CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - SQL Injection Vulnerability in the "email" Parameter During "savestaff" Operation Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. A malicious attacker can issue SQL commands to the MySQL database when...

flashingestor

flashingestor Una TUI para la recolección de Active Directory. Filosofía Los principales objetivos de este proyecto son: 1. Ser un ingestor de datos completo compatible con BloodHound CE Community Edition 2. Ser más rápido, menos ruidoso y más personalizable que otros recolectores 3. Proporcionar...

codejail

CodeJail CodeJail manages execution of untrusted code in secure sandboxes. It is designed primarily for Python execution, but can be used for other languages as well. Security is enforced with AppArmor. If your operating system doesn't support AppArmor, or if the AppArmor profile is not defined a...

capsule

Capsule Comenzando • Documentación • Problemas • Contribuir Resumen Capsule es un runtime para ejecutar código no confiable en entornos aislados. Cada tarea se ejecuta dentro de su propio sandbox de WebAssembly, proporcionando: Ejecución aislada : Cada tarea se ejecuta aislada del sistema anfitri...

vault

Vault Nota importante : Nos tomamos muy en serio la seguridad de Vault y la confianza de nuestros usuarios. Si cree que ha encontrado un problema de seguridad en Vault, por favor, divulgue de manera responsable contactándonos en [email protected]. Sitio web: developer.hashicorp.com/vault Lis...

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

CVE-2020-9484_Exploit

CVE-2020-9484Exploit Exploit for Apache Tomcat deserialization CVE-2020-9484 which could lead to RCE Affected versions: Apache Tomcat 10.x exploit.sh root@kitploit: exploit.sh your IP your port target IP target port...

pySigma-backend-opensearch

pySigma OpenSearch Backend This is the OpenSearch backend for pySigma. It provides the package sigma.backends.opensearch with two backend classes: OpensearchLuceneBackend - Converts Sigma rules to Lucene query syntax OpenSearchPPLBackend - Converts Sigma rules to PPL Piped Processing Language...

CVE-2025-55182-poc

CVE-2025-55182 Proof of Concept Critical Pre-Authentication Remote Code Execution in React Server Components A complete proof-of-concept demonstrating CVE-2025-55182, a critical vulnerability in [email protected] that allows unauthenticated attackers to execute arbitrary code via prototype...

gustave

c Airbus 2021, sduverger GUSTAVE - Embedded OS kernel fuzzer What is it ? GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL and all of its forkserver siblings. It allows to fuzz OS kernels like simple applications. Thanks to QEMU, it is multi-platform. One can see...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

exploit_CVE-2022-24112

exploitCVE-2022-24112 CVE-2022-24112 Installation root@kitploit: git clone https://github.com/btar1gan/exploitCVE-2022-24112 Usage root@kitploit: cd exploitCVE-2022-24112/ python3 508291.py && python3 508292.py If you have any feedback, please reach out...

mdk4

MDK4 MDK es una herramienta de prueba de concepto para explotar debilidades comunes del protocolo IEEE 802.11. Acerca de MDK4 MDK4 es una nueva versión de MDK3. MDK4 es una herramienta de prueba de Wi-Fi de E7mer, ASPj de k2wrlz, que utiliza la librería osdep del proyecto aircrack-ng para inyecta...

DOCxNGINxFX

WORDLISTxGENERATORxFX Version 1.0 Version 2.0 WORDLISTxGENERATORxFX renamed to DOCxNGINxFX Version 3.0 DOCxNGINxFX I wrote this to give somethink back to the great and powerful open source community all out there that shares their knowledge or frameworks and from whom I have learned so much. The...

flipper-template

Flipper Zero Zig Template A modern, production-ready template for developing Flipper Zero applications using the Zig programming language. This project provides a streamlined build system that integrates Zig with the Flipper Zero SDK, enabling developers to write type-safe, memory-safe applicatio...

poseidon

██████╗ ██████╗ ███████╗███████╗██╗██████╗ ██████╗ ███╗ ██╗ ██╔══██╗██╔═══██╗██╔════╝██╔════╝██║██╔══██╗██╔═══██╗████╗ ██║ ██████╔╝██║ ██║███████╗█████╗ ██║██║ ██║██║ ██║██╔██╗ ██║ ██╔═══╝ ██║ ██║╚════██║██╔══╝ ██║██║ ██║██║ ██║██║╚██╗██║ ██║ ╚██████╔╝███████║███████╗██║██████╔╝╚██████╔╝██║ ╚████...

CVE-2021-3572

CVE-2021-3572 This repository is designed for testing CVE-2021-3572 in pypa/pip. For more information, see these resources: CVE page: https://vulners.com/cve/CVE-2021-3572 PR where vulnerability was fixed: https://github.com/pypa/pip/pull/9827 Issue with more discussion:...

fofa_viewer

Descarga de release · Reportar Bug · Solicitar funciones Chino | EN Introducción Fofa Viewer es un cliente FOFA fácil de usar escrito en JavaFX, que pertenece a la comunidad WgpSec y es mantenido principalmente por f1ashine. Utiliza el potente motor de búsqueda de Internet FoFa, encapsula muchas...

CVE-2025-61155

CVE-2025-61155 — Arbitrary Process Termination in GameDriverX64.sys A signed kernel-mode anti-cheat driver — GameDriverX64.sys, shipped with Tower of Fantasy Hotta Studio / Perfect World — lets any unprivileged local user terminate arbitrary processes , including PPL-protected antivirus/EDR...