CVE-2026-58571

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

EUVD-2026-69149

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58571

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58571

Dell PowerStore is affected by an OS Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, changed scope...

CVE-2022-47615

CVE-2022-47615 LearnPress プラグイン 4.2.0 - 認証なし LFI 脆弱性の説明 説明 このプラグインは、lp/v1/courses/archive-course REST エンドポイントで様々なパラメータを適切に検証せずに include 文で使用しているため、LFI 問題が発生する可能性があります。 使用方法 root@kitploit: $ python3 exploit.py -u http://wordpress.lan -f ../../../etc/passwd root:x:0:0:root:/root:/bin/bash...

CVE-2019-15107

CVE-2019-15107 Python 漏洞利用程序 CVE-2019-15107 针对 webmin 致谢 基于 Metasploit 模块 https://www.exploit-db.com/exploits/47230 原始安全公告：https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html...

Security Bulletin: Multiple vulnerabilies in Log4j impacting IBM webMethods API Management

Summary Multiple vulnerabilities in Log4j have been addressed in IBM webMethods developer portal and IBM webMethods ControlPlane Vulnerability Details CVEID:CVE-2026-34479 DESCRIPTION: The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1....

magescan

Mage Scan The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into. Installation .phar Download the magescan.pha...

CVE-2025-9216

StoreEngine – 强大的WordPress电子商务插件，支持支付、会员、联盟营销、销售等 root:x:0:0:root:/root:/bin/bash daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin sys:x:3:3:sys:/dev:/usr/sbin/nologin...

CVE-2025-46811

SUSE Manager 漏洞利用工具包 CVE-2025-46811 扫描与利用工具 🚀 功能特性 多线程漏洞扫描 通过 WebSocket 的交互式 root shell 单命令执行模式 彩色调试输出 目标批量处理 📦 安装 root@kitploit: git clone https://github.com/yourusername/suse-manager-exploit.git cd suse-manager-exploit pip install -r requirements.txt 🛠 使用方法 扫描模式 root@kitploit: python3 exploit.p...

lisa.py

LLDB MCP 集成 本项目为 LLDB 提供了模型-上下文协议 MCP 集成，允许 AI 助手（如 Claude）通过标准化接口与您的调试会话进行交互。 概述 集成包含两个主要组件： 1. server.py — 一个与 Claude（或其他 MCP 客户端）通信的 MCP 服务器 2. lldbplugin.py — 一个在 LLDB 内部运行并通过 JSON-RPC 暴露调试器功能的插件 该架构使 Claude 能够通过自然语言直接与 LLDB 交互，帮助您调试代码。MCP 服务器充当桥梁，将 Claude 的请求转换为 LLDB 命令，并以结构化格式返回结果。 安装 前置条件...

CVE-2026-33718

CVE-2026-33718 OpenHandsは、Git Diffハンドラーを通じたコマンドインジェクションに対して脆弱です 寄付 PayPalでの寄付、または下記のQRコードのスキャンにより、このプロジェクトのメンテナンスを支援してください。 ⚡ 簡単な使い方 このプロジェクトは、以下のような安全かつ許可された環境でのみ使用してください： ローカル仮想マシン Dockerコンテナ 隔離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例： root@kitploit: git clone cd Project use python follow below Creat...

Apache-Druid-CVE-2021-25646-Exploit

Apache Druid RCE 漏洞利用 CVE-2021-25646 通过 JavaScript 代码注入实现 Apache Druid 远程代码执行的 Python 利用脚本 CVE-2021-25646。 描述 该脚本利用 Apache Druid（版本 0.20.1）中的一个 RCE 漏洞，该漏洞允许通过特制的采样器请求执行任意代码。 用法 root@kitploit: python3 druidrce.py -u http://target:8888 -c "commandtoexecute" 参数 -u/--url - 目标 URL（例如...

polypyus

Polypyus Firmware Historian Polypyus learns to locate functions in raw binaries by extracting known functions from similar binaries. Thus, it is a firmware historian. Polypyus works without disassembling these binaries, which is an advantage for binaries that are complex to disassemble and where...

CVE-2026-50522

CVE-2026-50522 Microsoft SharePoint CVE-2026-50522 载荷与分析。 HTTP 请求 请求| 来源| User-Agent| 编码| 唯一 ID| 载荷 ---|---|---|---|---|--- 816978882| 45.63.58.216| Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36| '| urn:unique-id:securitycontext:b764f8e60e90450b8629b5ce74fccf82| powershell.exe...

CVE-2026-18210 SQL Injection in TRtek Technological Products's Store

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store allows SQL Injection. This issue affects Products's Store: before 030631b2...

EUVD-2026-69142

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store allows SQL Injection. This issue affects Products's Store: before 030631b2...

CVE-2026-18210 SQL Injection in TRtek Technological Products's Store

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store allows SQL Injection. This issue affects Products's Store: before 030631b2...

CVE-2026-18210

CVE-2026-18210 is a critical (CVSS 9.8) SQL injection vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company's Products's Store , caused by improper neutralization of special elements in SQL commands. The issue affects versions before commit 03...

cve-2025-61882-oracle_ebs_rce_reproduction

CVE-2025-61882 — Oracle E-Business Suite 未认证远程代码执行 CVSS 9.8 严重 概述 CVE-2025-61882 是 Oracle E-Business Suite（EBS）中一个无需认证即可远程执行代码的漏洞，影响并发处理和 BI Publisher 组件。该漏洞允许未经认证的攻击者通过 HTTP 网络访问完全攻破目标系统。该漏洞已被包括 Clop 勒索软件团伙在内的多个组织在野外利用，并于 2025 年 10 月被添加到 CISA 已知被利用漏洞（KEV）目录中。 技术细节 该漏洞存在于 Oracle EBS 处理并发处理/BI...