appspec-yaml-leaks

बैज लाइसेंस MIT इंस्टॉलेशन...

citrix-netscaler-memory-leak

Badges Licenza MIT...

shell-history-leaks

Badges Licenza MIT Installazione 1. Installa Python3 e pip Istruzioni qui Se non riesci a capire come fare, forse non dovresti usare questo strumento Installa tramite pip root@kitploit: pip install shell-history-leaks Esegui il comando qui sotto per verificare shell-history-leaks -h Configurazion...

Linux-Kernel-local-DoS

Linux-Kernel-local-DoS DoS locale del kernel Linux basato su memleak da un utente non privilegiato, basta prima fare una prctl PRTIMERCREATERESTOREIDSON come da https://x.com/spendergrsec/status/1990887509664928062...

eos

Nemici di Symfony EOS EOS saccheggia informazioni da un target Symfony in modalità debug: Sezione| Descrizione ---|--- General| Ottieni informazioni generali sul target. Phpinfo| Estrai le variabili d'ambiente Symfony dalla phpinfo esposta. Route| Ottieni l'elenco delle route registrate. Log dell...

CVE-2025-5777

CVE-2025-5777 Exploit per la Perdita di Memoria di Citrix NetScaler !WARNING Questo script è destinato esclusivamente a scopi educativi e di ricerca. Non utilizzarlo contro sistemi senza autorizzazione esplicita. L'accesso o il test non autorizzato è illegale e non etico. Leggi il DISCLAIMER...

CVE-2022-1972-infoleak-PoC

CVE-2022-1972 infoleak PoC Exploit infoleak per CVE-2022-1972. Puoi trovare l'articolo associato sul nostro blog Requisiti I namespace utente devono essere disponibili per utenti non privilegiati. root@kitploit: $ sysctl kernel.unprivilegedusernsclone kernel.unprivilegedusernsclone = 1 Compilazio...

nginx

CVE-2017-7529 당승표@portfolio10 Zusammenfassung Diese Übung reproduziert die Cache-Schwachstelle CVE-2017-7529, die bei der Verarbeitung von Range-Anfragen im Nginx-Server auftritt, und das tatsächliche Verhalten der Schwachstelle Schwachstelle: Durch einen Fehler bei der Verarbeitung des...

EUVD-2026-67204

When an IntegrationFlow uses .fluxTransform with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription have their reply headers replyChannel, errorChannel, correlationId, any propagated security/tenant headers copied from...

CVE-2015-6086

Vom Absturz zum Exploit: CVE-2015-6086 - Out-of-Bound Read/ASLR-Bypass root@kitploit: $$$$$$\ $$\ $$\ $$$$$$$$\ $$$$$$\ $$$$$$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$\ $$ $$\ $$ | $$ |$$ | $$ $$\ $$$ $$\ $$$$ | $$ | $$ $$\ $$$ $$\ $$ $$\ $$ / |$$ | $$ |$$ | / $$ |$$$$\ $$ |$$ | $$ | $$ / |$$$$\ $$...

CVE-2026-81715

opensslencrypt pip package openssl-encrypt versions = 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitizeargvfordebug fails to sanitize it. As a result the token is printed in cleartext to stderr unde...

CVE-2026-80212

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2025-10035_GoAnywhere

فاحص GoAnywhere CVE-2025-10035 الوصف فاحص خفيف بلغة Python يكتشف ما إذا كان مثيل GoAnywhere معرضًا لـ CVE‑2025‑10035. ترسل هذه الأداة طلب GET مصممًا بعناية مع User-Agent عشوائي باستخدام fake-useragent مع قائمة احتياطية، ولا تتبع عمليات إعادة التوجيه، وتفحص ترويسة Location، وتصنّف المثيل على أنه غ...

CVE-2017-0785

CVE-2017-0785 PoC Este é apenas um estudo pessoal baseado na vulnerabilidade de vazamento de informações do Android divulgada pela Armis. Leitura adicional: https://www.armis.com/blueborne/ Para executar, certifique-se de ter pybluez e pwntools instalados. root@kitploit: sudo apt-get install...

EUVD-2026-67089

When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...

CVE-2023-21742

CVE-2023-21742 PoC Attenzione: è solo una PoC per divulgare l'attributo/proprietà, non un EXP di RCE. root@kitploit: POST /vtibin/webpartpages.asmx HTTP/1.1 Host: splab13 SOAPAction: http://microsoft.com/sharepoint/webpartpages/ConvertWebPartFormat Upgrade-Insecure-Requests: 1 User-Agent:...

CVE-2025-5777-CitrixBleed

CVE-2025-5777-CitrixBleed CitrixBleed-2 CVE-2025-5777 – proof-of-concept exploit per NetScaler ADC/Gateway “memory bleed” CVE-2025-5777 è una critica lettura out-of-bounds non autenticata in Citrix NetScaler ADC/Gateway modalità Gateway o AAA vServer. Una singola richiesta artificiosa può scarica...

ios-gamed-0day

Exploit di gamed su iOS corretto in 15.0.2 Aggiornamento: Apple ha corretto silenziosamente questo problema in iOS 15.0.2 senza alcun riconoscimento pubblico o credito. Qualsiasi app installata dall'App Store può accedere ai seguenti dati senza alcun prompt all'utente: Email dell'ID Apple e nome...

EUVD-2026-66454

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a single-slot field, so a submission carrying two AMDGPUCHUNKIDFENCE chunks run...

EUVD-2026-66449

In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfsdqgetnextid xfsdqgetnextid takes the quota inode ILOCK before calling xfsireadextents. If xfsireadextents fails, the function returns immediately without releasing the lock, leaking the quota...