Exploit for Out-of-bounds Write in Fortinet Fortiproxy

FortiGate SSL-VPN kit recovered in the wild Research arch...

qlikview-poc-CVE-2024-29863

Aplicación afectada: QlikView Plataforma: Windows Problema: Escalada de privilegios local mediante el instalador MSI condición de carrera por secuestro de DLL Descubierto y reportado por: Pawel Karwowski y Julian Horoszkiewicz Eviden Red Team Detalles: En sistemas con QuikView12 instalado, es...

NFtables-IPtables-integration-script

🛡️ Q-Feeds Linux Firewall ブロックリスト統合 Linuxサーバー向け自動マルウェアIPブロックリスト — nftables および iptables+ipset に対応 📋 目次 クイックスタート 概要 動作の仕組み 前提条件 詳細インストールガイド 設定 使用方法と確認 トラブルシューティング アンインストール ライセンス 🚀 クイックスタート ステップ1: APIトークンを取得 無料のAPIキーを tip.qfeeds.com で取得します。 ステップ2: スクリプトをダウンロードbash git clone...

Yellowkey-mitigation

Yellowkey-mitigation.ps1 es un script de PowerShell que automatiza el flujo de trabajo de mitigación de WinRE descrito en CVE-2026-45585, agrega verificación después de cada paso y no ejecuta el paso 6 reagentc /disable + reagentc /enable si algún paso anterior falla. También comprueba si el camb...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

CVE-2026-65400

CVE-2026-65400 捐赠 通过 PayPal 或扫描下方的二维码来支持本项目的维护。 ⚡ 简单用法 请仅在安全且经授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离实验室环境 经授权的渗透测试环境 示例配置： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activa...

cve-2026-43512-poc

CVE-2026-43512 — Apache Tomcat DIGEST 认证绕过 可利用性分析结果： 根本原因已确认。但针对标准 UserDatabaseRealm 部署，端到端利用不可复现 。详情请参见分析。 目录 概述 受影响版本 根本原因 分析 仓库结构 要求 使用方法 预期输出 参考 免责声明 概述 CVE-2026-43512 是 Apache Tomcat 的 HTTP DIGEST 认证机制中的一个漏洞。方法 RealmBase.getDigest 在构造 A1 哈希输入之前，未验证 getPasswordusername 的返回值。当用户名在已配置的 Realm...

EUVD-2026-69458

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

CVE-2026-73731

A reflected cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to execute arbitrary script code in a victim's browser. The attack requires user interaction (e.g., clicking a crafted link) and r...

CVE-2026-73731 Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

CVE-2026-73731 Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

CVE-2025-49844

CVE-2025-49844 RediShell AI 制作的 Revshell PoC 由 AI 制作的 Redishell PoC 的未测试完成版。 原始 PoC： https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py 韩语部分： https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua 进展？ 我们后来又接入了...

CVE-2026-73703 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

EUVD-2026-69430

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

CVE-2026-73703 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

CVE-2026-73703

CVE-2026-73703 is a stored cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated adjacent attacker can inject malicious script that executes in a victim's browser within the context of the interface, requiring user in...

CVE-2024-6387-nmap

OpenSSH 漏洞检查器 Nmap 脚本 描述 openssh-vuln-checker.nse 脚本用于检查服务器是否运行存在漏洞的 OpenSSH 版本（CVE-2024-6387）。它会连接到 SSH 端口，获取 SSH 横幅，并将其与已知存在漏洞的版本列表进行比对。 存在漏洞的版本 该脚本会检查以下存在漏洞的 OpenSSH 版本： SSH-2.0-OpenSSH8.5p1 SSH-2.0-OpenSSH8.6p1 SSH-2.0-OpenSSH8.7p1 SSH-2.0-OpenSSH8.8p1 SSH-2.0-OpenSSH8.9p1 SSH-2.0-OpenSSH9.0p...

SR-71

オールインワンの偵察ツール このツールの目的は、バグハンターやペネトレーションテスターが偵察を行うのを支援することです... インストール: python3 が動作する任意のシステムで使用できます pip を使用して SR-71 を簡単にインストールできます: root@kitploit: pip3 install SR-71 使用するには、ターミナルで "SR-71 " と入力してください ソースからインストールする場合: root@kitploit: git clone https://gitlab.com/Edu0x01/SR-71.git cd SR-71 pip3 instal...

pocs

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php' PHP 代码注入 RCE POC。这是 CVE-2009-1151 的首个公开发布的漏洞利用程序。 语法 root@kitploit: $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ 演示 root@kitploit: $ ./phpMyAdminRCE.sh...