CVE-2024-10924

CVE-2024-10924 Really Simple Security Free, Pro, and Pro Multisite 9.0.0 – 9.1.1.1 – Authentication Bypass Description The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user...

CVE-2025-24813-checker

CVE-2025-24813-checker Hola investigadores, tengo un verificador para la reciente vulnerabilidad CVE-2025-24813-checker...

CVE-2019-18935

CVE-2019-18935 CVE-2019-18935...

CVE-2018-18714

CVE-2018-18714 PoC code for CVE-2018-18714 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: https://www.iobit.com/en/malware-fighter.php...

CVE-2018-18026

CVE-2018-18026 PoC Code for CVE-2018-18026 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: https://www.iobit.com/en/malware-fighter.php...

echteeteepee

Herramientas de Prueba de Vulnerabilidades de Desync HTTP/1 Este repositorio contiene herramientas de seguridad defensiva para detectar vulnerabilidades de contrabando de solicitudes desync HTTP/1 basadas en la innovadora investigación de James Kettle de PortSwigger. Atribución de la Investigació...

firmware-analysis-toolkit

固件分析工具包 FAT 旨在帮助安全研究人员分析和识别物联网及嵌入式设备固件中的漏洞。该工具也用于由 Attify 举办的“ Offensive IoT Exploitation ”培训课程。 注意： 目前，它只是一个用于自动化 Firmadyne 的脚本，Firmadyne 是一款用于固件仿真的工具。如果实际仿真遇到问题，请将问题提交到 firmadyne issues。 如果你遇到问题，可以尝试 AttifyOS，它预装了固件分析工具包和其他工具，开箱即用。 固件分析工具包（以下简称 FAT）基于 Firmadyne 并做了一些改动。Firmadyne 使用 PostgreSQL...

conscryptchecker

conscryptchecker ¡IMPORTANTE! agrega tu propio app/google-services.json para compilar correctamente...

wordpress-really-simple-security-authn-bypass-vulnerable-application

wordpress-really-simple-security-authn-bypass-vulnerable-application Esta es una aplicación vulnerable para probar el exploit de la omisión de autenticación de Really Simple Security 9.1.2 CVE-2024-10924. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Úsala bajo tu...

heaphopper

heaphopper HeapHopper is a bounded model checking framework for Heap-implementations. Overview Setup root@kitploit: sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper mkvirtualenv -ppython3 heaphopp...

CVE-2026-61711

A flaw was found in BuildKit. A custom frontend could craft a build request with an invalid security mode, leading to the disabling of Seccomp and AppArmor protections for the build container. This bypasses the intended sandbox mechanisms, potentially allowing for broader impact within the...

byob

Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...

CVE-2014-6271

CS4238 CS4238 Computer Security Practices...

macOS-Kernel-Exploit

macOS-Kernel-Exploit AVISO LEGAL Necesitas conocer el deslizamiento de KASLR para usar el exploit. Además, SMAP debe estar deshabilitado, lo que significa que no es explotable en Macs posteriores a 2015. Estas limitaciones hacen que el exploit sea prácticamente inutilizable para la explotación en...

cve-2020-15148

cve-2020-15148 cve-2020-15148...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...

Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)

Red Hat AI Inference Server 3.2.2 CUDA is now available. Red Hat® AI Inference Server...

CVE-2021-2394

CVE-2021-2394...

CVE-2019-0708

CVE-2019-0708 Hola pry0cc :3 prueba: vota por thugcrowd en algo de ciber de la UE o algo así...

CVE-2023-4549

ID de CVE : CVE-2023-4549 Tipo de Vulnerabilidad : Cross-Site Scripting Descripción : El plugin DoLogin Security para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del encabezado 'X-Forwarded-For' en versiones hasta la 3.6 inclusive, debido a una insuficiente sanitización de...