CVE-2024-27954

CVE-2024-27954 - WordPress wp-automatic 插件 LFI 扫描器 该项目提供了一个基于Python的本地文件包含（LFI）漏洞扫描器，针对 CVE-2024-27954 ，这是WordPress插件 wp-automatic 中发现的一个严重缺陷。该漏洞允许未经身份验证的攻击者使用 file:// 注入向量读取服务器上的任意文件。 🚨 漏洞概要 CVE-ID: CVE-2024-27954 组件: WordPress wp-automatic 插件 影响: 本地文件包含 LFI 风险: 远程未经身份验证的文件读取 例如...

CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Shellshock Exploitation Script 🎯💻🔍 This Python script exploits the Shellshock vulnerability CVE-2014-6271 to execute commands remotely or establish a reverse shell on a vulnerable target. 🛠️⚠️ ⚠ Disclaimer 🚨❗ This script is intended for educational and authorized...

CVE-2024-27956-RCE-File-Package

CVE-2024-27956-RCE File Package Contents: 1. exploit.py Original Creator:https://GitHub.com/diego-tella 2. modifiedexploit.py Modified with an ignore ssl verification option 3. Screenshot 4. wpValvePressplugin.py Python script using URI parameters to search for vulnerable wp plugin...

CVE-2023-34924

CVE-2023-34924 A buffer over flow vulnerability of H3CMagicB1STV100R012 router CVE info: root@kitploit: • the name of an affected Product: H3C Magic B1STW B1STV100R012 router • the affected or fixed versions: affected version: H3C-Magic-B1STW - H3CMagicB1STV100R012. Fixed version: none • the CVE ...

CVE-2024-54507

SUSCTL：CVE-2024-54507 引入于 xnu-11215.1.10，修复于 xnu-11215.61.5。 分析文章：https://jprx.io/cve-2024-54507...

cve-2022-26134

CVE-2022-26134 by 1vere$k Atlassian Jira エクスプロイトのためのシンプルな PoC です。認証されていないユーザーに対してサーバー上でコード実行を提供します。 CVE-2022-26134 - OGNL インジェクション脆弱性。 Atlassian Confluence 7.18 以前の製品に影響を与えるリモートコード実行脆弱性を悪用する概念実証スクリプト。OGNL インジェクションの脆弱性により、認証されていないユーザーが Confluence Server または Data Center インスタンス上で任意のコードを実行できます。 Paylo...

gemma_crackme_tutorial

Usando el modelo de IA local Google Gemma 4 E4B para realizar ingeniería inversa de un Crackme simple Estaba jugando con el nuevo modelo local de pesos abiertos Gemma E4B que Google lanzó, y para mi sorpresa estaba viendo un gran éxito al usarlo para escenarios locales de ingeniería inversa sin...

DG-Home1

Authenticated OS Command Injection in ElphaPex DG Home1 Web Fi...

AI-Security-Newsletter

AI Security Newsletter - June 2026 A digest of AI security research, insights, reports, upcoming events, and tools & resources. Follow the AISecHub community and our LinkedIn group for additional updates. Also check out our project, Awesome AI Security. Sponsored by InnovGuard.com - Technology...

CVE-2026-9806

CVE-2026-9806 CVE-2026-9806 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting CTI Transmute versions prior to the patched release.The flaw exists in the notification panel, where notification messages containing user-controlled convert names are rendered in the notification bell...

longtongue

Generate customized Password/Passphrase wordlist based on target information Coded with 💙 by edoardottt Share on Twitter! Installation ⬇️ pipx root@kitploit: pipx install longtongue Source root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r...

longtongue

Generar lista personalizada de contraseñas/frases basada en información del objetivo Codificado con 💙 por edoardottt ¡Compartir en Twitter! Instalación ⬇️ pipx root@kitploit: pipx install longtongue Código fuente root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue...

CVE-2025-41646

CVE-2025-41646 - RevPi Webstatus = 2.4.5 Authentication Bypass Exploit Overview This is a Python3 exploit script for CVE-2025-41646 , an Authentication Bypass vulnerability affecting RevPi Webstatus = 2.4.5. Vulnerability Details: CVE ID : CVE-2025-41646 Affected Product : RevPi Webstatus = 2.4.5...

grepmarx

Grepmarx - Plataforma de Seguridad de Aplicaciones Grepmarx es una aplicación web que proporciona una plataforma única para comprender, analizar e identificar rápidamente vulnerabilidades en bases de código posiblemente grandes y desconocidas. Características Capacidades SAST Pruebas de Seguridad...

CVE-2024-23774

CVE-2024-23774 - Unquoted Windows Service Path Vulnerability Information will follow in due course...

TPLink-VN020-DoS

TPLink-VN020-DoS TPLink VN020-F3v Denial of Service CVE-2024-12342 Usage: python3 CVE-2024-12342.py 192.168.1.1 python3 CVE-2024-12342.py 192.168.1.1 -p 8080...

exploithosting

This repository does not have a README...

CVE-2023-35671

The article has been moved here: https://mrtiz.github.io/CVE-2023-35671...

wetland

Wetland Wetland is a high interaction SSH honeypot，designed to log brute force attacks.What's more, wetland will log shell、scp、sftp、exec-command、direct-forward、reverse-forward interation performded by the attacker. Wetland is based on python ssh module paramiko. And wetland runs as a...

quantum-security-project

OWASP Quantum Security Project Prepare Today. Protect tomorrow. An official OWASP community project mapping the security risks of the quantum era in a practical, vendor-neutral, and risk-based way - the antidote to hype and fear. Status: Bootstrap phase. The OWASP Top 10 for Quantum Security Risk...