WP-CVE-2023-32243

WP-CVE-2023-32243 使い方 1. 依存関係がインストールされていることを確認してください: root@kitploit: pip install requests 2. ターゲットリストファイルを使用してスクリプトを実行します: root@kitploit: python2 file.py ⚠️ 免責事項 このリポジトリはセキュリティ研究および教育目的のみ で作成されました。 免責事項の詳細は、Jenderal92のカバーにある免責事項をご覧ください。こちら !!! で確認できます。...

CVE-2020-6308-mass-exploiter

CVE-2020-6308-mass-exploiter CVE-2020-6308 大量エクスプロイター/ファザー。 使用方法: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...

Mass-CVE-2023-3460

Mass-CVE-2023-3460 CVE 2023 3460 の大量スキャン。 使い方 mass-CVE-2023-3460.py list.txt クレジット https://github.com/gbrsh/CVE-2023-3460...

CVE-2025-55182_full_exploit

CVE-2025-55182 完整漏洞利用程序 此仓库包含 CVE-2025-55182 的完整漏洞利用及远程代码执行（RCE） 运行漏洞利用的步骤 1. 安装依赖 pip install -r requirements.txt 2. 运行漏洞利用 python3 exploit.py targetlist.txt "command"...

nlist

nList Uno script Nmap per produrre elenchi di target da utilizzare con vari strumenti. Installazione Affinché lo script venga eseguito di default come parte di tutte le scansioni script -sC, deve essere salvato nella sottodirectory scripts della directory dati di Nmap insieme a un file nlist.conf...

Exploit for Missing Authentication for Critical Function in Cpanel

POCCVE-2026-41940 Quick start bash python3 pocCVE-202...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013372 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011174 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows:...

Iran Threatens to Start Attacking Major US Tech Firms on April 1

Tech giants like Apple, Google, and Microsoft are among those on a target list released by Iran’s Islamic Revolutionary Guard Corps...

EUVD-2022-55858

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, but...

CVE-2022-50840

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, but...

CVE-2022-50840 scsi: snic: Fix possible UAF in snic_tgt_create()

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF in snictgtcreate Smatch reports a warning as follows: drivers/scsi/snic/snicdisc.c:307 snictgtcreate warn: '&tgt-list' not removed from list If deviceadd fails in snictgtcreate, tgt will be freed, but...

CVE-2022-50840

The CVE-2022-50840 issue affects the Linux kernel SCSI driver snic: the code path snic_tgt_create() could trigger a use-after-free if device_add() fails, because tgt->list was not removed from snic->disc.tgt_list before freeing. The fix removes the tgt from snic->disc.tgt_list prior to f...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Mass Payload Attack React2Shell A modified M...

SAP-Nuclei-Templates

SAP-Nuclei-Templates Nuclei Templates fo...

Exploit for SQL Injection in Bplugins Html5_Video_Player

EN A PoC exploit scanner for CVE-2024-5522 vulnerability in Wo...

DDoSia Attack Tool Evolves with Encryption, Targeting Multiple Sectors

The threat actors behind the DDoSia attack tool have come up with a new version that incorporates a new mechanism to retrieve the list of targets to be bombarded with junk HTTP requests in an attempt to bring them down. The updated variant, written in Golang, "implements an additional security...

Do you know your OpSec?

Open Source Intelligence OSINT is any information in the public domain that an attacker can dig up about you. Because of that it forms the basis of every Red Team engagement, as threat actor scenarios are created using publicly available information. Bearing that in mind it makes sense to review...

TrickBot Banking Trojan Adds New Browser Manipulation Tools

The TrickBot banking Trojan, a close relative to Dyre, has a growing target list and new browser manipulation techniques, experts at IBM X-Force said. “We expect to see it amplify infection campaigns and fraud attacks, sharpen its aim on business and corporate accounts,” wrote Limor Kessem,...

Shylock Trojan Going Global with New Features, Resilient Infrastructure

The prolific, credential-stealing Shylock banking Trojan is growing increasingly sophisticated as its creators continue adding new modules and functionalities to the man-in-the-browser malware, according to a Symantec report. To this point, Shylock has made its money via man-in-the-browser attack...