CVE-2026-82256 SvelteKit before 2.69.1 Denial of Service via Remote Form

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-82253 gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass

gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...

EUVD-2026-67705

gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...

CVE-2026-82253 gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass

gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...

CVE-2026-82253

gitoxide (Rust crates gix ≤ 0.72.0 and gix-validate ≤ 0.10.0 ) is affected by a path traversal vulnerability. The submodule name validation in gix-validate only checks the first occurrence of .. via name.find(b".."), allowing crafted names like a..b/../../../.git/ to bypass the check. Additionall...

CVE-2022-22963-PoC

CVE-2022-22963 RCE PoC Minimalbeispiel zur Reproduktion der Remote-Code-Ausführung CVE-2022-22963 in org.springframework.cloud:spring-cloud-function-core. Exploit Server starten root@kitploit: mvn spring-boot:run Anfrage stellen root@kitploit: curl -X POST -H...

n8n-cve-2025-68613-thm

CVE-2025-68613 – Sfruttamento Critico di RCE in n8n Panoramica Questo repository documenta uno sfruttamento pratico di CVE-2025-68613 CVSS 9.9 , una vulnerabilità critica di esecuzione remota di codice che colpisce la piattaforma di automazione dei flussi di lavoro n8n versioni dalla 0.211.0 alla...

awesome-llvm-security

awesome-llvm-security If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. root@kitploit: Mostra rispetto a tutti i progetti qui sotto, perfette opere d'arte :salutingface: Come contribuire? -...

CVE-2023-4911

CVE-2023-4911-Looney-Tunables Workshop Looney Tunables sull'escalation dei privilegi locali CVE-2023-4911 solo a scopo educativo Link: Video di IPPSEC Post sul blog di Qualsys Dettagli tecnici di Qualsys Script Python POC dell'exploit Codice sorgente GLIBC Documentazione dei tunables GLIBC...

CVE-2017-7921-rewrite

CVE-2017-7921-rewrite semplice riscrittura di CVE-2017-7921 in python fatta da me. solo per scopi educativi! abbastanza semplice, non ho incluso controlli per cose come IP e controlli avanzati per la risposta e simili. L'ho testato su una telecamera su cui sono autorizzato a testarlo nella mia re...

CVE-2025-14998

Wordpress Branda – White Label & Branding, Free Login Page Customizer = 3.4.24 - Nicht authentifizierte Privilegieneskalation durch Kontoübernahme CVE-2025-14998 Das Branda-Plugin für WordPress ist in allen Versionen bis einschließlich 3.4.24 anfällig für eine Privilegieneskalation durch...

DPAPISnoop

DPAPISnoop Uno strumento C che estrae hash DPAPI craccabili dalle MasterKey e dai file CREDHIST degli utenti. Prende di mira sia la MasterKey $DPAPImk$ sia l'intera catena CREDHIST $credhist$, con supporto per percorsi locali e condivisioni SMB remote. Cosa estrae Hash MasterKey $DPAPImk$ La...

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the...

Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty

Summary There are multiple vulnerabilities in Java, JavaScript and IBM WebSphere Application Server Liberty used by IBM Application Modernization Accelerator. Vulnerability Details CVEID:CVE-2026-9320 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server ...

Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty

Summary There are multiple vulnerabilities in Java, JavaScript and IBM WebSphere Application Server Liberty used by IBM Transformation Advisor. Vulnerability Details CVEID:CVE-2026-75838 DESCRIPTION: DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in INPLACE sanitization whe...

Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses ansible_core-2.19.11, postcss-8.5.10 and dompurify-3.4.11 which are vulnerable to CVE-2026-16493, CVE-2026-45623, CVE-2026-69153 and CVE-2026-66010

Summary IBM Maximo Application Suite - Cluster Performance Insights uses ansiblecore-2.19.11, postcss-8.5.10 and dompurify-3.4.11 which are vulnerable to CVE-2026-16493, CVE-2026-45623, CVE-2026-69153 and CVE-2026-66010. This bulletin contains information regarding these vulnerabilities and their...

CVE-2025-55182

Caccia alla CVE-2025-55182 Utilizzo dell'Intelligence Open Source per Identificare Sistemi Vulnerabili Motore di Ricerca Shodan Vai su Shodan. Nella barra di ricerca, inserisci la seguente query per trovare dispositivi che eseguono la versione vulnerabile del framework Next.js: root@kitploit:...

Tenda-Router-VR-and-Exploit

Tenda-Router-VR-and-Exploit Questo write-up mostra esattamente come ho emulato il webserver del firmware AC15 V15.03.05.19 con QEMU, come l'ho reso raggiungibile dal browser dell'host e come ho esercitato l'handler vulnerabile /goform/setUsbUnload CVE-2020-10987 per ottenere l'esecuzione di coman...

n8n-CVE-2025-68613-TryHackMe

TryHackMe-Raum: n8n: CVE-2025-68613 Spieler: J4ck3LSyN Host: ... Benutzername: [email protected] Passwort: Try12345! Vorgehensweise Payload: function return this.process.mainModule.require'childprocess'.execSync'cat flag.txt'.toString Payload 2: function return...

CVE-2022-22963_Reverse-Shell-Exploit

Exploit Reverse Shell CVE-2022-22963 Questo è uno script Python che sfrutta CVE-2022-22963, una vulnerabilità di esecuzione di codice in remoto in Spring Cloud Function che consente agli attaccanti di eseguire codice arbitrario su un server vulnerabile. L'exploit utilizza l'endpoint vulnerabile...