dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

CVE-2016-2098

CVE-2016-2098 Ruby-on-Rails에서 render를 사용자 제공 데이터에 사용할 때 발생하는 원격 코드 실행 취약점입니다. 설명: 이 문제는 사용자 제공 데이터에 render 메서드를 사용함으로써 발생합니다. render 메서드는 일반적으로 템플릿에서 페이지를 렌더링하는 데 사용되지만, render 메서드는 개발자가 일반 텍스트plaintext 및 인라인 코드inline도 렌더링할 수 있도록 합니다. render 함수: root@kitploit: File...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

OpenCATS - Open Redirect

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...

Gradio - Open Redirect

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...

CVE-2025-65264

CVE-2025-65264 설명 CPU‑Z 2.17 및 이전 버전및 버전 1.0.6.1 및 이전 버전의 CPU‑Z 드라이버를 사용하는 기타 제품에서 드라이버예: cpuz161.sys는 사용자가 제공한 주소의 값을 역참조하여 호출자가 제공한 시스템 버퍼에 썼습니다. 공격자는 입력 버퍼에 대상 주소를 제공하여 IOCTL을 통해 임의의 커널 메모리를 읽을 수 있습니다. PoC 이는 System 프로세스의 토큰을 읽는 간단한 PoC입니다. 영향 이로 인해 정보 유출이 발생할 수 있습니다. 또한 임의의 커널 쓰기에 취약한 드라이버와...

CVE-2016-2098-my-first-exploit

CVE-2016-2098-내-첫-익스플로잇 이 익스플로잇은 Ruby-on-Rails에서 사용자가 제공한 데이터에 render를 사용할 때 발생하는 원격 코드 실행 취약점입니다. python3로 작성되었으며, requests 라이브러리를 설치해야 합니다. 명령어는 다음과 같습니다. root@kitploit: pip3 install requests...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An...

EUVD-2026-70822

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue...

CVE-2026-64195

CVE-2026-64195 is an out-of-bounds write vulnerability in DASYLab (by MEAS X), caused by insufficient validation of user-supplied data when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted .DSB file. All versions before 2026.0.0 are affected; updating to 2...

CVE-2026-81766

The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9.8.0 before installing one from a user-supplied URL, allowing an administrator of a subsite on a multisite network to install and execute...

Astra Linux – Vulnerability in python-setuptools

A vulnerability exists in the packageindex module of pypa/setuptools versions up to 69.1.1, allowing for remote code execution through its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are vulnerable t...

PT-2026-72896

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAW PRIMITIVES header size before division vmw cmd draw computes maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is u32 and is taken straight from the user-supplied command stream. When...

CVE-2026-16879

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...

EUVD-2026-57542

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...

PT-2026-71164

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input...

ImageMagick < 6.9.13-51 / 7.x < 7.1.2-26 Heap Buffer Over-write (CVE-2026-62343)

The remote host has a version of ImageMagick installed that is prior to 6.9.13-51 or 7.x prior to 7.1.2-26. It is, therefore, affected by a heap buffer over-write vulnerability: - An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied...

CVE-2026-17598

CVE-2026-17598 affects Sonatype Nexus Repository 3. The issue is improper input validation in scheduled task configuration: internal configuration keys from user-supplied task properties are not properly filtered when creating/updating a scheduled task via the admin UI. A user with permission to ...

EUVD-2026-54517

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...