fake-useragent

fake-useragent 최신 실사용 데이터베이스를 기반으로 하는 간단한 useragent 페이커faker입니다. 특징 데이터는 Intoli LLC에서 사전 다운로드 및 후처리되며, 데이터는 패키지 자체에 포함됩니다. 데이터는 다양한 범위의 브라우저 에이전트와 다양한 브라우저로 구성됩니다. user-agent 문자열 검색 desktop, tablet 및/또는 mobile UA 유형 모두 지원 useragent, percent, type, devicebrand, browser, browserversion, os,...

CVE-2025-24367-PoC-Cacti

Cacti CVE-2025-24367 Authenticated RCE PoC This repository contains a proof‑of‑concept exploit for CVE‑2025‑24367 , an authenticated remote code execution vulnerability in Cacti. The issue abuses insufficient input sanitization in graph template handling. By injecting malicious content into the...

CVE-2026-90561

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...

CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 WinREST/PowerShell invokeCommand를 통한 Windows Admin Center 인증 RCE. 사용법: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py 환경 변수: root@kitploit: WACBASE - override target base URL default below WACPASS - password, used if not passed positionally...

CVE-2025-55130

CVE-2025-55130 - Node.js 권한 모델 심볼릭 링크 탈출 root@kitploit: / | | | | |/ \ / \ | | | | / | // \ | | || | || || || | | | | \ | \ \ | | | | | | |/|| \ ||| ||/||| | || | || | |/ |//||// Node.js Permission Model Bypass via Crafted Symlinks Discovered by natann @ JFrog 개요 Node.js의 경로 순회path traversal...

CVE-2023-39115

CVE-2023-39115 Description: Campcodes Online Matrimonial Website System Script v3.3 is vulnerable to an arbitrary file upload vulnerability, potentially allowing attackers to execute arbitrary code on the targeted server. The vulnerability arises from insufficient validation of uploaded files,...

CVE-2018-18441-exploit

CVE-2018-18441-exploit root@kitploit: D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121...

CVE-2025-47812

🚀 Wing FTP Exploit - CVE-2025-47812 Enhanced exploit for Wing FTP Server CVE-2025-47812 - Unauthenticated Remote Code Execution RCE 🔧 Installation Clone this repository and enter the directory: root@kitploit: git clone https://github.com/0xjuarez/CVE-2025-47812.git cd CVE-2025-47812 pip install -...

CVE-2024-50657

CVE-2024-50657:Incorrect Access Control on Owncloud apk An issue in Owncloud android apk v.4.4.1 allows a physically proximate attacker to escalate privileges via the PassCodeViewModel class, specifically in the checkPassCodeIsValid method. Vulnerability Type Incorrect Access Control Vendor of...

CVE-2026-90561

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 are affected by a stored XSS in the content manager WYSIWYG preview component (PreviewWysiwyg.tsx). The component fails to strip [removed] tags from rich text, allowing an Author -role user to inject malicious scripts that execute when an E...

EUVD-2026-76986

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...

CVE-2026-90561 Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...

CVE-2026-90561 Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...

CVE-2026-90561 Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an...

CVE-2017-7679

CVE-2017-7679 POC SCRIPT BY Lord0x | LordWare LordWare CVE CyberSec Telegram: https://t.me/OfficialLordWare...

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation This is just a quick note on how to exploit these vulnerabilities to get root. Start by utilizing this tool on the attacker machine: https://raw.githubusercontent.com/ibrahmsql/CVE-2025-6018/refs/heads/main/CVE-202 You should now have a shell a...

Apache-Hunter

ApacheHunter - Advanced Apache Server Scanner Developed by Rownok Ahmed Khan GitHub:https://github.com/Rk-000 ApacheHunter is a powerful scanner designed to detect Apache servers, identify versions, and check for CVE-2024-22393 Pixel Flood vulnerability in Apache Answer installations. Features ✅...

Vulnerability-assessment

Installation & Usage Bash Copy to Nmap scripts directory sudo cp react2shell-detect.nse /usr/share/nmap/scripts/ Update script database sudo nmap --script-updatedb Single target nmap -p80,443 --script react2shell-detect.nse example.com Important: Use this script only against systems you have...

CVE-2023-4911-Lab

CVE-2023-4911 "Looney Tunables" Analysis Environment Docker-based practice environment for analyzing and developing exploits for the GNU C Library glibc dynamic loader buffer overflow vulnerability Local Privilege Escalation. CVE Information Item| Content ---|--- CVE Number| CVE-2023-4911 Alias|...

CVE-2025-55182-Scanner

CVE‑2025‑55182 – Next.js RSC Deserialization RCE Scanner This tool checks whether a target is vulnerable to CVE‑2025‑55182 , a Remote Code Execution bug caused by unsafe handling of RSC React Server Components model payloads inside Next.js. The vulnerability chains Prototype Pollution →...