CVE-2026-0848-PoC-Improper-Input-Validation

CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ WARNUNG Dieser Code führt beliebige Befehle auf deinem System aus. NUR in virtuellen Maschinen oder isolierten Containern verwenden. Beschreibung Funktionaler PoC für CVE-2026-0848. Demonstriert, wie eine bösartige JAR-Datei beliebigen Code...

ci-supplychain-guard

CI Supply Chain Guard Uno strumento di analisi statica per rilevare dipendenze dannose nelle pipeline CI/CD prima che vengano integrate nel tuo codebase. Autore: Otsmane Ahmed Stato: Prototipo di ricerca v1.0 Avvio Rapido root@kitploit: 1. Clone and install git clone...

Malicious code in bnotify-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f94e04da2ba873e2dbc02daf8ccdf71ac80710b143908d5ed08797b88c48c37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-34621

CVE-2026-34621 : Catena di Prototype Pollution e Iniezione JS in Adobe Acrobat 2026 — PoC di Ricerca Panoramica Questo repository contiene materiale di ricerca e codice proof-of-concept sviluppato durante l'analisi della catena di exploit in-the-wild di Adobe Acrobat Reader 2026 che coinvolge:...

CVE-2026-47852

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

DriverSentinel

🛡️ DriverSentinel 🛡️ Scanner für gefährdete Windows-Treiber DriverSentinel ist ein in Go entwickeltes Sicherheitstool, das bösartige und verwundbare Treiber auf Windows-Systemen erkennt, indem es sie mit der LOLDrivers.io Datenbank vergleicht. Funktionen • Installation • Verwendung • So...

CVE-2021-1675

إثبات المفهوم لتصعيد الامتيازات المحلية عبر PrintNightmare src/nightmare.cpp: الكود المصدري لاستغلال CVE-2021-1675 والحصول على وصول النظام عن طريق تثبيت ملف dll خبيث src/payload-dll.cpp: الكود المصدري لملف dll يحتوي على شيل كود خبيث في دالة الإدخال !!استخدم فقط ضد الخوادم التي لديك إذن لاختبارها...

CVE-2026-29053

Este é um retrabalho do Repo de rootxran para esta mesma CVE - https://github.com/rootxran/CVE-2026-29053 Durante testes contra ambientes específicos do Ghost CMS, o payload do tema original acionou um Erro Fatal do Handlebars. O CMS falhou ao ativar o tema malicioso porque ele referenciava um...

CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Exploit RCE Pre-Auth Oracle E-Business Suite Una vulnerabilità critica di Remote Code Execution RCE pre-autenticazione in Oracle E-Business Suite versioni 12.2.3–12.2.14 consente agli attaccanti di ottenere il pieno controllo dei server vulnerabili tramite richieste HTTP malevole...

CVE-2023-48022

CVE-2023-48022 Exploit do CVE-2023-48022 modificado a partir do trabalho da Bishop Fox Como usar defina o ip e a porta em jobs.py defina o payload em malicious.py $ pip install ray $ python3 jobs.py...

cve-2017-8760

शोषण टूलकिट CVE-2017-8759 - v1.0 शोषण टूलकिट CVE-2017-8759 - v1.0 एक सुविधाजनक पायथन स्क्रिप्ट है जो पेंटेस्टर्स और सुरक्षा शोधकर्ताओं को Microsoft .NET Framework RCE का परीक्षण करने का एक त्वरित और प्रभावी तरीका प्रदान करती है। यह एक दुर्भावनापूर्ण RTF फ़ाइल उत्पन्न कर सकती है और बिना किसी जटिल...

openclaw-security-monitor

OpenClaw Security Monitor Monitoraggio proattivo della sicurezza, scansione delle minacce e visibilità in tempo reale per le distribuzioni di OpenClaw. Rileva minacce della campagna ClawHavoc 824+ skill dannose, AMOS stealer , Vidar infostealer , GhostSocks malware proxy, ClawJacked brute-force...

CVE-2023-38831_Exploit

CVE-2023-38831 Exploit Proof-of-Concept Übersicht Dieses Repository enthält ein Python-Skript, das einen Proof-of-Concept PoC Exploit für CVE-2023-38831 demonstriert. Dieser Exploit nutzt eine Schwachstelle in bestimmten Dateiverarbeitungsmechanismen aus, um eine Reverse-Shell-Nutzlast mittels...

CVE-2024-23346

CVE-2024-23346 这个 PoC 基于 William Khem-Marquez 和 Matthew Horton 的报告/发现： https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f 使用方法： python3 CVE-2024-23346.py -t targetURL -u username -p password -l localhost -P localport -X -P 和 -X 不是必须的，但可以指定。-X 用于在你的机器上存储恶意...

MaliciousBrowserExtensions

Estensioni Browser Malevole Unisciti al Discord Prova la nostra Estensione Prova ExterminAI Panoramica ❗ Il proprietario e i collaboratori NON SONO RESPONSABILI in alcun modo per eventuali danni causati dall'uso negligente dei campioni conservati nel repository; gli utenti devono prendere le...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit root@kitploit: | || | \ / / | / | | | | Erweitertes WinRAR-Pfad-Traversal-Exploit-Tool Ein raffiniertes GUI-Tool zum Erstellen bösartiger RAR-Archive, die die WinRAR-Pfad-Traversal-Schwachstelle CVE-2025-8088 mithilfe von ADS- und RAR5-Header-Manipulation ausnutzen...

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

OpenSTAManager RCE 利用工具 CVE-2026-38751 概述 此 Python 脚本利用 OpenSTAManager 2.10 版本中的一个远程代码执行漏洞，编号为 CVE-2026-38751。该利用工具允许经过身份验证的用户上传恶意模块并在目标系统上执行任意命令。 漏洞详情 CVE ID ：CVE-2026-38751 产品 ：OpenSTAManager 版本 ：2.10 类型 ：远程代码执行 RCE 攻击向量 ：基于 Web，需要有效身份验证 利用原理 该利用工具遵循以下步骤： 1. 身份验证 ：使用提供的凭据登录 OpenSTAManager 应用 2...

Adobe Substance 3D Sampler <= 6.0.1 Multiple Arbitrary Code Execution Vulnerabilities (APSB26-121)

The version of Adobe Substance 3D Sampler installed on the remote host is prior or equal to 6.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-121 advisory. - Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in...

CVE-2022-31298

CVE-2022-31298 Haraj Script 3.7 - XSS Armazenado Autenticado Título do Exploit: Haraj Script 3.7 - XSS Armazenado Autenticado Data: 2022-06-13 CVE: CVE-2022-31298 Autor do Exploit: Abdulaziz Saad @b4zb0z Homepage do Fornecedor: https://angtech.org/ Link do Software:...

GuardModel

GuardModel Blocca i modelli AI dannosi nella tua pipeline con una riga di YAML. GuardModel è una GitHub Action che scansiona automaticamente i file dei modelli ML alla ricerca di codice dannoso, vulnerabilità e rischi di sicurezza nelle pipeline CI/CD. Blocca i modelli pericolosi prima che...