DepFuzzer

DepFuzzer DepFuzzer es una herramienta utilizada para encontrar confusión de dependencias o proyectos donde el correo electrónico del propietario puede ser secuestrado. Instalar la herramienta /!\ Esta herramienta requiere python = 3.10 /!\ root@kitploit: $ python3 -m venv .venv $ source...

NextJS-RCE-Root-Takeover

🚨 你知道如何通过 Next.js 16.0.6 获得 RCE 然后通过 python3 进行 权限提升 吗？🚨 让我从一个来自 TryHackMe "Love at First Breach 2026" 竞赛（高级赛道）的 真实实验室 教你…… 📄 完整报告在此： 🔥 内容：CVE-2025-55182 → Shell PoC → 权限提升 → Root + 修复 渗透测试人员： [email protected]...

PortForwarder

Port Forwarder TCP per Windows Un port forwarder TCP ad alte prestazioni per Windows con whitelist IP opzionale e funzionalità di logging verbose. Caratteristiche ✅ Inoltra traffico TCP da una porta locale a qualsiasi host:porta remota ✅ Whitelist IP opzionale per maggiore sicurezza ✅ Modalità...

subdosec

Subdosec Scanner e strumento di ricognizione per takeover di sottodomini. Installazione • Utilizzo • Basato sul web • Contributo • Scansione online • Riconoscimenti Subdosec è uno scanner per takeover di sottodomini veloce e accurato, senza falsi positivi, con un database pubblico di sottodomini...

CVE-2025-9485

Exploit: Authentifizierungsumgehung via unsigniertes JWT alg: none 1 Ein unsigniertes JWT mit der Admin-E-Mail-Adresse erstellen root@kitploit: TOKEN=$node -e ' function b64us return Buffer.froms.toString"base64" .replace/+/g,"-" .replace///g,"" .replace/=+$/,"" const header = b64uJSON.stringify...

CVE-2025-27580

CVE-2025-27580: Prise de contrôle de compte non authentifiée dans NIH BRICS NIH BRICS alias Biomedical Research Informatics Computing System jusqu'à la version 14.0.0-67 génère des jetons prévisibles qui dépendent du nom d'utilisateur, de l'heure et de la chaîne fixe 7Dl9dj- et permet ainsi à des...

Subhunter

Subhunter Uno strumento veloce per il takeover di sottodomini Descrizione: Il takeover di sottodomini è una vulnerabilità comune che permette a un attaccante di ottenere il controllo su un sottodominio di un dominio target e reindirizzare gli utenti destinati al dominio di un'organizzazione verso...

CVE-2024-27631

Détails de la vulnérabilité CVE-2024-27631 Vue d'ensemble Dans Savane v3.12 et versions antérieures, l'absence de protection CSRF sur les fonctions administratives peut permettre une escalade de privilèges et/ou une prise de contrôle de compte. En particulier, le point d'accès...

CVE-2025-14893

CVE-2025-14893: Cross-Site Scripting XSS Memorizzato Autenticato nel Plugin WordPress IndieWeb Disclaimer: Questo repository è creato solo per scopi educativi e divulgazione etica. La vulnerabilità è stata segnalata responsabilmente al fornitore e corretta. Non utilizzare queste informazioni per...

CVE-2026-65956

KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached without...

CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment

CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment Eine Sicherheitsbewertung der Beat XP VEGA Smartwatch Firmware RB303ATV006229 mit Fokus auf Bluetooth Low Energy BLE-Konnektivität zeigte eine Design- und Implementierungsschwäche auf, die es einem nahegelegenen BLE-Central-Gerät...

CVE-2026-39275

CVE-2026-39275 - XSS stocké menant à la prise de contrôle de compte dans Cockpit CMS Note: Divulgué de manière responsable et corrigé par les mainteneurs de Cockpit CMS avant publication...

CVE-2026-10580

WordPress - Hippoo Mobile App for WooCommerce = 1.9.4 - 认证绕过导致管理员账户接管 概述 本工具是 CVE-2026-10580 的概念验证漏洞利用程序，该漏洞影响 Hippoo Mobile App for WooCommerce WordPress 插件（版本 = 1.9.4）。该漏洞允许未经身份验证的攻击者重置任何用户（包括管理员）的密码，从而完全接管站点。 ⚠️ 重要提示： 本工具仅用于 授权的安全测试和教育目的 。未经授权对您不拥有或未获得明确许可的系统使用是违法的。 功能 通过易受攻击的 REST API 端点枚举所有...

CVE-2025-58434_CVE-2025-59528

CVE-2025-58434CVE-2025-59528 Script PoC CVE-2025-58434 Flowise -lp...

CVE-2026-65956 KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF

KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached without...

CVE-2026-65956 KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF

KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached without...

CVE-2026-65956

KubePi (a Kubernetes multi-cluster management panel) versions up to 1.6.15 expose SSO, OIDC, and SAML configuration API endpoints on the same public routing boundary as login and callback endpoints, requiring no administrator authorization. An unauthorized or low-privileged user can read, create,...

CVE-2026-43621

Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...

CVE-2026-23550

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ███████╗ ███████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ╚════██╗╚════██╗██╔════╝ ██╔════╝██╔═████╗ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ █████╔╝ █████╔╝███████╗...

CVE-2026-11387

CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ Escalatazione dei Privilegi non autenticata tramite Reset della Password Arbitrario ☆ === Beelze === 📋 Informazioni sulla Vulnerabilità Campo| Dettagli ---|--- CVE ID| CVE-2026-11387 Punteggio CVSS| 9.8 Critical Vettore CVSS|...