Lucene search
+L

14862 matches found

Kitploit
Kitploit
added 2026/09/12 12:16 p.m.7 views

ios_Restriction_PassCode_Crack---Python-version

ios Restriction PassCode Crack - Versión Python Resumen ios Restriction PassCode Cracker , esta versión de la aplicación está escrita en el lenguaje de programación Python, la cual se utiliza para descifrar el Restriction PassCode de iphone/ipad. iphone/ipad 访问限制密码破解 Método el mismo que la versió...

6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/09/12 11:42 a.m.22 views

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

8.5CVSS5.7AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/12 11:42 a.m.23 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in improper restrictions on path names to the catalog. This allows attackers to gain unauthorized access to local files and directories.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

9CVSS5.5AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/12 11:42 a.m.26 views

The vulnerability of the iFlightDoc onboard documentation system, related to incorrect restrictions on the path name to the catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

6.8CVSS5.6AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/12 10:03 a.m.7 views

Insular

Insular Isolate your big brother app. This is a fork based on the excellent Island. Extra credit to Shelter which inspired me to make the completely FLOSS fork of Island. Documentation On how to enable Insular via adb, cross-profile file access, God mode extending app control to apps outside the...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/12 9:13 a.m.7 views

macos_sandbox

Introduction to macOS - the App sandbox Continuing with my transition to macOS blogpost series, I'd like to discuss a bit about the macOS App sandbox. It is highly recommended to read the macOS App structure blogpost first - I will be assuming the reader knows the difference between Apps, process...

5.5CVSS5.9AI score0.07665EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 9:11 a.m.5 views

CVE-2023-41717

CVE-2023-41717 Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions. Executive Summary During the summer of 2022, I have found a vulnerability affecting the ZScaler proxy versions 3.6.1.25 and prior. This...

5.5CVSS6AI score0.00382EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 9:08 a.m.9 views

sandbox-runtime

Anthropic Sandbox Runtime srt A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. srt uses native OS sandboxing primitives sandbox-exec on macOS, bubblewrap on Linux and proxy-based network filterin...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:57 a.m.9 views

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs es un servicio Git ligero y autoalojado similar a una versión privada de GitHub, diseñado para ejecutarse fácilmente en servidores de bajos recursos. La vulnerabilidad CVE-2025-8110 es un fallo de seguridad crítico que permite a un atacante eludir las restricciones de...

8.8CVSS7.7AI score0.82471EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/12 8:49 a.m.15 views

fence

Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code package installs, build scripts, CI jobs, unfamiliar repos with controlled side effects, and it can also compleme...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/12 8:19 a.m.7 views

ipsourcebypass

Este script de Python se puede usar para eludir las restricciones de fuente IP usando cabeceras HTTP. Características 17 cabeceras HTTP. Multihilo. Exportación JSON con --json outputfile.json. Detección automática de las soluciones más exitosas. Uso root@kitploit: $ ./ipsourcebypass.py -h IP sour...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:42 a.m.10 views

SharpDNSExfil

SharpDNSExfil SharpDNSExfil es una herramienta de exfiltración escrita en C. El objetivo principal es exfiltrar cualquier archivo "en disco" sin tener que preocuparse por conexiones salientes restringidas. Requisito previo La máquina remota debe poder resolver DNS ¿Por qué hice esto? Obtuve RCE...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 5:34 a.m.5 views

iOSRestrictionBruteForce

iOS Restriction Passcode Brute Force Overview This version of the application is written in Python, which is used to crack the restriction passcode of an iPhone/iPad takes advantage of a flaw in unencrypted backups allowing the hash and salt to be discovered. DEPENDENCIES This has been tested wit...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/12 5:27 a.m.5 views

Azure-APIM-Cross-Tenant-Signup-Bypass

Azure APIM Cross-Tenant Signup Bypass Status 01.12.2025: This vulnerability is still live and exploitable. Microsoft has not patched this issue and considers it "by design." Security Advisory GHSA-vcwf-73jp-r7mv CVE-2025-66390 Summary A security vulnerability in Azure API Management APIM Develope...

9.8CVSS6AI score0.00642EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/12 5:06 a.m.7 views

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 The CVE-2020-35489 is discovered in the WordPress plugin Contact Form 7 5.3.1 and older versions. By exploiting this vulnerability, attackers could simply upload files of any type, bypassing all restrictions placed regarding the allowed upload-able file type...

10CVSS8AI score0.8928EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 4:56 a.m.7 views

CVE-2023-44061

File-upload-Restriction-bypass...

8.8CVSS7.8AI score0.01238EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 3:08 a.m.8 views

wePWNise

wePWNise wePWNise es un script Python de prueba de concepto que genera código VBA que puede usarse en macros o plantillas de Office. Fue diseñado pensando en la automatización e integración, apuntando a escenarios de entornos restringidos. La herramienta enumera las Políticas de Restricción de...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 2:05 a.m.7 views

CVE-2024-46658

CVE-2024-46658 Syrotech SY-GOPON-8OLT-L3 v1.6.0240629 Command Injection Vulnerability Usage 1- Edit the URL in the script. 2- Edit the CookieLogin value in the script. 3- Run the script, it will allow you to executing commands. Vulnerability Details GET...

8CVSS5.9AI score0.24358EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.127 views

MCPJam Inspector - Remote Code Execution

MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...

9.8CVSS6.5AI score0.65845EPSS
SaveExploits41References3
Kitploit
Kitploit
added 2026/09/12 12:49 a.m.7 views

CVE-2025-32462

CVE-2025-32462 - Sudo Host Bypass Exploit Original Discovery This vulnerability was discovered by Rich Mirch. More details can be found at: https://cxsecurity.com/issue/WLB-2025070022 About This script is an exploit for CVE-2025-32462, allowing privilege escalation by bypassing sudo's host...

8.8CVSS6.8AI score0.0428EPSS
SaveExploits12
Rows per page
Query Builder