CVE-2026-82745 ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness

Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer is used, because neither enforced primary-key uniqueness on insert. Unlike a SQL data layer, whose unique primary-key constraint rejects a duplicate, the ET...

EUVD-2026-68950

Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer is used, because neither enforced primary-key uniqueness on insert. Unlike a SQL data layer, whose unique primary-key constraint rejects a duplicate, the ET...

CVE-2026-82745

ash (an Elixir data-layer framework) is vulnerable to improper access control in its ETS and Mnesia data layers. Unlike the SQL data layer, these layers implemented create as a keyed insert that silently replaces any existing entry sharing the same primary key, rather than enforcing uniqueness. A...

CVE-2026-82745 ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness

Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer is used, because neither enforced primary-key uniqueness on insert. Unlike a SQL data layer, whose unique primary-key constraint rejects a duplicate, the ET...

EEF-CVE-2026-82745 ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness

Summary Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer is used, because neither enforced primary-key uniqueness on insert. Unlike a SQL data layer, whose unique primary-key constraint rejects a duplicate...

CVE-2020-3452

CVE-2020-3452 Little, stupid python validator? for CVE-2020-3452 on CISCO devices. Python first timer, pls do not kill me. ;- USAGE root@kitploit: python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt DISCLAIMER: Please use this script only on subjects you own or you have the...

CVE-2023-20198-Scanner

Guía de usuario del Escáner de Dispositivos Cisco IOS XE para CVE-2023-20198-Scanner Este es un escáner de huellas digitales de webshell diseñado para identificar implantes en las WebUI de Cisco IOS XE afectadas por CVE-2023-20198 y CVE-2023-20273. Este script de Python verifica dispositivos Cisc...

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: root@kitploit: python code.py file.php -this will sc...

php_code_analysis

este script analizará tu código el script puede encontrar 1. problemas de carga de archivos checkfileupload 2. inyección en cabecera de host hostheaderinjection 3. inyección SQL 4. deserialización insegura insecure deserialization 5. redirección abierta openredirect 6. SSRF 7. XSS 8. LFI 9...

neurax

Un framework que ayuda en la creación de software de autopropagación Resumen Con la ayuda de Neurax, los binarios Golang pueden propagarse en LAN/WAN sin usar servidores externos. Diversas opciones de configuración y stagers de comandos permiten una propagación rápida en diversos entornos...

cve-2025-5755

CVE-2025-5777: The Ultimate PoC & Scanner 🚀 An advanced, powerful, and easy-to-use tool designed to detect and exploit CVE-2025-5777 CitrixBleed 2. This script not only identifies the vulnerability but also helps in demonstrating its impact by parsing human-readable information from the memory...

hardening-k8s-containers

Intentionally Vulnerable Note Taking Application This repository contains a very simple and vulnerable application used to demonstrate the differences between deploying this application with the default settings to a Kubernetes cluster, versus adding some extra security settings that WILL NOT fix...

renode

Renode Copyright c 2010-2026 Antmicro ¿Qué es Renode? Renode fue creado por Antmicro como una herramienta virtual de desarrollo para redes embebidas multi-nodo tanto cableadas como inalámbricas y está destinado a permitir un flujo de trabajo escalable para crear sistemas IoT efectivos, probados y...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

anubis

Anubis root@kitploit: d8888 888 d8b d88888 888 Y8P d88P888 888 d88P 888 88888b. 888 888 88888b. 888 .d8888b d88P 888 888 "88b 888 888 888 "88b 888 88K d88P 888 888 888 888 888 888 888 888 "Y8888b. d8888888888 888 888 Y88b 888 888 d88P 888 X88 d88P 888 888 888 "Y88888 88888P" 888 88888P' Anubis es...

CVE-2021-21975

CVE-2021-21975 Nmap script to check vulnerability CVE-2021-21975 Vulnerability References: https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html Blog...

CVE-2023-27350

! Be careful executing this as it re-configures the server config in order to execute commands. The script reverts the changes on exit but might not revert it if the process is improperly killed ! CVE-2023-27350 Papercut Unauthenticated RCE Versions root@kitploit: The script automatically tests i...

geoexplorer

GeoExplorer Cliente Este es el componente cliente del proyecto GeoExplorer, diseñado para enviar peticiones a instancias de GeoServer y probar posibles vulnerabilidades. Requisitos Python 3.x Paquetes de Python requeridos instalar usando pip install -r requirements.txt: requests argparse urllib3...

PowerShell-Red-Team

PowerShell-Red-Team-Enum Colección de funciones de PowerShell que un Red Teamer puede usar para recolectar datos de una máquina u obtener acceso a un objetivo. Agregué archivos ps1 para los comandos incluidos en el módulo RedTeamEnum. Esto te permitirá encontrar y usar fácilmente un solo comando ...

CVE-2024-24919-Sniper

CVE-2024-24919-Sniper Overview CVE-2024-24919 Sniper is a Python script designed to scan for Check Point Security Gateway Information Disclosure vulnerabilities. This script can perform both single-target and bulk scanning, utilizing multithreading to improve scanning speed. It supports various...