cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identifiée dans la fonction createSessionInternal du fichier PackageInstallerService.java, est une vulnérabilité de haute sévérité affectant les versions Android 12 et 13. Cette vulnérabilité permet à un attaquant d'effectuer une attaque de type « run-as any app »,...

mcpjaminspector-unauth-rce

mcpjaminspector-unauth-rce CVE-2026-23744 MCPJam inspector = 1.4.2에서의 RCE 취약점 세부 정보 https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 사용법 root@kitploit: usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help show this help message a...

ADCSPwn

ADCSPwn A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts Petitpotam and relaying to the certificate service. Usage Run ADCSPwn on your target network. root@kitploit: Author: @batsec - MDSec ActiveBreach Contributor: @Flangvik - TrustedSec...

CLSA-2026-1788350691 TuxCare security update for org.springframework.ws (1 CVE)

TuxCare rebuilt 6 org.springframework.ws packages to address 1 CVE. Fixed in 4.0.15-tuxcare.1...

isr-sqlget

-- ISR - Infobyte Security Research -- | ISR-sqlget | www.infobytesec.com | ..:: ОПИСАНИЕ ISR-sqlget: Это инструмент для слепой SQL-инъекции, разработанный на Perl. Он позволяет получать схемы баз данных и строки таблиц. С помощью одного GET/POST запроса можно незаметно получить структуру базы...

CVE-2022-22947

CVE-2022-22947 스프링 클라우드 게이트웨이에 대한 코드 인젝션 공격 CVE 요약 스프링 클라우드 게이트웨이 버전 3.1.1+ 및 3.0.7+ 이전 버전에서는 Gateway Actuator 엔드포인트가 활성화되고 노출되며 보안되지 않은 경우 애플리케이션이 코드 인젝션 공격에 취약합니다. 원격 공격자는 악의적으로 조작된 요청을 만들어 원격 호스트에서 임의의 원격 실행을 가능하게 할 수 있습니다. 영향을 받는 버전 Oracle Commerce Guided Search 11.3.2 Oracle Communications...

CVE-2026-41089-Netlogon-RCE

🛡️ CVE-2026-41089-Netlogon-RCE - Анализ критических уязвимостей безопасности служб Windows Этот репозиторий предоставляет инструменты для анализа и тестирования уязвимости Netlogon, известной как CVE-2026-41089. Данный инструмент помогает специалистам по безопасности определить, подвержены ли их...

Vajra

Vajra - Your Weapon To Cloud About Vajra Vajra is a UI based tool with multiple techniques for attacking and enumerating in target's Azure environment. The term Vajra refers to the Weapon of God Indra in Indian mythology God of Thunder & Storms. Its connection to the cloud makes it a perfect name...

TWSL2011-007_iOS_code_workaround

= testcert TWSL2011-007 취약점 완화일명 CVE-2011-0228를 위한 참조 구현입니다. 저자: Eric Monti 날짜: 2011년 7월 28일 = 컴파일 Apple iOS SDK CFLAGS와 함께 다음과 같이 컴파일하세요: gcc -o testcert testcert.m -framework Foundation -framework Security 위 컴파일 인자는 단지 확인만 해보려는 경우 OS X에서 그대로 동작할 것입니다. = 사용법: root@kitploit: $ testcert...

droopescan

droopescan A plugin-based scanner that aids security researchers in identifying issues with several CMS. Usage of droopescan for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume n...

AtlasReaper

AtlasReaper AtlasReaper is a command-line tool developed for offensive security purposes, primarily focused on reconnaissance of Confluence and Jira. It also provides various features that can be helpful for tasks such as credential farming and social engineering. The tool is written in C. Blog...

cve-2015-0313

CVE-2015-0313 Исходный код уязвимости Adobe Flash cve-2015-0313 из Angler Exploit Kit Ссылки: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...

CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS-

CVE-2026-32743 - Переполнение буфера стека в MavlinkLogHandler автопилота PX4 DoS -orange -blue 📜 Описание CVE-2026-32743 — это переполнение буфера стека в MavlinkLogHandler автопилота PX4 версий ≤1.17.0-rc2. Буфер LogEntry.filepath имеет размер всего 60 байт , но sscanf разбирает пути к каталога...

CVE-2024-12172

CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses = 3.2.21 - Absence d'autorisation permettant à un utilisateur authentifié Abonné+ de mettre à jour arbitrairement les métadonnées d'un utilisateur Description Le plugin WP Courses LMS –...

CVE-2024-11848

CVE-2024-11848 NitroPack = 1.17.0 - Autorisation manquante pour la mise à jour limitée d'options Abonné+ authentifié Description Le plugin NitroPack pour WordPress est vulnérable à une modification non autorisée des données en raison d'un manque de vérification des capacités sur l'action AJAX...

DirtyClone

DirtyClone CVE-2026-43503 - Python PoC DirtyClone의 비공식 Python 포트 — Linux 커널 로컬 권한 상승 취약점입니다. 이 저장소에는 작동하는 개념 증명PoC 코드가 포함되어 있으며, 클론된 소켓 버퍼를 통한 페이지 캐시 손상page-cache corruption을 악용하여 권한이 없는 로컬 사용자가 루트 권한을 획득할 수 있게 합니다. DirtyClone 소개 DirtyClone CVE-2026-43503은 Dirty 계열 의 네 번째 구성원입니다 DirtyPipe →...

CVE-2021-26714

CVE-2021-26714 Enterprise License Manager 포털의 디렉토리 트래버설 취약점, Mitel MiContact Center Enterprise 9.4 이전 버전에 영향. https://nvd.nist.gov/vuln/detail/CVE-2021-26714vulnCurrentDescriptionTitle https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0003...

CLSA-2026-1788350173 TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.39-tuxcare.21...

Review.CVE-2021-3156

👑 CVE-2021-3156 Baron Samedit — Privilege Escalation via Heap Overflow in sudo 📅 Дата: 2025-06-08 ✍️ Автор: @TopskiyPavelQwertyGang 🧠 Security Researcher | Red Team Enthusiast 🧠 CVE Overview CVE-ID: CVE-2021-3156 Тип: Heap-based Buffer Overflow Компонент: sudoedit sudo Уровень доступа: Local Цель:...

cve-2023-5217-poc

CVE-2023-5217: Эксплойт переполнения кучи при кодировании VP8 в libvpx CVE-2023-5217 — это эксплуатируемая в реальных условиях уязвимость libvpx, обнаруженная Клеманом Лесинем из Группы анализа угроз Google Threat Analysis Group, нацеленная на Chrome. Этот репозиторий показывает, как вызвать...