CVE-2024-34102

CVE-2024-34102: Nicht authentifiziertes Magento XXE CVEHunter-Tool zur Erkennung und Ausnutzung von Schwachstellen für CVE-2024-34102 mit asynchroner Leistung. Installation root@kitploit: git clone https://github.com/th3gokul/CVE-2024-34102.git cd CVE-2024-34102 pip install -r requirements.txt...

EUVD-2026-67293

Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device...

CVE-2026-81837

A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-4577

CVE-2024-4577 root@kitploit: usage: CVE-2024-4577.py -h -v RHOST RPORT URL COMMAND PHP CGI CVE-2024-4577 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 positional arguments: RHOST remote host RPORT remote port URL target address COMMAND command to execute e.g. optional arguments:...

BC-WHY-NOT-LEARN-NEW-STUFF-

BC-WHY-NOT-LEARN-NEW-STUFF- HACKING SIP/PJSIP far crashare istanze asterisk remote : https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9...

CVE-2026-81833

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the component CodeIndexManager. Performing a manipulation results in code injection. Remote exploitation of the attack is...

log4j-log4shell-playground

Informazioni Un parco giochi per sperimentare con le mitigazioni della vulnerabilità critica log4j nota anche come Log4Shell CVE-2021-44228. Questo particolare problema risiede nella funzionalità JndiLookup e nella capacità di log4j di interpretare TUTTI gli argomenti di una chiamata di logging. ...

CVE-2026-81833

Roo-Code (RooCodeInc) up to version 3.51.1 is affected by a code injection vulnerability in the optimizeQuery function within src/utils/helpers.ts of the CodeIndexManager component. Manipulation of this function allows remote code injection with low impact on confidentiality, integrity, and avail...

CVE-2026-81833 RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the component CodeIndexManager. Performing a manipulation results in code injection. Remote exploitation of the attack is...

EUVD-2026-67228

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the component CodeIndexManager. Performing a manipulation results in code injection. Remote exploitation of the attack is...

DLHell

DLHell DLHell führt lokales und entferntes Windows-DLL-Proxying über DCOM aus. Install Die folgenden Pakete werden benötigt kann von deiner Distribution abhängen, das folgende Beispiel ist für Debian 12: root@kitploit: sudo apt install -y g++-mingw-w64-x86-64-win32 binutils-mingw-w64-x86-64...

CVE-2022-39802

3242933 – CVE-2022-39802 Vulnerabilità di path traversal nei file in SAP Manufacturing Execution Informazioni generali Rischio: CRITICO Versioni Affette: root@kitploit: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 URL del fornitore: https://sap.com Bug:...

CVE-2025-41646

CVE-2025-41646 - RevPi Webstatus = 2.4.5 Exploit de Bypass de Autenticação Visão Geral Este é um script de exploit em Python3 para CVE-2025-41646 , uma vulnerabilidade de Bypass de Autenticação que afeta RevPi Webstatus = 2.4.5. Detalhes da Vulnerabilidade: ID CVE : CVE-2025-41646 Produto Afetado...

CVE-2023-27997-POC

Usage: python3 cve-2022-42475.py rhost rport lhost lport Esempio: python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 Disclaimer: Questo progetto è realizzato solo a scopo educativo e di test etico. L'utilizzo di questo strumento per attaccare bersagli senza previo consenso reciproco è...

CVE-2003-0264

SLMail 5.5 POP3 PASS Parameter Buffer Overflow Versione del programma: SLMail 5.5 Vulnerabilità: overflow del buffer nel parametro PASS del servizio POP3 porta 110 di Seattle Lab Mail SLMail 5.5 Testato su: Windows 7 x86 Sfruttamento: overflow del buffer remoto Video PoC:...

CVE-2019-9766

CVE-2019-9766 Farei o meu melhor Sobre o CVE Free MP3 CD Ripper É um conversor entre arquivos .mp3 e outros tipos de arquivo convertendo um arquivo. Bug De acordo com o NVD, podemos ver que, na vision 2.6, há um Stack-based Overflow na Área de Buffer. Então podemos criar um Poc para isso. O tipo ...

CVE-2026-81573 Improper Access Control in Local-Only Configuration Commands

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...

CVE-2026-81573

CodeMeter Runtime versions before 8.41a or 9.10 are affected when configured as a server. The configuration command handler fails to enforce network-origin restrictions, allowing arbitrary remote peers to execute commands intended only for local or same-network clients. This enables reading sensi...

CVE-2022-0847-DirtyPipe-Exploit

Une vulnérabilité a été trouvée dans le noyau Linux jusqu'aux versions 5.10.101/5.15.24/5.16.10 système d'exploitation et classée comme critique. Ce problème affecte un traitement inconnu du composant Pipe Handler. La confidentialité, l'intégrité et la disponibilité sont impactées. La faiblesse a...

CVE-2026-81486

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...