kernel-exploit-factory

kernel-exploit-factory Keep updating...... Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. This repository is to extract all Linux kernel exploit and relative debug environment. You can use Qem...

wmiexec-Pro

wmiexec-Pro Nuova generazione di wmiexec.py. Indice dei contenuti 1. Info 2. Ringraziamenti speciali 3. Funzionalità 4. Per iniziare Installazione 5. Utilizzo 6. Schermate 7. Come funziona? 8. Disclaimer 9. Riferimenti Info La nuova generazione di wmiexec.py: più nuove funzionalità, tutte le...

HUNT

Estensioni proxy di HUNT Suite Cos'è HUNT Suite? HUNT Suite è una raccolta di estensioni per Burp Suite Pro/Free e OWASP ZAP. Identifica i parametri comuni vulnerabili a determinate classi di vulnerabilità Burp Suite Pro e OWASP ZAP. Organizza le metodologie di test Burp Suite Pro e Free. HUNT...

vbulletin-exploits

vbulletin-exploits Exploit che prendono di mira vBulletin. CVE-2023-25135: RCE pre-autenticazione Vedi: https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable root@kitploit: ./vbulletin-rce-cve-2023-25135.py --help Usage: vbulletin-rce-cve-2023-25135.py -h -p PROXY url command...

rmm

Recon MindMap RMM Traendo ispirazione dal workshop TBHM v4 recon edition by Jason Haddix, ho sviluppato uno strumento a riga di comando CLI che semplifica il compito di organizzare un elenco di domini e sottodomini. L'obiettivo è creare uno strumento in grado di generare facilmente complesse...

detection-validation

Detection-Validation Zweck Das Tool automatisiert die Simulation bösartiger Prozessereignisse, ohne dass reale Prozesse eingerichtet werden müssen. Angenommen, Sie möchten testen, wie w3wp.exe PowerShell startet. Normalerweise müssten Sie dafür eine IIS-Einrichtung durchlaufen, um...

impersonate-rs

IRS Impersonate-RS 💡 IRS è una versione libreria di https://github.com/zblurx/impersonate-rs, zblurx Reimplementazione di Defte Impersonate in puro Rust. Per maggiori informazioni, consulta questo post del blog. L'approccio all'impersonazione dei token è leggermente diverso da quello di Defte...

EUVD-2026-66403

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...

EUVD-2026-66391

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

EUVD-2026-66393

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

EUVD-2026-66392

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

EUVD-2026-66401

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

EUVD-2026-66383

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device...

EUVD-2026-66360

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

EUVD-2026-66364

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

EUVD-2026-66384

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

CVE-2026-82018

IGEL OS 12 (before 12.9.0 / 12.8.3 LTS ) and IGEL OS 11 (before 11.11.150 ) contain a secure boot bypass in the GRUB boot stage . A physically present attacker can place an unsigned empty file named igel.conf on a partition, exploiting GRUB's fail-open signature verification behavior to reach an ...

CVE-2026-82018 IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf File

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

UniPwn

Analisi dell'iniezione di comandi del servizio BLE del robot Unitree Autore: Bin4ry aka Andreas Makris [email protected] Coautore: h0stile aka Kevin Finisterre Contributore: legion1581 aka Konstantin Severov di theroboverse ha contribuito a correggere il payload per l'iniezione e lo ha...

CVE-2026-82017 IGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration Area

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader...