68669 matches found
perl-CVE-2013-1775
CVE-2013-1775 Apple Mac OSX 10.8.4 - Privilege Escalation Perl version of CVE-2013-1775 Apple Mac OSX 10.8.4 - Privelege Escalation exploit. References: https://www.exploit-db.com/exploits/27965/...
zizzania
zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...
CVE-2018-16763
CVE-2018-16763 Fuel CMS 1.4.1 - Remote Code Execution - Python 3.x Original Script : Exploit-DB...
CVE-2013-2729
Adobe Reader BMP/RLE heap corruption - CVE-2013-2729 Adobe Reader X is a powerful software solution developed by Adobe Systems to view, create, manipulate, print and manage files in Portable Document Format PDF. Since version 10 it includes the Protected Mode, a sandbox technology similar to the...
CVE-2026-38526-KrayinCRM-RCE
CVE-2026-38526 - Krayin CRM RCE xpl0ited by infrar3d This is a Remote Code Execution RCE proof-of-concept specifically designed for Krayin CRM v2.2.x, an open-source customer relationship management system. The script automates the exploitation of a file upload vulnerability in the CRM's...
log4shell-vulnerable-app
Log4Shell नमूना असुरक्षित अनुप्रयोग CVE-2021-44228 इस रिपॉजिटरी में CVE-2021-44228 से असुरक्षित एक Spring Boot वेब अनुप्रयोग है, जिसे Log4Shell नाम दिया गया है। यह Log4j 2.14.1 spring-boot-starter-log4j2 2.6.1 के माध्यम से और JDK 1.8.0181 का उपयोग करता है। अनुप्रयोग चलाना इसे चलाएँ: root@kitploit...
claude-create-CVE-2025-29927
Next.js Middleware Vulnerability Tester CVE-2025-29927 यह एप्लिकेशन Next.js मिडलवेयर प्राधिकरण बायपास भेद्यता CVE-2025-29927 को प्रदर्शित करता है। भेद्यता के बारे में CVE-2025-29927 Next.js मिडलवेयर में एक प्राधिकरण बायपास भेद्यता है। एक विशेष रूप से तैयार किया गया HTTP हेडर x-middleware-subreque...
CVE-2026-67278
MikroTik RouterOS accepts malformed RSA/PKCS1 v1.5 signatures during X.509 validation. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use the root’s public certificate - without its private key - to forge a trusted...
autocrack
AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...
EUVD-2026-72026
MikroTik RouterOS accepts malformed RSA/PKCS1 v1.5 signatures during X.509 validation. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use the root’s public certificate - without its private key - to forge a trusted...
CVE-2026-67278
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because its trust store includes a root CA with e=3 , an attacker who controls or redirects an outbound TLS connection can use the root's public certificate—without its private key—to forge a trusted intermedi...
malwoverview
Malwoverview !Alt...
CVE-2022-46169
CVE-2022-46169 Cacti تنفيذ التعليمات البرمجية عن بُعد العمياء قبل المصادقة إخلاء مسؤولية هذا للأغراض التعليمية فقط. لست مسؤولاً عن أفعالك. استخدمه على مسؤوليتك الخاصة. شرح يقوم هذا البرنامج النصي بتجربة القيم بالقوة الغاشمة للمتغيرات المطلوبة لاستغلال هذه الثغرة. يتطلب هذا الاستغلال المتغيرات...
fockcache
fockcache FockCache - न्यूनतम टेस्ट कैश पॉइज़निंग कैश पॉइज़निंग के लिए विवरण : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache वेब पेजों पर X-Forwarded-Host और X-Forwarded-Scheme हेडर आज़माकर कैश पॉइज़निंग करने का प्रयास करता है। सफल परिणाम के बाद, यह आपको एक...
Vuln-Next.js-CVE-2025-29927
root@kitploit: npx [email protected] Install packages root@kitploit: npm install -D @types/bcrypt npm install mysql2 npm install jose npm install -D @types/jsonwebtoken Prepare DB root@kitploit: CREATE TABLE users id INT PRIMARY KEY AUTOINCREMENT, username VARCHAR255 UNIQUE NOT NULL, passwor...
RootPipeTester
جدول المحتويات 1. ما هو RootPipe Tester؟ 2. لماذا يجب أن أستخدم RootPipe Tester؟ 3. كيف أستخدم RootPipe Tester؟ 4. PANIC!!! نظامي قابل للاختراق؟ هل سنموت جميعاً؟ 1. OS X 10.10 Yosemite 2. OS X 10.9 Mavericks 3. OS X 10.8 Mountain Lion 4. OS X 10.7 Lion, Mac OS X 10.6 Snow Leopard, Mac OS X 10.5...
lunar
LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...
NextJS_CVE-2025-29927
عرض تقديمي لتجاوز التفويض في Next.js يُظهر هذا التطبيق ثغرة x-middleware-subrequest في Next.js 13.4.19، والتي تسمح بتجاوز حماية middleware. الإعداد 1. تثبيت التبعيات: root@kitploit: npm install 2. تشغيل خادم التطوير: root@kitploit: npm run dev توضيح الثغرة يحتوي التطبيق على صفحة إدارة في /admin ي...
CVE-2022-4539
Usage Considerations: Adaptability: You can easily modify the payloads, IP generation logic, and proxies to match different scenarios or environments. Ethical Use: Ensure you have explicit permission before testing any system with this code. Scalability: This code is designed to be scalable and...