dnspooq

dnspooq DNSpooq 概念验证 - dnsmasq 缓存投毒 CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 仅供教育目的使用 要求 Docker compose Docker 利用 启动容器 root@kitploit: $ docker-compose up -d 运行 exploit.py root@kitploit: $ docker-compose exec attacker bash bash-5.0 python exploit.py 查询未缓存的名称... 生成伪造的数据包... 已投毒: b'google.com....

CarbonCopy

CarbonCopy 任意のオンラインWebサイトの証明書を偽造し、AV回避のために実行ファイルに署名するツールです。WindowsとLinuxの両方で動作します。 前提条件 Linuxで使用するには、以下のコマンドを実行してください： root@kitploit: apt-get install osslsigncode pip3 install pyopenssl...

CVE-2024-30850-chaos-rat-rce-poc

https://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc/assets/146861503/ac03c8c7-54b3-4280-9f29-719c44af5192 CHAOS RAT v5.01 web panel RCE CVE-2024-30850, CVE-2024-31839 https://github.com/tiagorlampert/CHAOS This exploit works by spoofing an agent callback for an XSS CVE-2024-31839, and...

Apache CloudStack - SAML Signature Exclusion

The CloudStack SAML authentication disabled by default does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response...

EvilSlackbot

EvilSlackbot Slackワークスペース内でレッドチームおよびフィッシング演習を実施するためのSlack攻撃フレームワークです。 免責事項 このツールはセキュリティ専門家のみを対象としています。明示的なテスト許可なしに、いかなるSlackワークスペースに対してもこのツールを使用しないでください。自己責任で使用してください。 背景...

phishurl-list

Conjunto de dados de URLs de phishing do JPCERT/CC Detalhes das colunas date: Data confirmada pelo JPCERT/CC URL: URL completa de um site de phishing description: Informações sobre uma marca falsificada Página de estatísticas https://jpcertcc.github.io/phishurl-list/...

EUVD-2026-67659

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that prevents message content from being interpreted as SMTP commands. A downstream mail server that...

CVE-2026-33604

Dovecot (Open-Xchange) contains an SMTP smuggling vulnerability in its outbound relay protection. An attacker who can get Dovecot to relay a message—e.g., via Sieve redirect or submission relay —can craft a line ending in the message body to bypass the protection that normally prevents message co...

CVE-2025-61478

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets...

CVE-2020-0601-spoofkey

CVE-2020-0601-spoofkey Чтобы узнать, как создать поддельный ключ и подписать код ТРЕБУЕТСЯ: openssl, main.rb который я загрузил ПОСЕТИТЕ : https://twitter.com/exploitblizzard...

wifi-deauth

Un attacco DoS che disconnette tutti i dispositivi da una rete wifi target. La password della rete non è richiesta Testato su Kali NetHunter Screenshot in fondo IMPORTANTE In alcune occasioni, gli AP di rete possono operare su entrambe le frequenze 5GHz e 2.4GHz con lo stesso nome BSSID/SSID. Per...

CVE-2026-80349 TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter

TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the...

EUVD-2025-210800

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets...

CVE-2025-61478

CVE-2025-61478 affects the Vanderbilt Industries Acre Security SPC5300.000 Main Board (v.3.14.1), a security access control component. A physically proximate attacker can trigger a denial of service by sending spoofed SYN packets , disrupting availability without compromising confidentiality or i...

CVE-2026-73845

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckangetmqaquality and ckangetmqaqualitydetails tools in src/tools/quality.ts use isValidMqaServer to validate the serverurl parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host an...

EUVD-2026-58725

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckangetmqaquality and ckangetmqaqualitydetails tools in src/tools/quality.ts use isValidMqaServer to validate the serverurl parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host an...

CVE-2026-73845 CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckangetmqaquality and ckangetmqaqualitydetails tools in src/tools/quality.ts use isValidMqaServer to validate the serverurl parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host an...

CVE-2026-70600 Electron: Cross-origin iframe can position native autofill popup

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the native autofill popup could be positioned by a cross-origin iframe outside that iframe's bounds, over the embedding page's UI, enabling...

Malicious code in gekko-trading-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efc19985c853a3f4fdc8bdb1f08b432456b8f55ce701567edbf593fb3e6211c The package's postinstall hook runs setup.js, which unconditionally downloads core.exe from the hardcoded Cloudflare Workers subdomain...

eda-server: ExternalEventStreamViewSet trusts Subject header without validation and leaks expected DN

A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...