CVE-2023-2594

CVE-2023-2594 https://vulners.com/cve/CVE-2023-2594 A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. ...

PT-2026-90723

SEP sesam before 5.2.0.24 mishandles User Authorization with MFA. If AD authentication is configured and MFA is enforced, an attacker can create a second OTP access capability. SEP sesam and Active Directory handle username capitalization differently, which may allow multiple SEP sesam user...

CVE-2024-6043

CVE-2024-6043 root@kitploit: CVE-2024-6043 CVE-2024-6043 Overview This Python tool exploits the CVE-2024-6043 vulnerability, which affects the SourceCodester Best House Rental Management System 1.0. The vulnerability allows remote attackers to perform SQL Injection via the adminclass.php file,...

CVE-2022-31890

CVE-2022-31890 for osTicket | Support Ticketing System Nickname: root@kitploit: python nickname.py The output of the first nickname in the table. Password: root@kitploit: python password.py The output of the first password in the table. Output to file: root@kitploit: python dumpFile.py cat dump.t...

EUVD-2026-38208

Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion...

dell-emc_recoverpoint

Dell EMC RecoverPoint Exploits for an enterprise data protection platform I have discovered the following vulnerabilities in the RecoverPoint enterprise data protection platform, mentioned in Dell EMC's disclosure. http://seclists.org/fulldisclosure/2018/May/61 Critical unauthenticated remote cod...

cve-2011-2523-vsftpd-validation-lab

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Validation Lab ⚠️ Authorized Lab Only — conducted in an isolated VirtualBox Host-Only network using Kali Linux and Metasploitable2. No unauthorized systems were scanned or accessed at any point. Overview CVE-2011-2523 is one of the most well-known supply chain...

metasploitable-pentest-lab

Exploitation of vulnerabilities in Metasploitable Complete cycle of a real attack on a controlled and isolated environment: lab preparation, reconnaissance with nmap, attack surface prioritization, mapping to CVE, exploitation with Metasploit, post-exploitation, credential extraction and cracking...

POC-WP-XSS2Shell-CVE-2026-64638

XSS2Shell — PoC for CVE-2026-64638 Educational Proof of Concept for the XSS2Shell chain CVE-2026-64638, a pre-authentication XSS → RCE vulnerability in WordPress Core discovered independently by pwn.ai and disclosed on August 7, 2026. Table of contents 1. Executive Summary 2. Legal notice 3. Chai...

RDPLinkEnum

RDPLinkEnum By querying the registry, you can view which hosts the current host has connected to and the user name information used when connecting Perform demo...

Wordell

Wordell 🌐 Wordell is a powerful WordPress enumeration script designed to make your WordPress security assessments more efficient and comprehensive. It enables you to enumerate sitemaps, discover usernames, gather WordPress logins, capture screenshots, and generate random IP addresses with geo dat...

smtp_userenum

smtpuserenum Help: root@kitploit: python3 smtpuserenum.py -h Usage: root@kitploit: python3 smtpuserenum.py You can change the username list:...

Namechk

! The tool no longer works properly. There are much better alternatives like Sherlock, Maigret or whatsmyname. Namechk Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks. Use: Search available username: ./namechk.sh -au Search available...

osinteye

Esta herramienta no recibirá más actualizaciones. Instagram está obsoleto, así que decidí archivarla. Suite de enumeración y reconocimiento de nombres de usuario Sitios compatibles PyPI Github TestPypi About.me Instagram DockerHub Instalación Clonar el proyecto: root@kitploit: $ git clone...

osinteye

This will not receive any further updates. Instagram is deprecated, so I decided to just archive it. Username enumeration & reconnaisance suite Supported sites PyPI Github TestPypi About.me Instagram DockerHub Installation Clone project: root@kitploit: $ git clone...

KnockKnock

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of KnockKnock or to submit an issue, reference https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Please make sure to actually utilize the README. Designed to validate potential usernames by querying OneDrive and/or Microsoft...

vsftpd-backdoor

Exploit for the vsftpd 2.3.4 Backdoor CVE-2011-2523 This exploit takes advantage of a backdoor in version 2.3.4 of the vsftpd FTP service. The backdoor was maliciously introduced into the source code and allows remote command execution as root on the affected server How it works The backdoor is...

Linux Distros Unpatched Vulnerability : CVE-2026-88035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past t...

CVE-2025-7753

🚨 CVE-2025-7753 — SQL Injection PoC Exploit Author: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑7753 Vulnerability: Unauthenticated, time‑based SQL Injection 🔍 Overview A critical SQL Injection vulnerability exists in Online Appointment Booking System 1.0 Code‑Projects in the file...

CVE-2025-8971

CVE-2025-8971 SQL Injection Author: Byte Reaper Description : This exploit for CVE-2025-8971, a SQL injection vulnerability in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability exists in /admin/operations/travellers.php and can be exploited remotely via the val-username...