PT-ToolKit

PT-ToolKit 渗透测试或红队演练期间有用的漏洞利用程序、PowerShell脚本和可执行文件 大多数工具和脚本针对Active Directory环境和Windows平台 目录 漏洞利用程序 PowerShell脚本 Windows可执行文件 漏洞利用程序： 一些针对CVE的漏洞利用程序，我在GitHub上找到并编译了它们 所有漏洞利用程序都有源代码和描述 PowerShell脚本： 我在网上找到的脚本，大部分来自GitHub，有些是我自己编写的 它们在渗透测试或红队演练中非常有用，请明智使用 脚本针对Windows/域环境 Windows可执行文件...

IoT-PT-v1

🛠️ IoT-PT OS v1 モノのインターネット侵入テストOS - バージョン1 📦 IoT-PT OS v1とは？ IoT-PT OS v1 は、IoTセキュリティ評価のために特別に設計された侵入テスト用仮想マシンです。ファームウェア分析、組み込みシステム攻撃、ワイヤレスハッキングなどに特化した、あらかじめ設定されたツール、スクリプト、環境が含まれています。 💾 ダウンロード 直接リンク : IoT-PT OSv1をダウンロード チェックサム: root@kitploit: MD5: d9c20057b14cfa3fb25f744813b828df SHA1:...

h3c-pt-tools

h3c-pt-tools 华为/H3C/HP 渗透测试工具 一个小型脚本集合，用于协助对包含华为和/或HP/H3C设备的网络 进行渗透测试/审计。...

CVE-2025-5304

CVE-2025-5304 PT Project Notebooks 1.0.0 - 1.1.3 - 缺少授权导致未授权权限提升 🚀 PT Project Notebooks ≤ 1.1.3 — 未授权权限提升 CVE-2025-5304 PT Project Notebooks 版本 1.0.0–1.1.3 的 PoC 与漏洞利用辅助工具：wpnbptonewusersadd 函数缺少授权，允许未认证攻击者通过 admin-ajax.php 将指定用户的权限提升至 管理员 。 🧾 描述 WordPress 的 PT Project Notebooks 插件因函数...

PT-2026-86469

Name of the Vulnerable Software and Affected Versions Tenda HG10 affected versions not specified Description A buffer overflow exists in the Boa Web Server component within the formWanRedirect function of the /boaform/formWanRedirect endpoint. A remote attacker can trigger this issue by...

CVE-2026-57159 PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assignptandupdatemap in pjmedia/src/pjmedia/sdpneg.c uses...

PT-2026-84847

Name of the Vulnerable Software and Affected Versions Delinea Secret Server On-Prem versions 10.6.0 through 11.7.61 Delinea Secret Server On-Prem versions 11.8.0 through 11.8.1 Delinea Secret Server On-Prem versions 11.9.0 through 11.9.47 Delinea Secret Server On-Prem versions 12.0.0 through...

PT-2026-84469

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user with low-privileged access can execute arbitrary commands on the underlying operating system by submitting crafted input through the...

PT-2026-84170

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 155 Description An issue exists that allows for privilege escalation within the application. Recommendations Update to version 155...

PT-2026-84481

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw in a management component allows an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation enables remote command...

PT-2026-83566

Name of the Vulnerable Software and Affected Versions D-Link DIR-825M version 1.1.8 Description A command injection issue exists in the System Command Execution component. A remote attacker can manipulate the sysCmd argument within the sub 456CF4 function of the /boafrm/formSysCmd endpoint to...

PT-2026-83063

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description No information is available regarding the nature of this issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2026-83050

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description An attacker can send a crafted email with headers containing an excessive number of email addresses or MIME parameters. When the message is parsed via IMAP, it leads to excessive memory...

PT-2026-83070

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description A host configured as a trusted proxy can send forwarding information containing a NUL byte. This causes the login process to crash during the subsequent login attempt, leading to process...

PT-2026-83060

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description No information is available regarding the nature of this issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2026-82136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the ovpn component when removing a missing key. The function ovpn crypto kill key assumes that both crypto slots are populated and dereferences them before...

PT-2026-80872

CVE-2025-37654 Patch https://t.co/87BYrglZYN Vulnerability Notification: https://t.co/xhLrNnfyrO...

PT-2026-79623

Content removed...

PT-2026-79624

Content removed...

PT-2026-79296

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...