tomcat: Apache Tomcat: Authentication bypass via missing critical step in JNDIRealm GSSAPI configuration

A flaw was found in Apache Tomcat. When the JNDIRealm was configured to authenticate binds using GSSAPI, an attacker could exploit a missing critical step in the authentication process. This allowed the attacker to bypass password verification and authenticate without providing the correct...

CVE-2026-85078

A flaw was found in Sanic, an open-source Python web server/framework. A remote, unauthenticated attacker can exploit incomplete handling of HTTP/1.1 chunked-body requests. By injecting malicious data into the request's trailer section, the attacker can cause Sanic to process a hidden second...

My-CVEs

Una lista de vulnerabilidades que encontré. Algunas vulnerabilidades incluyen análisis técnicos detallados, exploits o incluso tutoriales de sesiones de fuzzing. Algunas vulnerabilidades no tienen CVE porque los mantenedores me ignoraron, o porque un mantenedor no estuvo de acuerdo en que fuera u...

tomcat: Apache Tomcat: Authentication bypass via missing critical step in JNDIRealm GSSAPI configuration

A flaw was found in Apache Tomcat. When the JNDIRealm was configured to authenticate binds using GSSAPI, an attacker could exploit a missing critical step in the authentication process. This allowed the attacker to bypass password verification and authenticate without providing the correct...

tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

tomcat-coyote: tomcat: Improper Authorization allows security bypass

In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application...

tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve

A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...

CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow

CVE-2025-5548 — Buffer Overflow en FreeFloat FTP Server 1.0 Laboratorio de análisis y explotación de vulnerabilidades · Exploit Development · Windows x86 ¿De qué trata este repositorio? Este repositorio documenta de forma completa el proceso de análisis y explotación de la vulnerabilidad...

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - Incorrect Access Control - Directory Listing Description : A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring...

CVE-2026-21962

🚨 CVE-2026-21962 - Vulnerabilidad Crítica de Omisión de Autenticación 🧾 Resumen 🔥 Una vulnerabilidad de severidad máxima 10.0 que permite acceso remoto sin autenticación a sistemas middleware de Oracle. root@kitploit: CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category :...

BEAST-PoC

BEAST-PoC ataque de texto plano elegido Esta prueba de concepto se centra en la criptografía detrás del ataque BEAST Browser Exploit Against SSL/TLS presentado por Thai Duong y Juliano Rizzo el 23 de septiembre de 2011. Esto es un ataque de texto plano elegido y permite recuperar información...

CVE-2025-10576

CVE-2025-10576 HP Sound Research SECOMNService Escalation of Privilege. Weak registry permissions allows any user to create a registry symlink and force the SECOMNService service to create an arbitrary registry key. How to: root@kitploit: 1. soundresearchpoc.exe prepare 2. Restart SECOMNService o...

writeup-cve-2019-19194

Análisis de CVE-2019-19194 Este es un análisis y una Prueba de Concepto teórica de CVE-2019-19194. ⚠️ Este CVE fue encontrado por https://asset-group.github.io/disclosures/sweyntooth/ Tabla de contenido Resumen Software y versión vulnerable Visión general Pila de protocolos y arquitectura...

CVE-2022-40146_Exploit_Jar

Apache Batik SSRF a RCE Jar Exploit Enlace del componente https://github.com/apache/xmlgraphics-batik Blog https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading Uso Modifica la línea 11 en...

CVE-2019-15107

RCE sin autenticación a través de la puerta trasera de Webmin CVE-2019–15107 Resumen CVE: CVE-2019–15107 Versión afectada: Webmin te abrirá un shell...

CVE-2023-2598

CVE-2023-2598 ¿Qué es iouring? iouring es una interfaz de llamadas al sistema para Linux. Hasta ahora ha soportado casi todas las llamadas al sistema, no solo read y write inicialmente. Permite que una aplicación inicie llamadas al sistema que pueden realizarse de forma asíncrona. Colas de Sumisi...

Exploits + Shellcode + GHDB

Repositorio Git de Exploit Database Este es un repositorio oficial de The Exploit Database, un proyecto patrocinado por Offensive Security. Nuestros repositorios son: Exploits y Shellcodes: gitlab.com/exploit-database/exploitdb Exploits binarios: gitlab.com/exploit-database/exploitdb-bin-sploits...

StackRot

StackRot CVE-2023-3269: Linux kernel privilege escalation vulnerability GitHub-CI-verified exploit A flaw was found in the handling of stack expansion in the Linux kernel 6.1 through 6.4, aka "Stack Rot". The maple tree, responsible for managing virtual memory areas, can undergo node replacement...

exploit-CVE-2020-24815

exploit-CVE-2020-24815.py este es mi primer exploit para CVE-2020-24815 pon la ruta POST después de la url !!!! Ejemplo: si el script no funciona cambia la cookie en el script root@kitploit: $ - pip install -r requirements.txt arreglar problema pdftotext no instalado: root@kitploit: $ - sudo...

CVE-2024-22026

CVE-2024-22026 POC de exploit para CVE-2024-22026 que afecta a Ivanti EPMM "MobileIron Core" CVE-2024-22026 es una vulnerabilidad de escalada de privilegios local en las versiones del servidor Ivanti EPMM anteriormente MobileIron anteriores a 12.1.0.0, 12.0.0.0 y 11.12.0.1. Esta vulnerabilidad...