golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

my-CVE-2021-1675

= Print Nightmare Analysis Report :imagesdir: Figures :toc: :icons: font :figure-caption: Figure :xrefstyle: short :pdf-theme: basic-theme.yml On June 29, 2021, a very severe Windows Print Spooler vulnerability was exposed as a 0-day, with a base score of 8.8, and was published on GitHub now...

CVE-2026-6009

⚠️ Disclaimer: This repository is for educational purposes and authorized security testing only. Do not use against systems you do not own or have explicit written permission to test. CVE-2026-6009 Proof of Concept Summary The Jaspersoft report library version = 7.0.3 is vulnerable to a remote cod...

CVE-2023-4281

ID de CVE: CVE-2023-4281 Tipo de vulnerabilidad: Suplantación de dirección IP Descripción: El complemento Activity Log recupera las direcciones IP de los clientes desde cabeceras potencialmente no confiables, lo que permite a un atacante manipular su valor. Esto puede usarse para ocultar el orige...

CVE-2026-60004-Gitea-Validator

🫖 Validador CVE-2026-60004 para Gitea Una herramienta independiente de descubrimiento, evaluación y validación correlacionada con contrato para la vulnerabilidad de ejecución remota de código en el Git-hook diffpatch de Gitea. scanner.py ofrece a pentesters, defensores e investigadores de segurid...

etherblob-explorer

EtherBlob Explorer Search and extract blob files on the Ethereum network using Etherscan.io API. Introduction EtherBlob Explorer is a tool intended for researchers, analysts, CTF players or anyone curious enough wanting to search for different kinds of files or any meaningful human-supplied data ...

eyeballer

Eyeballer Give those screenshots of yours a quick eyeballing. Eyeballer is meant for large-scope network penetration tests where you need to find "interesting" targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal EyeWitness or GoWitness and th...

PressVector

🧨 PressVector — WordPress CVE-2026-63030 / CVE-2026-60137 Exploitation Framework ⚡ Advanced Pre-Auth RCE & Blind SQLi Exploitation Framework for WordPress Core 📌 Overview PressVector is a comprehensive, fully automated exploitation framework targeting CVE-2026-63030 and CVE-2026-60137 — two...

CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503 Unauthenticated SQL injection CVE-2025-59213 exploit This script exploits the CVE-2025-59213 vulnerability, which allows an unauthenticated attacker with network access to a Management Point to execute arbitrary SQL queries on the site databas...

CVE-2026-44262

dedoc/scramble RCE CVE-2026-44262 PoC 📜 Description CVE-2026-44262 is an unauthenticated Remote Code Execution vulnerability in dedoc/scramble, a Laravel API documentation generator. NodeRulesEvaluator::doEvaluateExpression calls extract$variables before eval"return $code;". When a controller...

CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 Descripción Este script está diseñado para explotar la vulnerabilidad de divulgación de memoria heap conocida como CVE-2025-14847 "MongoBleed" en MongoDB Server. Al enviar paquetes OPMSG comprimidos con zlib especialmente diseñados y con una longitud de documento...

tetragon-dirtyfrag

tetragon-dirtyfrag Blocking the DirtyFrag Linux privilege-escalation chain CVE-2026-43284 / CVE-2026-43500 at runtime with a Cilium Tetragon TracingPolicy. The policy SIGKILLs the public proof-of-concept at its socket-setup step, before it reaches the page-cache write that would give it root. Wha...

frida-extract

FridaExtract FridaExtract is a Frida.re based RunPE extraction tool. RunPE type injection is a common technique used by malware to hide code within another process. It also happens to be the final stage in a lot of packers : NOTE: Frida now also supports extraction of injected PE files using the...

pyjadx

pyjadx Enlaces de Python para JADX a través de JPype. Descompila archivos APK y DEX de Android a código fuente Java desde Python. root@kitploit: from pyjadx import Jadx with Jadx"app.apk" as jadx: for cls in jadx.classes: printcls.fullname printcls.code ¿Por qué pyjadx? JADX es el descompilador d...

CVE-2026-14894

CVE-2026-14894 — Super Forms: RCE por subida de archivos no autenticada Fuga de nonce → Subida datauristring → Ejecución de código Descripción general CVE-2026-14894 es una vulnerabilidad de subida arbitraria de archivos no autenticada de severidad crítica CVSS 9.8 en el plugin de WordPress Super...

WP-Contest-Gallery-28.1.4-Exploit

⚠️ En pruebas Este PoC se está probando y refinando activamente. Las características pueden cambiar entre versiones. CVE-2026-3180 WordPress Contest Gallery — Inyección SQL Ciega Sin Autenticar Herramienta de evaluación de prueba de concepto para CVE-2026-3180 Autor: Sudeepa Wanigarathna ·...

CVE-2025-24893

XWiki CVE-2025-24893 Prueba de Concepto Autores : Net.Doge y Infinit3i Este script de Python explota CVE-2025-24893 , una vulnerabilidad de ejecución remota de código RCE en XWiki causada por un sandboxing inadecuado en macros de Groovy renderizadas de forma asíncrona. Permite la ejecución...

gixy

GIXY Overview Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection. Currently supported Python versions are 2.7, 3.5, 3.6 and 3.7. Disclaimer: Gixy is well tested only on GNU/Linux, other OSs may have some issues...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...

CVE-2025-39247

CVE-2025-39247 Objetivo: HikCentral Professional HCMP, servidor central VMS CVE: CVE-2025-39247 — Vulnerabilidad de Control de Acceso CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Afectado: V2.3.1 – V2.6.2 y V3.0.0 Corregido: V2.6.3 / V3.0.1 / Fix-Pack CVE-2025-39247 Divulgado: 2025-08-28 Fec...