CVE-2026-34980

cve-id 捐赠 通过 PayPal 或扫描下方二维码来支持本项目的维护。 ⚡ 简单使用 仅在安全且经授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 经授权的渗透测试环境 示例设置： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Window...

CVE-2026-85224 D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...

CVE-2026-85224 D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...

CVE-2026-85224

CVE-2026-85224 is an OS command injection vulnerability in the File Sharing component of D-Link DNS-320 ShareCenter (firmware 2.06B01), specifically in /cgi/file_sharing.cgi. Manipulation of the fileurl argument allows a remote attacker to execute arbitrary commands. The CVSS 3.1 score is 9.1 (CR...

CVE-2026-64561

CVE-2026-64561 捐赠 通过 PayPal 或扫描下方二维码来支持本项目的维护。 ⚡ 简单用法 仅在安全且获得授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 经授权的渗透测试环境 示例搭建： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activa...

qyvora-toha3ee

toha3ee 一个用 Go 编写的本地与网络安全评估框架。它是一个研究和授权渗透测试工具，覆盖网络评估流程——主机与服务发现、枚举、凭据审计、漏洞识别和授权利用。其十个模块类别涵盖侦察、枚举、OSINT、MITM（ARP/DHCP/DNS/IPv6 投毒和在线 HTTP/HTTPS 拦截）、无线、交换机层、Web、认证、间谍活动和后渗透——全部通过交互式 REPL、引导式向导或单次命令序列驱动。 MITM 只是这一更广泛领域中的一种能力：TOHA3EE 并不仅限于中间人攻击场景。 警告 ：toha3ee 会主动重定向、投毒、解密和拦截 网络流量。仅 在您拥有或明确获准测试的网络上使用它...

CVE-2026-9744

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2026-9036

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2026-85222

A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addoncenter.cgi of the component Add-On Center. Such manipulation of the argument fname/furl/fflag/floginuser leads to os command injection. It is possible to...

CVE-2026-85223 D-Link DNS-340L CGI dropbox.cgi os command injection

A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callbackurl/syncinterval results in os command injection. The attack can be initiated...

CVE-2026-85223 D-Link DNS-340L CGI dropbox.cgi os command injection

A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callbackurl/syncinterval results in os command injection. The attack can be initiated...

CVE-2026-85223

CVE-2026-85223 affects D-Link DNS-340L firmware version 1.01B04 . The vulnerability is an OS command injection in the CGI Handler component, specifically in the file /cgi-bin/dropbox.cgi. Manipulating the callback_url and sync_interval arguments allows a remote, authenticated attacker to inject a...

asadbg

asadbg Nota preliminar: recomendamos utilizarlo como parte de asatools, aunque también puede usarse de forma independiente. asadbg es un framework de herramientas para ayudar a automatizar la depuración en vivo de dispositivos Cisco ASA, así como automatizar la interacción con la CLI de Cisco...

asafw

asafw 初步说明：我们建议你将其作为 asatools 的一部分使用，但也可以单独使用。 asafw 是一组用于处理 Cisco ASA 固件的脚本。它可以让你解包使用 gdb 调试时所需的固件，也可以解包/重新打包固件以启用某些功能，例如： 在启动时启用 gdb 禁用 ASLR 以简化调试 注入 Linux 调试 shell，以便在真实硬件上使用时允许在 gdb 中执行 CTRL^C Root 固件（通常已弃用，改为在启动时启用 gdb 并注入 root shell） 等等。 更有用的工具是 unpackrepackbin.sh 和...

cq

cq Code Query, a universal code security scanning tool. CQ scans code for security vulnerabilities and other items of interest to security-focussed code reviewers. It outputs text files containing references to issues found, into an output directory. These output files can then be reviewed,...

DIBF

DIBF Suite de herramientas IOCTL para controladores de Windows. DIBF Brute-Forcer dinámico de IOCTL y fuzzers Esta herramienta abarca dos funcionalidades distintas. Adivina los valores IOCTL que acepta el controlador y también sus limitaciones de tamaño válidas, y guarda los resultados en un...

detaped

Detaped 简介 Detaped 是一个用于 Duktape（GitHub）的 Python 反汇编器和反编译器。其预期用途是在仅拥有已编译的 Duktape 字节码二进制文件的情况下进行源代码审查和分析，例如在黑盒评估中。 功能 解析 JSE 文件格式 反汇编 JSE 二进制文件或二进制文件目录 生成 ASM 风格的指令（一对一的字节码映射） 生成低层次的类 JavaScript 输出 反编译器生成基本的高层次类 JavaScript 输出 支持的版本 v2.7.0 用法 root@kitploit: └─$ detaped --help usage: detaped.py -h ...

GTFOBLookup

GTFOBLookup 面向 GTFOBins、LOLBAS、WADComs 和 HijackLibs 的离线命令行查询工具。 文件 .gitignore : Gitignore 文件 gtfoblookup.1 : GTFOBLookup 的 Linux 手册页 gtfoblookup.py : GTFOBLookup 工具 LICENSE.md : 许可证文件 README.md : 本文件 requirements.txt : 所需 Python 包列表 依赖 虽然 GTFOBLookup 可以在 Python2.7 中运行，但某些功能需要 Python3。 GTFOBLookup...

insject

Insject insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces. It supports three main use-cases: LDPRELOAD-mode using libsetns.so LDPRELOAD=./libsetns.so SETNSARGS="..." Running a host command in a container insject...

EUVD-2026-70748

A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addoncenter.cgi of the component Add-On Center. Such manipulation of the argument fname/furl/fflag/floginuser leads to os command injection. It is possible to...