CVE-2026-76904

Inventaire GeoServer WFS et vérification autorisée Ce dépôt contient deux scripts Python pour l'examen des points de terminaison WFS de GeoServer. Aperçu wfsinventory.py Objectif : Inventorier les couches, les champs XSD et les valeurs WFS, et vérifier facultativement les candidats via un contrôl...

CVE-2024-30167

PoC pour Atlona OME - Injection de commande authentifiée Avertissement : Cette preuve de concept est fournie uniquement à des fins éducatives et de recherche. N'utilisez pas ce code sur des systèmes que vous ne possédez pas ou pour lesquels vous n'avez pas d'autorisation explicite de tester. Je n...

CVE-2019-20933

LAB 5-CVE-2019-20933 I. ANALYSE DU SYSTÈME Identification de la surface d'attaque En commençant par ce qui s'exécute dans l'environnement. Je liste tous les conteneurs actifs : root@kitploit: docker ps La victime expose un seul port :8086. Actuellement, je ne dispose pas d'informations détaillées...

Exploit-CVE-2023-6063-PoC-Vuln

CVE-2023-6063 — PoC d'injection SQL dans WP Fastest Cache -red Preuve de concept PoC pour CVE-2023-6063 , une vulnérabilité d'injection SQL aveugle basée sur le temps et non authentifiée affectant WP Fastest Cache ≤ 1.2.2. La vulnérabilité peut être déclenchée via le cookie wordpressloggedin et...

CVE-2026-1581-Analysis-Lab

CVE-2026-1581 — wpForo Forum = 2.4.14 Injection SQL basée sur le temps non authentifiée ORDER BY ภาษาไทย Résumé Exécutif...

CVE-2025-52021

CVE-2025-52021 — Time-Based Blind SQL Injection в PuneethReddyHC / Online Shopping System Advanced v1.0 CVE: CVE-2025-52021 Название: Time-Based Blind SQL Injection через параметр productid в editproduct.php Вендор / Репозиторий: PuneethReddyHC —...

CVE-2026-5000

CVE-2026-5000 Informations importantes Cette CVE a été approuvée par CVE.org ainsi que par la NVD. Veuillez consulter les liens de référence suivants. CVE.org - https://vulners.com/cve/CVE-2026-5000 NVD - https://nvd.nist.gov/vuln/detail/CVE-2026-5000 PoC de la vulnérabilité Windows Defender...

Zabbix-CVE-2024-42327-SQL-Injection-RCE

Zabbix-CVE-2024-42327 RCE PoC root@kitploit: / / | / / / | \ / \ / // / / // /| | / / / / / | | / / // // / / // / // // // // / / / / / / / / | |/ / /// // // / / // / // / / / / / |// //// // // //// // NSFOCUS CERT a détecté que Zabbix a publié un bulletin de sécurité et a corrigé la...

EUVD-2026-81296

Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows remote attackers to cause denial of service by supplying a crafted comma-separated address list. Attackers can send a single email with a large number of addresses to block the...

Mahoraga-Webapp-Defender

Mahoraga Webapp Defender AI-powered reactive webapp defense system designed to withstand AI-powered hacks in real-time. Table of Contents Mahoraga Webapp Defender Table of Contents Introduction Target Website Mahoraga Defender Architecture Dual Environments Agent Pipeline How to Start Getting rea...

Linux Distros Unpatched Vulnerability : CVE-2026-92987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - roxmltree through 0.21.1 performs quadratic-time attribute and namespace validation during XML parsing without limits on attribute count. Attackers can craft XM...

Network-Detection-Engine

version: 0.001 Network Detection Engine root@kitploit: A lightweight 'Network Intrusion Detecion Engine' captures Live Traffic and detects real-world live attacks in real time. Zig0.15.2 . Featuress root@kitploit: - Live packet capture using libpcap - Custom packet parsing: - Ethernet - IPv4 - TC...

CVE-2026-92596 Nodemailer before 9.1.0 Denial of Service via addressparser

Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows remote attackers to cause denial of service by supplying a crafted comma-separated address list. Attackers can send a single email with a large number of addresses to block the...

CVE-2026-92596

Nodemailer , a Node.js email-sending library, is affected by a quadratic time complexity vulnerability in its addressparser component (versions before 9.1.0 ). A remote attacker can send a single email containing a crafted comma-separated address list with a large number of addresses, causing the...

SindriKit v2.0.0

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

marshalsec

Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...

CVE-2026-92749

SafeLine through version 9.4.1 contains an authentication bypass in its management console. The session-signing secret is derived from a time-seeded math/rand generator , allowing unauthenticated remote attackers who can bound the install timestamp to reconstruct the key offline and forge valid a...

EUVD-2026-81021

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator...

CVE-2026-2413-POC

CVE-2026-2413-POC Le plugin Ally – Web Accessibility & Usability pour WordPress est vulnérable à l'injection SQL via le chemin d'URL dans toutes les versions jusqu'à la 4.0.3 incluse. Cela est dû à un échappement insuffisant du paramètre d'URL fourni par l'utilisateur dans la méthode...

CVE-2026-92718

Nuclei versions before 3.11.1 cache template signature verification based only on file modification time without content checksums. Attackers can replace verified templates with unsigned malicious content and restore the original modification time to bypass signature checks and execute arbitrary...