EUVD-2026-68184

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custsearchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2026-82540 itsourcecode Sales and Inventory System cust_searchfrm.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custsearchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2026-82540

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/cust_searchfrm.php, triggered by manipulation of the ID parameter. The vulnerable function is not further specified in the provided documents. Remote exploitation is possible with low privi...

ctftool

CTFTOOL Just want to test the SYSTEM exploit? Click here. An Interactive CTF Exploration Tool This is ctftool, an interactive command line tool to experiment with CTF, a little-known protocol used on Windows to implement Text Services. This might be useful for studying Windows internals, debuggin...

CVE-2015-0235-test

CVE-2015-0235-test CVE-2015-0235 の脆弱性をチェックするための Ansible プレイブック。これはシカゴ大学（University of Chigago）が提供したテストプログラムに基づいています（link）。Ansible を使用すると、一度に多数のホストマシンを指定してテストできます。 これは何もパッチ適用や再起動を行いません 、システムが影響を受けているかどうかのみを報告します。 リモートに gcc がインストールされていることを前提としています。 注意！ ホスト上でこれを無闇に実行しないでください。まずコードを読んで何をするか確認してください :...

CVE-2021-3156

CVE-2021-3156 toc 脆弱性の概要 脆弱性番号: CVE-2021-3156 脆弱性スコア: 脆弱性製品: linux sudo 影響範囲: 1.8.2-1.8.31sp12; 1.9.0-1.9.5sp1 利用条件: linux ローカル；sudoがSUIDであり実行可能 利用効果: ローカル権限昇格 ソースコード入手: https://www.sudo.ws/getting/source/ 環境構築 docker 環境: chenaotian/cve-2021-3156 私が自分で構築したdockerでは、以下を提供しています： 1...

rebuff

Rebuff.ai 自己強化型プロンプトインジェクション検出器 Rebuff は、多層防御によって AI アプリケーションをプロンプトインジェクション（PI）攻撃から保護するように設計されています。 Playground • Discord • 機能 • インストール • はじめに • セルフホスティング • コントリビューション • ドキュメント 免責事項 Rebuff はまだプロトタイプであり、プロンプトインジェクション攻撃に対して 100% の保護を提供することはできません ！ 機能 Rebuff は 4 層の防御を提供します: ヒューリスティック: LLM...

vuln-bank

Vulnerable Bank Application 🏦 Una aplicación web deliberadamente vulnerable para practicar pruebas de seguridad de aplicaciones en Web, APIs y LLMs, revisión de código seguro e implementación de seguridad en pipelines de CI/CD. ⚠️ ADVERTENCIA: Esta aplicación es intencionalmente vulnerable y solo...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

AdbNet

adb - Androidデバイス向けのエクスプロイトツール。 脆弱なAndroidデバイスを世界中から検索し、エクスプロイトを実行できるツールです。 機能 root@kitploit: Features: - Post-Exploitation modules to control and tinker with the device you are connected to. - Scanners to search for vulnerable android devices across the world to exploit. - Options for managing h...

telegram-story-scraper

Telegram Story Scraper 📱 Telethon 라이브러리를 사용하여 Telegram 친구들의 스토리를 자동으로 수집하고 다운로드할 수 있는 Python 스크립트입니다. 이 스크립트는 사진과 동영상 스토리를 지속적으로 모니터링하고 메타데이터와 함께 저장합니다. TGSS - 메인 인터페이스 스토리 접근에 관한 중요 참고 사항 ⚠️ Telegram API 제한으로 인해 이 스크립트는 다음 사용자의 스토리만 접근할 수 있습니다: 친구 목록에 추가한 사용자 개인정보 설정에서 스토리 보기를 허용한 사용자 이는 Telegram...

CVE-2026-82539

A memory corruption vulnerability in the setMacFilterRules function of cstecgi.cgi (MAC Filtering component) in TOTOLINK A720R firmware 4.1.5cu.630_B20250509 allows a remote, authenticated attacker to corrupt memory by manipulating the desc argument. CVSS 3.1 scores the issue 9.1 (Critical) with ...

CVE-2026-82539 TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

EUVD-2026-68181

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

ghidra_kernelcache

ghidrakernelcache：一个用于逆向工程的 Ghidra iOS kernelcache 框架 本框架是我在 Kernelcache 逆向工程中的最终成果。我通常通过手动审计内核及其扩展来寻找漏洞，并自动化了大多数我真正希望在 Ghidra 中看到的功能，以加速逆向过程。事实证明，这种方法非常有效且节省了大量时间。该框架适用于 iOS 12/13/14/15 和 macOS 11/12（包括 kernelcache 和单个 KEXT），并将其公开，旨在帮助人们无需费力准备自己的环境即可开始研究 iOS 内核。我相信，该框架（包括其提供的工具集以及一些 IOKit...

espoofer

espoofer espoofer is an open-source testing tool to bypass SPF, DKIM, and DMARC authentication in email systems. It helps mail server administrators and penetration testers to check whether the target email server and client are vulnerable to email spoofing attacks or can be abused to send spoofi...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access e Identity Manager RCE vía SSTI. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...

frp v0.71.0

frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...

wpscvn

wpscvn is a tool for pentesters, website owner to test if their websites had some vulnerable plugins or themes The author does not hold any responsibility for the bad use of this tool, remember that attacking targets without prior consent is illegal and punished by law. requires : Python 3 usage ...

CVE-2023-21768-AFD-for-WinSock-EoP-exploit

CVE-2023-21768-AFD-for-WinSock-EoP-exploit 分析記事はこちら： https://mp.weixin.qq.com/s/9W9puJltbK-xto2A1duqgQ https://www.zoemurmure.top/posts/cve202321768/ Patch Tuesday - Exploit Wednesday: Pwning Windows Ancillary Function Driver for WinSock afd.sys in 24 Hours を参考に独自に作成したもので、権限昇格後の cleanup...