5052 matches found
CVE-2026-24061
CVE-2026-24061 エクスプロイト - 動作版 v0.1 使用方法 ターゲットホストを指定してスクリプトを実行します: root@kitploit: python3 exploit.py 192.168.1.1 -p 2323 --debug 引数 位置引数: target ターゲットのIPまたはホスト名 オプション: -h, --help このヘルプメッセージを表示して終了 -p, --port PORT ポート デフォルト 23 --debug デバッグモードを有効化 例 root@kitploit: python3 exploit.py 192.168.1.1...
EUVD-2026-69704
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
CVE-2020-25705
CVE-2020-25705 CVE-2020-25705 및 POC-2020-25705에 대한 PoC 이것은 진행 중인 작업입니다. 월요일에 완성하겠습니다 :p 하지만 여기에 이미 충분한 내용이 있으므로 직접 완성할 수 있을 것입니다...
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
CVE-2026-83548
CVE-2026-83548 is a critical (CVSS 10.0) pre-authentication SSRF vulnerability in the SonicWall SMA1000 Appliance Work Place interface, caused by an unintended alternate access path (CWE-918/CWE-441). A remote unauthenticated attacker can exploit it to access sensitive functionality and perform u...
Automated-blind-xss-search-for-Burp-Suite
Femida-xss WIP Burp Suite 用の自動化されたブラインド XSS 検索プラグイン。 インストール Git clone https://github.com/ianxtianxt/Automated-blind-xss-search-for-Burp-Suite.git Burp - Extender - Add - blind-xss.py を見つけて選択 使い方 設定 まず、"Your url" というフィールドにコールバック URL を設定し、Enter を押すと、config.py ファイル内に自動的に保存されます。...
certipy-merged
certipy-merged このリポジトリは ly4k/Certipy のフォークで、多くのオープンなプルリクエストをマージし、相互に互換性を持たせ、（ある程度）テストしたものです。 これは 作業中 のため、一部の機能は期待どおりに動作しない可能性があり、壊れることもあります。 インストール pipx を使用する（推奨） 自動的に管理される仮想環境の利便性を好む場合は、pipx を使用してください： root@kitploit: pipx install git+https://github.com/zimedev/certipy-merged.git@main LDAP...
CVE-2026-70405
CVE-2026-70405 is an improper input validation vulnerability in the Erlang/OTP snmp module. The function snmp_pdus:dec_integer_notag/1 defaults its size limit to infinity, causing do_dec_integer_notag/2 to accumulate a BER INTEGER value via recursive shift-and-or operations whose cost grows super...
ysoserial.net
A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...
PT-2026-84518
Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 affected versions not specified Description A pre-authentication Server-Side Request Forgery SSRF flaw exists in the Work Place interface of the SMA1000 Appliance due to an unintended alternate access path. SSRF is a flaw tha...
VulnCheck KEV: CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
CVE-2026-14367
CVE-2026-14367 affects the Zephyr RTOS I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c. A statically-allocated work-node free-list (sys_slist_t) is accessed without synchronization: ISR-context callers invoke sys_slist_get() while the workqueue thread calls sys_slist_append(). This data race can...
North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales
Threat actors with ties to the Democratic People's Republic of Korea aka DPRK or North Korea have been observed seeking job opportunities beyond the information technology IT sector, with recent investigations identifying suspected workers employed in sales and marketing and the medical professio...
CVE-2017-13089
CVE-2017-13089 wget v1.19.1 익스플로잇 개발용. 주의 이것은 작동하는 익스플로잇이 아닙니다 — 개발 중입니다. 사용법 root@kitploit: Build the container docker build -t cve201713089 . OR ... docker pull robertcolejensen/cve201713089 Play around in the container, src will be mounted at /opt/CVE-2017-13089/src ./run.sh Develop an exploit...
CVE-2020-0423
CVE-2020-0423 CVE-2020-0423에 대한 익스플로잇이며, Binder deferred work UAF입니다. 현재 WIP 상태이며, 이는 wired0ut.github.io에서 연재 중인 블로그 게시물 시리즈입니다...
android-workprofile-exploit
Android Work Profile Security Research Controlled lab research on Android work-profile provisioning behavior, policy timing, and enterprise isolation boundaries. This repository documents academic security research performed in a controlled environment. It is not intended for unauthorized access,...
centipede
Centipede - un motore di fuzzing distribuito. Lavoro in corso. Perché Centipede Perché no? Stiamo attualmente cercando di fare fuzzing su alcuni target molto grandi e molto lenti per i quali libFuzzer, AFL e simili non scalano necessariamente bene. Per uno dei nostri esempi motivazionali vedi...