213813 matches found
CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter
CVE-2026-5050 – Blind LDAP Injection via Unescaped Filter Program Code Python with ldap3 simulation root@kitploit: ldapserversim.py - Simulated LDAP authentication server from flask import Flask, request, jsonify app = Flaskname Fake user database USERS = 'admin': 'password': 'secret', 'role':...
CVE-2026-58025
CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry Import WikiImporter → LogEntryBase::extractParams → unserialize user-controlled logparams → RCE Overview CVE-2026-58025 is a critical CVSS 9.8 deserialization of untrusted data vulnerability in MediaWiki Wikimedia Foundation. The...
urlgrab
Welcome to urlgrab 👋 A golang utility to spider through a website searching for additional links with support for JavaScript rendering. Install root@kitploit: go get -u github.com/iamstoxe/urlgrab Features Customizable Parallelism Ability to Render JavaScript including Single Page Applications su...
subdosec
Subdosec Subdomain takeover scanner & reconnaissance tool. Install • Usage • Web Based • Contribution • Online scan • Acknowledgments Subdosec is a fast and accurate subdomain takeover scanner with no false positives, featuring a public database of vulnerable subdomains and detailed non-vulnerabl...
ssrfuzz
SSRFUZZ SSRFuzz es una herramienta para encontrar vulnerabilidades de Server Side Request Forgery, con capacidades de encadenamiento CRLF ¿Por qué? Quería escribir una herramienta en Golang por concurrencia Quería fuzzear parámetros para vulnerabilidades SSRF, así como fuzzear tanto rutas como...
ssrfuzz
SSRFUZZ SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities Why? I wanted to write a tool in Golang for concurrency I wanted to fuzz parameters for SSRF vulnerablities, as well as fuzz both paths and parameters for CRLF injections I was inspired ...
InfectPE
Using this tool you can inject x-code/shellcode into PE file. InjectPE works only with 32-bit executable files. Why you need InjectPE? You can test your security products. Use in a phishing campaign. Learn how PE injection works. ...and so on. In the project, there is hardcoded x-code of...
magnus_billing_7.3.0_RCE_CVE-2023-30258
magnusbilling7.3.0RCECVE-2023-30258 There is a remote code execution vulnerability in magnus billing 7.3.0, in the parameter "democ" from the "icepay.php" resource, where you can escape the query and execute the command you want. VULNERABLE CODE root@kitploit: if isset$GET'democ' if...
GHSA-4W3W-2RP5-G8JM xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed
Summary Element.setAttribute in @xmldom/xmldom bypasses attribute name validation by calling the private createAttributename method, which performs no validation. The public createAttribute method correctly validates names against an anchored QName pattern, but setAttribute never uses it. The...
xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed
Summary Element.setAttribute in @xmldom/xmldom bypasses attribute name validation by calling the private createAttributename method, which performs no validation. The public createAttribute method correctly validates names against an anchored QName pattern, but setAttribute never uses it. The...
CVE-2024-51818
CVE-2024-51818 Fancy Product Designer = 6.4.3 - Unauthenticated SQL Injection Description The Fancy Product Designer plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 6.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient...
JudasDNS
Judas DNS root@kitploit: ,, 7MMF' 7MM 7MM"""Yb. 7MN. 7MF'.M"""bgd MM MM MM Yb. MMN. M ,MI "Y MM 7MM 7MM ,M""bMM ,6"Yb. ,pP"Ybd MM Mb M YMb M MMb. MM MM MM ,AP MM 8 MM 8I " MM MM M MN. M YMMNq. MM MM MM 8MI MM ,pm9MM YMMMa. MM ,MP M MM.M . MM O MM MM MM Mb MM 8M MM L. I8 MM ,dP' M YMM Mb dM Ymmm9...
SharpDPAPI
SharpDPAPI SharpDPAPI is a C port of some DPAPI functionality from @gentilkiwi's Mimikatz project. I did not come up with this logic, it is simply a port from Mimikatz in order to better understand the process and operationalize it to fit our workflow. The SharpChrome subproject is an adaptation ...
NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions
Summary NLTK's Text.findall and TokenSearcher.findall methods accept user-supplied regular expressions and pass them to the Python re engine without timeout or validation, enabling catastrophic backtracking ReDoS. This issue is isolated to the nltk.text module and was resolved in a prior commit...
GHSA-RRV8-H7P8-RX55 NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions
Summary NLTK's Text.findall and TokenSearcher.findall methods accept user-supplied regular expressions and pass them to the Python re engine without timeout or validation, enabling catastrophic backtracking ReDoS. This issue is isolated to the nltk.text module and was resolved in a prior commit...
GuardReasoner-VL
GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning Yue Liu, Shengfang Zhai, Mingzhe Du Yulin Chen, Tri Cao, Hongcheng Gao, Cheng Wang Xinfeng Li, Kun Wang, Junfeng Fang, Jiaheng Zhang, Bryan Hooi 1National University of Singapore, 2Nanyang Technological University To enhance the safety ...
CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing
4. CVE-2026-2828 – WebGPU Cross‑Origin Pixel Stealing via Timing Overview A malicious website uses WebGPU compute shader timing to measure rendering time of a cross‑origin iframe, recovering pixel values of sensitive content e.g., banking details. Severity: High Information Disclosure...
ParsingPeas
ParsingPeas 🥒 Recopilación automatizada de PEASS + un informe HTML limpio y portátil para trabajo de escalada de privilegios en CTF y laboratorios. Ejecuta un solo comando en el objetivo. ParsingPeas obtiene LinPEAS/WinPEAS desde tu host Kali, ejecuta el escaneo, envía la salida de vuelta y la...
asnmap
Go CLI and Library for quickly mapping organization network ranges using ASN information. Features • Installation • Usage • Running asnmap • Join Discord Features ASN to CIDR Lookup ORG to CIDR Lookup DNS to CIDR Lookup IP to CIDR Lookup ASN/DNS/IP/ORG input JSON/CSV/TEXT output STD IN/OUT suppor...