Tiny-XSS-Payloads

Tiny-XSS-Payloads Una colección de cargas útiles XSS cortas que se pueden usar en diferentes contextos. La DEMO disponible aquí: https://tinyxss.terjanq.me Cargas útiles actuales root@kitploit: ... -- root@kitploit: root@kitploit: root@kitploit: root@kitploit:...

CVE-2021-45010-TinyFileManager-Exploit

CVE-2021-45010 CVE-2021-45010: Уязвимость обхода пути в функциональности загрузки файлов в tinyfilemanager.php в Tiny File Manager Project’s Tiny File Manager = 2.4.3 позволяет удалённым злоумышленникам с действительными учётными записями пользователей загружать вредоносные PHP-файлы в корневой...

tinyfilemanager-2.4.3-exploit

CVE-2021-45010 Tiny File Manager-2.4.3 exploit A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project's Tiny File Manager = 2.4.6 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve...

tiny-AES-c

Tiny AES in C This is a small and portable implementation of the AES ECB, CTR and CBC encryption algorithms written in C. You can override the default key-size of 128 bit with 192 or 256 bit by defining the symbols AES192 or AES256 in aes.h. The API is very simple and looks like this I am using C...

CVE-2021-40964

Tiny File Manager = 2.4.6 - Удаленное выполнение кода аутентифицированный 🚨 Об эксплойте Это Bash-скрипт для аутентифицированного удаленного выполнения кода RCE для Tiny File Manager версий = 2.4.6, уязвимого по CVE-2021-40964. Скрипт использует: Слабую проверку загрузки и раскрытие корня...

tinyfilemanager-wh1z-edition

Tiny File Manager WH1Z-Edition Te presentamos Tiny File Manager WH1Z-Edition, la solución compacta y eficiente para gestionar tus archivos y carpetas con funciones mejoradas de privacidad y seguridad. Se acabaron los días de depender de recursos externos: he reducido el código a su núcleo,...

CVE-2021-45010

CVE-2021-45010 Título del Exploit: Tiny File Manager 2.4.6 Autenticado Ejecución Remota de Código Fecha: 04 Mar 2023 Autor del Exploit: Syd Software Enlace: https://github.com/prasathmani/tinyfilemanager Versión: Tiny File Manager = 2.4.3 Probado en: Parrot OS 20.04 CVE : CVE-2021-45010 Referenci...

Tiny Java Web Server - Cross-Site Scripting

A reflected cross-site scripting vulnerability in the web server TTiny Java Web Server and Servlet Container TJWS =1.115 allows an adversary to inject malicious code on the server's "404 Page not Found" error page. id: CVE-2021-37573 info: name: Tiny Java Web Server - Cross-Site Scripting author:...

CVE-2021-45010

CVE-2021-45010 🐍 Exploit PoC en Python creado para CVE-2021-45010. Tiny File Manager 2.4.7 Uso root@kitploit: usage: main.py -h -u URL -l USERNAME -p PASSWORD -g GUIPATH -r FSRELPATH options: -h, --help show this help message and exit -u URL, --url URL Base URL -l USERNAME, --username USERNAME...

ChameleonMini

ChameleonMini This is NOT the official repository of ChameleonMini, a freely programmable portable tool for NFC security analysis that can emulate and clone contactless cards, read RFID tags, and sniff/log RF data. This repository brings support for the Chameleon Tiny. Our Project is based on the...

obfus.h

obfus.h obfus.h è una libreria composta solo da macro per l'offuscamento in fase di compilazione di applicazioni C, progettata specificamente per Tiny C tcc puoi scaricarlo qui - Tiny-C-Compiler/releases. È pensata per piattaforme Windows x86 e x64 e supporta quasi tutte le versioni del...

tsh-sctp

Tiny SHell - Una backdoor UNIX open-source root@kitploit: Prima di compilare Tiny SHell 1. Prima di tutto, imposta la tua chiave segreta, che si trova in tsh.h; la chiave può avere qualsiasi lunghezza usa almeno 12 caratteri per una maggiore sicurezza. 2. Si consiglia di cambiare SERVERPORT, la...

Astra Linux – Vulnerability in Perl

HTTP::Tiny, a Perl core module since version 5.13.9 and available as a standalone package on CPAN, has an insecure default TLS configuration. In this configuration, users are required to explicitly choose to verify certificates...

Security update for perl-HTTP-Tiny (important)

openSUSE Security Update: Security update for perl-HTTP-Tiny Announcement ID: openSUSE-SU-2026:0274-1 Rating: important References: 1271020 Cross-References: CVE-2026-7017 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This...

OESA-2026-3204 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Use devmkmemdup in rtwsetsupportedband Simplify the code by using device managed memory allocations. This also fixes a memory leak in rtwregisterhw...

Linux Distros Unpatched Vulnerability : CVE-2026-66753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return 0x0D and line feed 0x0A bytes into HTTP...

UBUNTU-CVE-2026-66752

tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings, which causes the library to unconditionally apply chunk-decoding and discard...

UBUNTU-CVE-2026-66753

tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return 0x0D and line feed 0x0A bytes into HTTP header values on both request and response sides due to insufficient validation in header parsing and serialization. Attackers can explo...

CVE-2026-66753

tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return 0x0D and line feed 0x0A bytes into HTTP header values on both request and response sides due to insufficient validation in header parsing and serialization. Attackers can explo...

CVE-2026-66753

The CVE-2026-66753 entry concerns tiny-http up to version 0.12.0, where HTTP header values can be injected with CRLF characters due to insufficient validation in header parsing/serialization. The vulnerability enables response splitting, cache poisoning, session fixation via Set-Cookie injection,...