Umbraco <7.4.0- Server-Side Request Forgery

Umbraco before version 7.4.0 contains a server-side request forgery vulnerability in feedproxy.aspx that allows attackers to send arbitrary HTTP GET requests via http://local/Umbraco/feedproxy.aspx?url=http://127.0.0.1:80/index. id: CVE-2015-8813 info: name: Umbraco 7.4.0- Server-Side Request...

Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. id: CVE-2017-1000029 info: name: Oracle GlassFish Server Open Source Edition 3.0.1 - Local File...

Cacti < 1.2.25 Insecure Deserialization

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. id: CVE-2023-30534 info: name: Cacti 1.2.25 Insecure Deserialization author: k0pak4 severity: medium description: | Cacti is an open source...

Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

Processwire CMS <2.7.1 - Local File Inclusion

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...

LionWiki <3.2.12 - Local File Inclusion

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion. id: CVE-2020-27191 info: name: LionWiki 3.2.12 - Local File Inclusion author: 0xAkoko severity: high description: LionWiki before...

ThinkPHP < 3.2.4 - Remote Code Execution

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via the s parameter in index.php through the invokefunction functionality. id: CVE-2019-9082 info: name: ThinkPHP 3.2.4 - Remote Code Execution author: 0xanis severity: high description: |...

DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been...

Node.JS System Information Library <5.3.1 - Remote Command Injection

Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. id: CVE-2021-21315 info: name: Node.JS System...

DataEase - Remote Code Execution

DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...

CipherGist

如果您觉得这个 GitHub 仓库有用，请考虑给它一个星标！⭐️ 🛡️ CipherGist - 通过 GitHub Gist 实现端到端加密消息传递 CipherGist 是一个轻量级、安全、开源的加密信使，利用 GitHub Gist 作为后端实现私密通信。它采用 NaCl libsodium 进行最先进的加密，确保只有预期的接收者才能解密您的消息。没有中心化服务器，没有元数据跟踪——只有纯加密消息传递。 ✨ 特性 ✅ 端到端加密 – 使用 Ed25519 签名 和 X25519 加密 实现安全通信。 ✅ 无中心服务器 – 消息通过 GitHub Gist 存储和交换。 ✅ 自销毁密钥...

Door404

Door404 Door404 是由MrSqar 和 Rizer 开发的开源项目 该项目开发基于两个原因 第一 " 帮助初学者学习编程。" 第二 " 帮助新手服务器管理员学习新的保护技巧" 要求 PHP PHP CUrl 操作系统 Linux 屏幕截图 视频 : 许可证 DWTFPL root@kitploit: DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION...

avet

AntiVirus Evasion Tool AVET is not being further developed due to technical development and time constraints. AVET is an AntiVirus Evasion Tool, which was developed for making life easier for pentesters and for experimenting with antivirus evasion techniques, as well as other methods used by...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

Atlas

Atlas - 快速SQLMap Tamper脚本建议工具 v1.0 Atlas 是一款开源工具，可以根据返回的状态码建议 SQLMap 的 tamper 脚本，以绕过 WAF/IDS/IPS。 截图 安装 root@kitploit: $ git clone https://github.com/m4ll0k/Atlas.git atlas $ cd atlas $ python atlas.py python3+ 使用方法 root@kitploit: $ python atlas.py --url http://site.com/index.php?id=PriceASC...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

GCTI

GCTI Este repositorio contiene las firmas de detección de código abierto de GCTI...

Endurance-Wiper

Endurance-Wiper Beta - Open Source Un pequeño malware wiper escrito en C utilizando el framework .NET. Si vienes de Twitter o de cualquier otra fuente, puedes ver claramente que esto está en desarrollo activo. Eres libre de consultar las actualizaciones aquí...

certificate-ripper

Certificate Ripper 🔐 Una herramienta CLI para extraer certificados de servidor Demo...

TJ-OSINT-Notebook

TJ-OSINT-Notebook Lanzamiento inicial 18 de noviembre de 2022 Propósito principal: Este Notebook de OSINT proporciona una visión general de las herramientas, técnicas y recursos que utilizo en una variedad de situaciones para realizar operaciones de reconocimiento y OSINT. Este Notebook me ha...