smb

SMB Un paquete de Go para comunicarse a través de SMB. Actualmente solo existe una funcionalidad mínima para las funciones del lado del cliente. A continuación se muestra un cliente de ejemplo que establece una sesión con un servidor: root@kitploit: package main import "log"...

crackerjack

!CAUTION Este repositorio no tiene mantenimiento, visite https://github.com/sadreck/crackerjack para la versión más reciente. CrackerJack Interfaz web para Hashcat de Context Information Security Contenido Introducción Arquitectura Características Limitaciones Instalación Solución de problemas...

penelope

Penelope es un moderno manejador de shells para pentesters y jugadores de CTF. Proporciona una alternativa más capaz a los oyentes básicos de netcat, añadiendo actualización automática de PTY, gestión de sesiones, registro, transferencias de archivos y módulos auxiliares. Tabla de contenidos 📥...

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 Prueba de Concepto PoC Una prueba de concepto de exploit para la vulnerabilidad de deserialización en Apache Tomcat CVE-2025-24813. Esta herramienta demuestra cómo los atacantes podrían explotar la deserialización insegura en la gestión de sesiones de Tomcat...

POS Codekop v2.0 - Broken Authentication

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data. id: CVE-2023-36347 info: name: POS Codekop v2.0 - Broken Authentication author: princechaddha severity: high description: | A broken authentication mechanism ...

Tenda AC1200 V-W15Ev2 - Authentication Bypass

The Tenda AC1200 V-W15Ev2 router is affected by improper authorization/improper session management. The software does not perform or incorrectly perform an authorization check when a user attempts to access a resource or perform an action. This allows the router's login page to be bypassed. The...

openclaw-dashboard

OpenClaw एजेंट डैशबोर्ड OpenClaw एजेंटों के लिए एक सुंदर, सुरक्षित, रीयल-टाइम मॉनिटरिंग डैशबोर्ड। सत्रों को ट्रैक करें, API उपयोग की निगरानी करें, लागत देखें, मेमोरी फ़ाइलों का प्रबंधन करें, और सिस्टम स्वास्थ्य पर नज़र रखें — सभी एक ही स्थान पर। 📸 स्क्रीनशॉट्स अवलोकन| सत्र| लागत ---|---|--- | | द...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 es una vulnerabilidad en el plugin LiteSpeed Cache, un plugin popular de WordPress. Esta vulnerabilidad afecta la gestión de sesiones en LiteSpeed Cache, permitiendo a los atacantes obtener acceso no autorizado a datos sensibles. Vista previa ¿Cómo...

CVE-2024-44000-LiteSpeed-Cache

Poc LiteSpeed Cache CVE-2024-44000 Exploit CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. The script works in the...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

SecureForce

SecureForce - Penetration Testing Framework A simplified but highly capable penetration testing framework built for authorized security testing and competitive analysis. SecureForce provides an intuitive interface for exploit management, payload generation, and controlled exploitation. Features...

CVE-2025-54309__Enhanced_exploit

CVE-2025-54309Enhancedexploit This is a enhanced version of the exploit POC originally created by watchtowrlabs : https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309 massive shoutout to them!! This exploit is meant for research and education purposes and th...

Exploit-For-CVE-2026-18963

CVE-2026-18963 — Keycloak Unauthenticated Account Takeover CVSS 9.1 Critical · Keycloak 26.0.0 – 26.7.1 · Unauthenticated A critical vulnerability in Keycloak's reset-credentials flow that allows an unauthenticated attacker to take over any user account without email verification by chaining two...

CVE-2026-85105

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...

CVE-2026-85105

A remote authorization bypass vulnerability exists in NousResearch hermes-agent 0.18.0 , specifically in the _sess_nowait function of the s71.py file within the Session Management component. The root cause is improper handling of the session_id argument, allowing an unauthenticated remote attacke...

CVE-2026-85105 NousResearch hermes-agent Session Management s71.py _sess_nowait authorization

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...

EUVD-2026-70388

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...

CVE-2026-82590 Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smfnudmsdmhandleget of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely...

CVE-2026-26456

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...

EUVD-2026-67097

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...