PT-2026-86454

Name of the Vulnerable Software and Affected Versions RouterOS versions prior to 6.49.21 RouterOS versions prior to 7.23.4 RouterOS versions prior to 7.24.2 Description An issue exists where the SSH server enters the connection protocol following a client-requested rekey without requiring user...

PT-2026-86451

Name of the Vulnerable Software and Affected Versions RouterOS versions prior to 6.49.21 RouterOS versions prior to 7.23.4 RouterOS versions prior to 7.24.2 Description An authentication bypass exists in the SSH public key verification process. The system fails to compare the complete RSA public...

SharpC2

SharpC2 SharpC2 is a Command & Control C2 framework written in C. It consists of an ASP.NET Core Team Server, a .NET Framework implant, and a .NET MAUI client...

CVE-2026-52770 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in yeswiki/yeswiki

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki’s public Bazar entry-listing APIs are vulnerable to unauthenticated SQL injection in numeric query / queries filters. For Bazar fields whose value structure is numeric, YesWiki escapes the attacker-controlled filter value bu...

CVE-2026-52770 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in yeswiki/yeswiki

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki’s public Bazar entry-listing APIs are vulnerable to unauthenticated SQL injection in numeric query / queries filters. For Bazar fields whose value structure is numeric, YesWiki escapes the attacker-controlled filter value bu...

RasmanPotato

RasmanPotato Gracias a @Wh04m1001 por la comunicación continua a lo largo del tiempo Otra potato más como las demás, utilizando el servicio RasMan para la escalada de privilegios Para Windows 10 11 no probado, Windows Server 2012 - 2019 2022 no probado Uso root@kitploit: magicRasMan v0.1 Provided...

wordlist.rb

Wordlist Código Problemas Documentación Descripción Wordlist es una librería y CLI de Ruby para leer, combinar, mutar y construir wordlists de forma eficiente. Características Soporta la lectura de wordlists .txt y de .gz, .bz2, .xz, .zip, y .7z comprimidas. Soporta la construcción de wordlists a...

shannon v3.1.0

!NOTE Shannon 3.0 is live: deeper security code analysis, more thoroughly vetted findings, a rebuilt CLI, native CI/CD, professional PDF reports, and SARIF. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes re...

CVE-2021-21401_nanopb-c_AOSP10_R33

Nanopb - Protocol Buffers for Embedded Systems Nanopb is a small code-size Protocol Buffers implementation in ansi C. It is especially suitable for use in microcontrollers, but fits any memory restricted system. Homepage: https://jpa.kapsi.fi/nanopb/ Documentation: https://jpa.kapsi.fi/nanopb/doc...

CVE-2026-4813

CVE-2026-4813 CVSS-B 9.4 CRITICAL Authenticated RCE via XSLT injection in Lutece Core Explanations and more on my website...

packer-tutorial

Tabla de contenido 1. ¿Qué es un packer? : Una introducción al propósito de los packers y una guía sobre cuáles son las necesidades de desarrollo de un packer. 2. Requisitos previos : Herramientas necesarias para trabajar con este tutorial. 3. Un anticipo : Una demostración de lo que construirás...

MemFiles

MemFiles DISCLAIMER: This project is complex and failure to understand how it works and adequately test it can result in you crashing Beacons and losing access! I highly encourage you to read all of the documentation up until the "Technical Details, Design Considerations, and Commentary" section!...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-44432 DESCRIPTION: urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-44490 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side...

CVE-2024-9465

CVE-2024-9465 Checkpoint SQL Injection via Time-Based Attack CVE-2024-9465 SHODAN SEARCH root@kitploit: https://www.shodan.io/search?query=html%3A%22Expedition+Project%22 html:"Expedition Project" FOFA SEARCH root@kitploit: https://en.fofa.info/ body="Expedition Project" || title="Expedition...

CVE-2026-65643-PoC-Toolkit

CVE‑2026‑65643 – cPanel Domain Parking RCE Toolkit ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse Act...

CollaRE

CollaRE v1.4 Introduction CollaRE is a tool for collaborative reverse engineering that aims to allow teams that do need to use more then one tool during a project to collaborate without the need to share the files on a separate location. It also contains a very simple user management and as such...

revsync

revsync Realtime sync plugin for IDA Pro, Binary Ninja and Vivisect Syncs: Comments Symbol names Stack var names Structs Code coverage how much time was spent looking at a block IDA Pro Installation First, clone to IDA Data Dir: Windows: %APPDATA%\Hex-Rays\IDA Pro Mac/Linux: /.idapro Now: Make a...

PetitPotato

PetitPotato Local privilege escalation via PetitPotam Abusing impersonate privileges. Description PetitPotam uses MS-EFSR Encrypting File System Remote, a protocol used to perform maintenance and management operations on encrypted data stored remotely and accessed over a network. There are a seri...

qscan

Quick Network Scanner Quick Network Scanner project includes: qscan: a rust library for asynchronous network ports scanning see README. qsc: a command line utility built on top of qscan library for quick network scanning activities see README. NOTE: in order to properly use the library and the...