23595 matches found
CVE-2023-36281
CVE-2023-36281 CVE-2023-36281 の PoC この PoC を参考にしました。残念ながら、subprocess.Popen のインデックスが Python 環境ごとに異なるため動作しません。しかし、私の PoC コードはこの問題を解決しています。 インストール $ pip install -r requirements.txt 実行 1. 各環境で異なる可能性があるため、自分の環境で subprocess のインデックスを取得します。 入力 $ python getindexofsubprocess.py 出力 root@kitploit:...
MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting
paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...
Vite dev server - Cross-Site Scripting
Vite's dev server, when used with appType: 'custom' and manually invoking server.transformIndexHtml using the unmodified request URL, is vulnerable to XSS via a crafted URL payload. If the HTML being served includes an inline module script ..., an attacker can inject a script via the URL,...
OfficeWeb365 Indexs Interface - Arbitrary File Read
There is any file reading in the officeWeb365 Indexs interface. id: CVE-2024-37728 info: name: OfficeWeb365 Indexs Interface - Arbitrary File Read author: DhiyaneshDK severity: high description: | There is any file reading in the officeWeb365 Indexs interface. impact: | Unauthenticated attackers...
bomber
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...
dirhunt
.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/v0.2.0/images/dirhunt.png | .. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/pip-rating-badge/pip-rating-badge.svg :target: https://github.com/Nekmo/dirhunt/actions/workflows/pip-rating.yml :alt: pip-rating badge .. image::...
wphardening
WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...
getsploit
Getsploit Vulners 데이터베이스에서 공개 익스플로잇을 검색하고 다운로드하세요 — 온라인으로, 또는 로컬 인덱스에서 완전히 오프라인으로...
reconerator
개요 이것은 다양한 상황 인식 활동을 수행하는 사용자 지정 .NET 어셈블리입니다. 현재 여러 기능 세트가 있습니다: BASIC - 디스크와 레지스트리에서 정보를 수집합니다. LDAP - 사용자 지정 AD LDAP 쿼리를 수행할 수 있습니다. RESOLVEHOST - DNS 조회 쿼리를 수행합니다. INDEXSEARCH - Windows 인덱싱 서비스에서 로컬 파일과 이메일파일명 및 내용을 검색합니다. PROXYCHECK - 제공된 URL에 접근할 때 사용될 프록시 서버를 표시합니다. 이 도구를 작성할 당시 GhostPack이...
Containerd has image-pull DoS via crafted OCI index graph amplification
Impact A vulnerability exists in containerd's image pull handlers where a crafted OCI image index containing deeply nested or heavily fanned-out descriptor graphs can cause unbounded CPU and memory consumption. During the PullImage operation, the recursive traversal and processing of child...
GHSA-PG57-6JWG-Q645 Containerd has image-pull DoS via crafted OCI index graph amplification
Impact A vulnerability exists in containerd's image pull handlers where a crafted OCI image index containing deeply nested or heavily fanned-out descriptor graphs can cause unbounded CPU and memory consumption. During the PullImage operation, the recursive traversal and processing of child...
EUVD-2026-87131
InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane interpolates the administrator-controlled taxratedecimalplaces setting into an ALTER TABLE statement for iptaxrates in Settings::index without strict integer validation...
CVE-2026-33639
Versions of InvoicePlane prior to 1.7.2 are vulnerable to DDL injection due to a lack of strict integer validation in the Settings::index() function. The application interpolates the administrator-controlled tax_rate_decimal_places setting directly into an ALTER TABLE statement for ip_tax_rates. ...
german-owasp-day
german-owasp-day German OWASP Day カンファレンスサイト & プレゼンテーションアーカイブ ページは god.owasp.de にあります。 各年ごとにフォルダを作成し、メインインデックスからそのフォルダへのリダイレクトを設定してください。...
trivy-java-db
trivy-java-db 概要 trivy-java-db は、maven-index リポジトリのデータから SQLite データベースを構築し、jar ファイルの ArtifactID、GroupID、Version、sha1 を保存します。 この DB は、Trivy が GAV を含まない jars に関する情報を発見するために使用されます。 更新間隔 毎日 00:00 Javaインデックスデータベースのダウンロード 実際にコンパイルされたデータベースは、Trivy または Oras CLI からダウンロードできます。 Trivy: root@kitploit:...
ROOT-APP-PYPI-CVE-2025-47273 CVE-2025-47273 in setuptools - Patched by Root
Root has patched CVE-2025-47273 in the setuptools package for Root:PyPI. Multiple fixed versions available...
DEBIAN-CVE-2026-97580
In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: bound HEVC tile loops and PPS id to the array capacity computetilesuniform and computetilesnonuniform loop over numtilecolumnsminus1 + 1 / numtilerowsminus1 + 1 entries, and assemblehwpps writes one COLUMNWIDTH /...
CVE-2026-98141
The Linux kernel contains a vulnerability in the ntfs component where the update_reparse_data() function incorrectly ignores the return value of set_reparse_index(). When an index insertion fails, the system removes the written reparse data as cleanup but still returns 0, causing symlink(2) and W...
CVE-2026-98141
In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure updatereparsedata ignores the return value of setreparseindex. When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink2...