forensicscanner

This repository does not have a README...

JarHunter

JarHunter – Erweitertes JAR-Analyse- und Extraktionswerkzeug JarHunter ist ein Werkzeug, das entwickelt wurde, um große JAR-Dateien schnell und effizient zu durchsuchen, zu erkunden und bestimmte Klassen zu extrahieren. Anstatt manuell Tausende von Klassen zu durchsuchen, ermöglicht JarHunter,...

getrails

GETRAILS Libreria di OSINT e Dork hacking che funziona con Google, Duckduckgo e Torch Sentiti libero di contribuire Esecuzione root@kitploit: import getrails getrails.search'site:scanme.nmap.org' Try Google search if return error use Duckduckgo "http://scanme.nmap.org",... getrails.gogle"term"...

CVE-2026-78680 NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary

NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent.reprsvg, allowing attackers to execute arbitrary code by placing a malicious dot binary in the search path or current working directory. Attackers can...

CVE-2023-51504

CVE-2023-51504 Dies ist eine dockerisierte Reproduktion der MotoCMS-SQL-Injection vgl. Exploit-DB Beschreibung MotoCMS Version 3.4.3 SQL-Injection über den Keyword-Parameter unter dem Link https://template189526.motopreview.com/store/category/search/?keyword=1 Die Reproduktion der Schwachstelle...

CVE-2023-45542

CVE-2023-45542 In mooSocial v3.1.8 existiert eine reflektierte Cross-Site-Scripting XSS-Schwachstelle im Parameter q der Suchfunktion, die es Angreifern ermöglicht, die Session-Cookies des Benutzers zu stehlen und sein Konto über eine manipulierte URL zu übernehmen. Verwundbarer Parameter: q...

llama_facts

Fatti sui lama Questo progetto è stato originariamente creato per il concorso CTF Women in Cybersecurity WIYCS 2022 del Rochester Institute of Technology RIT. È vulnerabile alla Server-Side Template Injection SSTI, definita nella controversa CVE CVE-2019-8341. Descrizione della sfida Descrizione:...

PT-2026-81879

Name of the Vulnerable Software and Affected Versions SililaWijesinghe Food Ordering System versions up to ba314e897e3365600461e5ea59432e39ceaa0fa5 Description An issue exists in the /search.php endpoint where manipulation of the search box variable allows for SQL injection. This allows remote...

RHEL 9 : sqlite (RHSA-2026:58936)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58936 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a sing...

CVE-2014-6287

Rejetto HttpFileServer 2.3.x - Remote-Befehlsausführung CVE-2014-6287 🚨 Über den Exploit Dies ist ein Proof-of-Concept-Exploit für die bekannte Remote-Befehlsausführungsschwachstelle in Rejetto HttpFileServer HFS v2.3.x , identifiziert als CVE-2014-6287. Durch Missbrauch der anfälligen Suchfunkti...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

rConfig_rce

rConfig 3.9 PoC combinato di SQL Injection e Command Injection Panoramica Questo PoC prende di mira rConfig versione 3.9.4 e dimostra lo sfruttamento tramite una combinazione di vulnerabilità di SQL Injection e Remote Command Injection. Automatizza il processo di: 1. Estrazione del nome del...

log4j-scanner

log4j-scanner Log4j 2 CVE-2021-44228 Schwachstellenscanner für Windows-Betriebssysteme. Beispielverwendung Verwendung root@kitploit: .\log4j-scanner.exe Das Terminal wird zur Ausgabe der Ergebnisse verwendet. Stellen Sie dies über RMM auf Computern bereit und starten/melden Sie es von PowerShell...

CVE-2024-32019-POC

⚠️ CVE-2024-32019 - PoC 📌 Versioni Affette = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ Prova di Concetto CVE-2024-32019 — escalation dei privilegi locale di ndsudo tramite percorso di ricerca non attendibile. 🔧 Compila l'exploit root@kitploit: x8664-linux-gnu-gcc -o nvme exploit.c -static 📤...

CVE-2026-78416

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interprete...

EUVD-2026-64920

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interprete...

CVE-2026-78416 Authenticated RCE via `condition.config` JSON cleanse bypass

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interprete...

CVE-2026-78416

Craft CMS versions 4.0.0-RC1 through 4.18.1 and 5.0.0-RC1 through 5.10.5 are affected by an authenticated remote code execution vulnerability in the control panel element-search condition handling. The root cause is a JSON cleanse bypass in condition.config that allows Yii behavior/event configur...

liferay-xss-7.2.1GA2-poc-report-CVE-2020-7934

XSS Archiviato Autenticato in LifeRay 7.2.1 GA2 tramite MyAccountPortlet eseguito dai Risultati di Ricerca In LifeRay versione 7.1.0 fino a 7.2.1 GA2 i campi Nome, Secondo Nome e Cognome per gli account utente sono tutti vulnerabili a un problema di XSS Archiviato. Qualsiasi utente può modificare...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...