EUVD-2026-67670

None None None No publicly available exploits are known...

CVE-2026-40018

This CVE entry for CVE-2026-40018 is currently a placeholder with no publicly available technical details. The associated vendor is Open-Xchange (Dovecot). Monitor for updates.

EUVD-2026-67667

None None None No publicly available exploits are known...

CVE-2026-40018

None None None No publicly available exploits are known...

CVE-2026-12514

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an unauthenticated visito...

BlockChainConstruction

Prefácio Neste artigo, apresentamos principalmente vários aspectos da auditoria de cadeia pública que merecem atenção. Para auditores de segurança e desenvolvedores de cadeias públicas, este é um projeto digno de referência e reflexão. Arquitetura Antes de apresentar a construção do sistema de...

CVE-2023-28252-

CVE-2023-28252- Erkennung des Exploits CVE-2023-28252. Überwachung der Dateierstellung in dem Verzeichnis, in dem der Exploit die für die Ausnutzung verwendeten Dateien hinterlässt, auf dem festen Pfad im Ordner "C:\Users\Public", "C:\Users\Public.container", "C:\Users\Public\MyLog.blf" und...

PoC

Pedro Ribeiro @pedrib Exploit Dumping Grounds Dieses Repository enthält Informationen, Exploits, Skripte usw., die ich der Öffentlichkeit zugänglich gemacht habe, und ist unter https://github.com/pedrib/PoC zu finden. advisories: alle meine öffentlichen Advisories, Forschungsnotizen usw. Pwn2Own:...

Vulnerability-Disclosure-Policy

Richtlinie zur Offenlegung von Schwachstellen Wir glauben, dass die Offenlegung von Schwachstellen ein Geben und Nehmen ist. Hersteller sowie Forscher müssen an einer koordinierten Offenlegung von Schwachstellen teilnehmen. Wenn Enable Security im Rahmen eigener Forschung Schwachstellen entdeckt,...

dr_robot

root@kitploit: . . . . . . . : \ : \ : \ : . \ : / : . \ \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | || |\ . / |/ . / | | :/ || || :/ :/ || : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

Belati

Belati Belati - Il tradizionale coltellino svizzero per OSINT Belati è uno strumento per la raccolta di dati pubblici e documenti pubblici da siti web e altri servizi a scopo OSINT. Questo strumento è ispirato da Foca e Datasploit per OSINT : Versione corrente v0.2.4 Belati in azione Perché l'ho...

scanless

⚠️ I am no longer maintaining scanless as of August 2023. ⚠️ scanless This is a Python command-line utility and library for using websites that can perform port scans on your behalf. Supported Online Port Scanners ipfingerprints spiderip standingtech viewdns yougetsignal Install Do it up:...

Windows-Exploit-Suggester

DESCRIPTION Questo strumento confronta i livelli di patch di un target con il database delle vulnerabilità Microsoft per rilevare potenziali patch mancanti sul target. Notifica inoltre all'utente se sono disponibili exploit pubblici e moduli Metasploit per i bollettini mancanti. Richiede l'output...

gitls

Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline This tool is available when the repository, such as github, is included in the bugbounty scope. Sometimes specified as an org name or user name rather than a specific repository, you can use this tool to extract url...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

osintbuddy

Ich habe noch keine Daten. Es ist ein kapitaler Fehler, zu theoretisieren, bevor man Daten hat. Unmerklich beginnt man, Fakten an Theorien anzupassen, anstatt Theorien an Fakten. | plugins-system | osintbuddy.com | osintbuddy discord | entities | pypi package | Einführung in OSINTBuddy Hinweis -...

bug-bounty-domains

DOMINI PER BUG BOUNTY Domini appartenenti ai programmi di bug bounty pubblici più rinomati. NON PER PROGRAMMI NON MONETARI O PRIVATI !https://assets.kitploit.com/production/public/readmes/6941/7164554a880fd0545e5dc196593b59979d6603d...

EUVD-2026-67298

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...

CVE-2026-81847

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...