4034-poc-x64 2:one-liner ./cve-2021-4034-poc-x64 "cat /etc/shadow"...

binviz

binviz Binary visualiser & triage tool: linked interactive views entropy, histograms, image/dot-plot surfaces, control-flow graphs over a single shared address-space model. root@kitploit: pipx install binviz && binviz serve What it does Open a file and every view is looking at the same address...

CVE-2025-14765-and-CVE-2025-14766

Chrome Vulnerability Interactive Lab Overview This interactive educational lab simulates two critical Chrome vulnerabilities CVE-2025-14765 and CVE-2025-14766 in a safe, controlled environment. The tool visualizes memory corruption concepts without executing actual exploits, making it perfect for...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

CVE-2026-81770

Unauthenticated Cross Site Scripting XSS in Interactive Geo Maps = 1.6.30 versions...

EUVD-2026-69928

Unauthenticated Cross Site Scripting XSS in Interactive Geo Maps = 1.6.30 versions...

CVE-2026-81770 WordPress Interactive Geo Maps plugin <= 1.6.30 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Interactive Geo Maps = 1.6.30 versions...

CVE-2026-81770

CVE-2026-81770 affects the WordPress Interactive Geo Maps plugin in versions ≤ 1.6.30 . The vulnerability is an unauthenticated Reflected Cross-Site Scripting (XSS) , meaning no prior login is required to exploit it, though user interaction is needed (CVSS 3.1: 7.1 HIGH , vector AV:N/AC:L/PR:N/UI...

WordPress Interactive Geo Maps plugin <= 1.6.30 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by timomangcut in WordPress Plugin Interactive Geo Maps versions = 1.6.30...

Astra Linux – Vulnerability in PostgresSQL 11

A flaw was discovered in the psql interactive terminal of PostgreSQL in versions prior to 13.1, prior to 12.5, prior to 11.10, prior to 10.15, prior to 9.6.20, and prior to 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary cod...

Exploit for Improper Access Control in Widgetfactorylimited Jce

JCEzploit-CVE-2026-48907 JCEzploit is a powerful, fully-aut...

PT-2026-79075

Name of the Vulnerable Software and Affected Versions broot affected versions not specified Description broot renders file and directory names in its interactive tree view exactly as they are read from the filesystem without filtering control characters. This occurs during the conversion process...

CVE-2026-75857

CodeWhale versions = 0.8.41 and 0.8.64 contain a vulnerability in the execshellinteract alias execinteract tool, whose approvalrequirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an...

CVE-2026-75857 CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact

CodeWhale versions = 0.8.41 and 0.8.64 contain a vulnerability in the execshellinteract alias execinteract tool, whose approvalrequirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an...

CVE-2026-75857 CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact

CodeWhale versions = 0.8.41 and 0.8.64 contain a vulnerability in the execshellinteract alias execinteract tool, whose approvalrequirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an...

CVE-2026-75857

CodeWhale versions 0.8.41–0.8.63 have exec_shell_interact returning ApprovalRequirement::Auto, bypassing approval prompts and writing LLM-controlled stdin into already-approved interactive shells (python3 -i, mysql, ssh, sudo -i). An attacker injecting instructions via untrusted ingested content ...

PT-2026-77158

Name of the Vulnerable Software and Affected Versions CodeWhale versions 0.8.41 through 0.8.63 Description The exec shell interact alias exec interact tool incorrectly returns ApprovalRequirement::Auto for its approval requirement. This behavior overrides the default required approval for tools...