CVE-2023-21036

Acropalypse detection and sanitization tools You can use the python script acropalypsedetection.py or the yara rule acropalypsedetection.yar to detect cropped images affected by acropalypse: root@kitploit: $ for i in testimgs/; do python3 acropalypsedetection.py $i; done...

Kestra-cve-2026-53576

Unauthenticated RCE in Kestra via a Trailing-Path Auth Bypass CVE-2026-53576 Contents Executive Summary 1. Summary 2. Affected / Fixed Versions 3. Test Environment & Pre-Flight Check 4. Root Cause 5. Attack Simulation 6. Detection Engineering 7. ATT&CK Mapping 8. Remediation & Hardening 9...

JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass

JFrog Artifactory contains an information disclosure caused by returning an internal anonymous-user token to unauthenticated callers when anonymous access is disabled, letting unauthenticated attackers access sensitive resources. The exploit requires anonymous access to be disabled. id:...

WP Cerber < 8.9.3 - Broken Access Control

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. id: CVE-2021-37598 info: name: WP Cerber 8.9.3 - Broken Acces...

Astro SSR - Open Redirect

Astro 5.2.0 through 5.12.7 contains an open redirect caused by improper handling of paths with double slashes in trailing slash redirection logic, letting attackers redirect users to arbitrary external domains, exploit requires on-demand SSR with Node or Cloudflare adapters. id: CVE-2025-54793...

CVE-2026-53595_exploit

CVE-2026-53595 + CVE-2026-53593 — FreeScout Anonymous ATO → RCE Unauthenticated remote code execution in FreeScout ≤ 1.8.223 a Laravel help desk by chaining two flaws, both fixed in 1.8.224 : CVE-2026-53595 — anonymous account takeover. POST /user-setup/hash/invitesentat picks the account by its...

CVE-2017-15715-httpd

CVE-2017-15715-httpd Tarea de contenedor de la 4.ª generación de whs Resumen Apache HTTPD es un servidor HTTP muy utilizado que permite ejecutar páginas PHP a través de modphp. Desde la versión 2.4.0 hasta la 2.4.29 existe una vulnerabilidad de análisis que hace que si un nombre de archivo termin...

AntiCropalypse

Actualización del 31 de marzo de 2023 A partir de hoy, la CDN de Discord elimina los datos finales de los PNG en tránsito, lo que significa que incluso las subidas antiguas ahora están a salvo de la vulnerabilidad aCropalypse. Por lo tanto, este bot ya no es necesario, pero permanecerá en línea...

CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-21546 This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting Unauthenticated Remote Code Execution RCE in applications utilizing the...

CVE-2024-1874

CVE-2024-1874 Prueba de concepto para CVE-2024-1874 Inyección de comandos a través del parámetro $command tipo array de procopen bypass de la corrección de CVE-2024-1874 El CVE: En las versiones de PHP 8.1. anteriores a 8.1.29, 8.2. anteriores a 8.2.20, 8.3. anteriores a 8.3.8, la corrección para...

acropalypse-reconstructor

Acropalypse CLI Multi-Tool Un script Python ligero y sin interfaz gráfica headless diseñado para detectar y reconstruir imágenes recortadas vulnerables a la vulnerabilidad Acropalypse CVE-2023-21036 para Google Pixel Markup y CVE-2023-28303 para la Herramienta de Recortes de Windows. Esta...

CVE-2026-63131

A flaw was found in OpenBao, an open source identity-based secrets management system. This vulnerability allows an authenticated attacker to bypass Access Control List ACL deny rules for LIST operations. By sending a specially crafted LIST request with a trailing-slash, an attacker can list paths...

CVE-2026-63131 OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix)

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/policy/acl.go could evaluate a broader wildcard ACL grant before more-specific trailing-wildcard ACL paths with capabilities = "deny" for a LIST operation. When a parent path permitted LIST and a...

CVE-2026-63131 OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix)

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/policy/acl.go could evaluate a broader wildcard ACL grant before more-specific trailing-wildcard ACL paths with capabilities = "deny" for a LIST operation. When a parent path permitted LIST and a...

EUVD-2026-84016

Dasel: Selector lexer panics on trailing whitespace in parseCurRune...

Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`

Same panic class as GHSA-m5j3-4634-c2vq and GHSA-m6xr-fvfg-5g64, sister site on the same function. Trigger is any selector ending in whitespace: dasel query 'a ' panics at selector/lexer/tokenize.go:60. The whitespace-skip loop right above lines 55-57 advances p.i to p.srcLen when the input is...

GHSA-65GG-G7RW-6CPC Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`

Same panic class as GHSA-m5j3-4634-c2vq and GHSA-m6xr-fvfg-5g64, sister site on the same function. Trigger is any selector ending in whitespace: dasel query 'a ' panics at selector/lexer/tokenize.go:60. The whitespace-skip loop right above lines 55-57 advances p.i to p.srcLen when the input is...

CVE-2026-63627

The mppx TypeScript interface for machine payments protocol contains a vulnerability prior to version 0.8.2 in the FeePayerPolicy component (src/tempo/internal/fee-payer.ts). The decodeFunctionData function failed to reject trailing bytes when validating fee-sponsored calldata. This allowed a cli...

CVE-2021-3156

Exploit Chain Deep-Dive: CVE-2021-3156 Baron Samedit Author: IJ Baig Date: July 7, 2026 1. CVE ID, Affected Versions, & Build Confirmation CVE ID: CVE-2021-3156 Vulnerability Type: Heap-Based Buffer Overflow Affected Version Range: Legacy Sudo versions 1.8.2 to 1.8.31p2, and stable versions 1.9.0...

CVE-2026-62866 Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`

Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.2, selector/lexer/tokenize.go parseCurRune advances the input index across trailing whitespace and then reads the source at the exhausted index without an end-of-input check. ...