CVE-2026-97177

A flaw in the Keycloak Admin REST API user update mechanism allows for a permission bypass when Fine-Grained Admin Permissions are enabled. The system fails to validate specific password reset authorizations during general user profile updates. This allows a delegated administrator —who should be...

python-tuf

用于保护软件更新系统的框架 The Update Framework TUF 是一个用于安全内容交付和更新的框架。它能抵御多种类型的供应链攻击，并具备对妥协的恢复能力。本仓库是用 Python 编写的参考实现 ，旨在符合 TUF 规范 的 1.0 版本。 Python-TUF 提供了以下 API： tuf.api.metadata，一个“底层”API，旨在提供对 TUF 元数据的简便、安全访问，并处理从/到文件的（反）序列化。 tuf.ngclient，一个基于元数据 API 构建的客户端实现。 tuf.repository，一个同样基于元数据 API 构建的仓库库。该模块目前不被视为...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

Log4j-Updater

Log4j Updater Con la inevitable necesidad de actualizar el famoso framework de Java llamado Log4j, numerosas empresas necesitan actualizar Log4j en varios equipos al mismo tiempo, lo que requiere tiempo y costo, y ahí es donde entra el Log4j Updater. log4jupdater.sh es un sencillo script bash cuy...

sjcam

Lelouch: SJCAM SJ4000 Firmware Research and Custom Firmware Trocar para Português Brasil Reverse engineering notes, firmware tooling, proof-of-concept code, and a custom firmware interface for the Allwinner V3 version of the SJCAM SJ4000 Air. Research article This repository contains the code and...

PloitKit

PloitKit 黑客的工具箱 PloitKit 是一款基于 Python 的 GUI 工具，旨在成为所有其他软件的一站式解决方案。我曾面临这样的问题：当我需要切换到不同的系统，或者丢失了我的 U 盘时，不得不去谷歌搜索每个工具并下载它们。因此，我决定创建这样一个工具，只需点击再点击，工具就在眼前。 我已在此工具中添加了超过 900 个工具，但目前只有 400+ 个可用，以测试该工具是否有效。如果它运行良好，我将向所有人开放。 特性 1. 自动更新 — 无需每次手动到这里检查新版本。 2. 更好的错误处理 — 有些工具可能导致错误，因此我添加了此选项。 3. 图形界面 — 只需点击再点击...

CVE-2022-0952

CVE-2022-0952 Sitemap by click5 1.0.36 - 未授权的任意选项更新 描述 该插件在通过 REST 端点更新选项时缺乏授权和 CSRF 检查，并且未确保要更新的选项属于该插件。因此，未认证的攻击者可以更改任意博客选项，例如 userscanregister 和 defaultrole，从而允许他们创建新的管理员账户并接管博客。 示例：启用管理员与注册 root@kitploit: $ python3 CVE-2022-0952.py -u http://192.168.1.131:5555 The plugin version is below...

CVE-2026-0023-Update-Ownership-PoC

CVE-2026-0023 - Android 更新所有权信任绕过 PoC 一个完整的 Android 实验室环境，用于重现和研究 CVE-2026-0023。 此仓库演示了 CVE-2026-0023 如何允许普通安装程序影响仅应由系统控制的内部 Android 安装标志，从而导致应用程序更新期间 Android 的“更新所有权”警告被抑制。 该项目包含三个 Android 应用程序，它们模拟了一个真实的更新所有权工作流程，并提供了一个可重现的环境来观察有漏洞的行为。 概述 Android 引入了更新所有权，以帮助应用程序、应用商店和企业环境维护可信的更新链。...

cve-2021-21425

Exploit for: GravCMS 1.10.7 - Arbitrary YAML Write/Update Unauthenticated Usage: root@kitploit: python3 exploit.py --url http://192.168.204.12/grav-admin Expected behaviour Do not use this exploit on systems you are not authorized! Happy hacking...

fsociety

fsociety A Modular Penetration Testing Framework Install root@kitploit: pip install fsociety Update root@kitploit: pip install --upgrade fsociety Usage root@kitploit: usage: fsociety -h -i -s A Penetration Testing Framework optional arg...

COMahawk

COMahawk Escalada de privilegios: Armando CVE-2019-1405 y CVE-2019-1322 Video Demo https://vimeo.com/373051209 Uso Compilar o descargar desde Release https://github.com/apt69/COMahawk/releases 1. Ejecuta COMahawk.exe 2. ??? 3. Con suerte, beneficio o 1. COMahawk.exe "comando personalizado a...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

scorecard

OpenSSF Scorecard...

WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting

WordPress Elementor Website Builder plugin before 3.1.4 contains a DOM cross-site scripting vulnerability. It does not sanitize or escape user input appended to the DOM via a malicious hash. id: CVE-2021-24891 info: name: WordPress Elementor Website Builder 3.1.4 - Cross-Site Scripting author:...

WordPress White Label CMS <2.2.9 - Cross-Site Scripting

WordPress White Label CMS plugin before 2.2.9 contains a reflected cross-site scripting vulnerability. It does not sanitize and validate the wlcmslogincustomjs parameter before outputting it back in the response while previewing. id: CVE-2022-0422 info: name: WordPress White Label CMS 2.2.9 -...

WordPress Super Socializer <7.13.30 - Cross-Site Scripting

WordPress Super Socializer plugin before 7.13.30 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape the urls parameter in its thechampsharingcount AJAX action available to both unauthenticated and authenticated users before outputting it back in the response...

RSVPMaker <= 9.2.5 - SQL Injection

The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers to steal sensitive information from t...

Users Ultra <= 3.1.0 - SQL Injection

The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the datatarget parameter before it is being interpolated in an SQL statement and then executed via the ratingvote AJAX action available to both unauthenticated and authenticated users, leading to an SQL Injection...

Wordpress Zedna eBook download <1.2 - Local File Inclusion

Wordpress Zedna eBook download prior to version 1.2 was affected by a filedownload.php local file inclusion vulnerability. id: CVE-2016-10924 info: name: Wordpress Zedna eBook download 1.2 - Local File Inclusion author: idealphase severity: high description: | Wordpress Zedna eBook download prior...

Tutor LMS <= 2.1.10 - SQL Injection

Tutor LMS – eLearning and online course solution plugin for WordPress all versions up to 2.6.1 contains a time-based SQL Injection caused by insufficient escaping on the questionid parameter in SQL queries, letting authenticated attackers with subscriber or higher access extract sensitive...