CVE-2024-27198

CVE-2024-27198 Bypass de autenticación para TeamCity Server versión 2023.11.3 y anteriores. NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-27198 Publicación del blog de Rapid7:...

CVE-2023-26256

CVE-2023-26256POC root@kitploit: fofa:body="JIRA"&&body="2.0.50" root@kitploit: Usage: python3 CVE-2023-26256.py -h Descargo de responsabilidad Cualquier consecuencia o pérdida directa o indirecta causada por la difusión o el uso de la información proporcionada en este documento será...

CVE-2023-4220

CVE-2023-4220...

SUSE-SU-2026:21461-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory OOM termination bsc1248093. - CVE-2026-35206: specially crafted Chart will have contents extracted to immediate output...

CVE-2022-23935

CVE-2022-23935 The Exiftool software program, in versions prior to 12.38, has a security vulnerability that can be exploited through a specially crafted filename. This vulnerability allows for command injection, where an attacker can execute arbitrary commands on the system by appending a pipe...

CVE-2008-6827

CVE-2008-6827 Symantec Altiris Client Service 6.8.378 - Escalada de Privilegios Local Publicación en Exploit-DB en https://www.exploit-db.com/exploits/5625/ Autor Alex Hernandez aka @alt3kx...

external_zlib_CVE-2022-37434

ZLIB DATA COMPRESSION LIBRARY zlib 1.2.8 is a general purpose data compression library. All the code is thread safe. The data format used by the zlib library is described by RFCs Request for Comments 1950 to 1952 in the files http://tools.ietf.org/html/rfc1950 zlib format, rfc1951 deflate format...

libunwind_CVE-2015-3239

-- mode: Outline - - Esta es la versión 1.0 de la librería unwind. Esta librería soporta varias combinaciones de arquitectura/sistema operativo: Linux/x86-64: Funciona bien. Linux/x86: Funciona bien. Linux/ARM: Funciona bien. Linux/IA-64: Probado y soportado completamente. Linux/PARISC: Funciona...

hfs-cve-2014-6287-exploit

Herramienta de Explotación HFS CVE-2014-6287 Resumen Este repositorio contiene una herramienta de explotación basada en Python diseñada para aprovechar la vulnerabilidad CVE-2014-6287 en HTTP File Server HFS versiones 2.3.x. Esta vulnerabilidad permite a un atacante ejecutar comandos arbitrarios ...

CVE-2025-41244

💻 Step-by-Step Technical Process Compile the Program bash Compile the C code into an executable gcc -o /tmp/httpd /tmp/CVE-2025-41244.c Make it executable chmod +x /tmp/httpd Test the Version Functionality bash Test the -v flag should print version and exit /tmp/httpd -v Test the -V flag should...

CVE-2023-0748

CVE-2023-0748 BTCPayServer 1.7.5 y versiones anteriores son vulnerables a un ataque de Redirección Abierta. Pasos para Reproducir 1. Inicia sesión en tu cuenta en https://mainnet.demo.btcpayserver.org/login 2. Luego haz clic en el siguiente enlace...

cve-2021-22146

cve-2021-22146 I found during a internal pentest a vulnerability on elastic ECE. Elasticdump is a PoC for CVE-2021-22146 to dump database from elastic ece from 7.10.0 to 7.13.3 https://www.exploit-db.com/exploits/50152 Collaborators: Mario Díaz Caldera...

CVE-2022-27413

Hospital-Management-System v1.0 - SQLi Vendor Description: The vulnerability page is admin.php http://you ip/HMS/admin.php Hospital-Management-System v1.0 The adminname parameter in the admin.php page appears to be vulnerable to SQL injection attacks...

CVE-2024-27198-SOC-Lab

CVE-2024-27198 — SOC Detection & Incident Response Lab Authentication Bypass in JetBrains TeamCity | CVSS Score: 9.8 Critical This project builds a complete SOC Lab environment to simulate, detect, and respond to CVE-2024-27198 — an authentication bypass vulnerability in JetBrains TeamCity...

semcms

Introduction to Semcms SEMCMS is a foreign trade website content management system CMS that supports multiple languages. root@kitploit: v4.8 Download Link: http://www.sem-cms.com/TradeCmsdown/php/semcmsphp4.8.zip Causes of vulnerabilities: /xcR45qAdmin/SEMCMSMenu.php Line 66 Vulnerability code:...

cve-2016-10033-45

To build the dockers: $ sudo docker build . -t ep4/5.2.17 change 5.2.17 to 18 and 20. to run the dockers: $ sudo docker run -p 7001:80 ep4/5.2.17 change to 7001/7002/7003 and 5.2.17/18/20 in the respective folders...

CVE-2022-24715-go

CVE-2022-24715 El exploit de Icinga Web 2 escrito en go. El código Python original se puede encontrar en: https://packetstormsecurity.com/files/173516/Icinga-Web-2.10-Remote-Code-Execution.html...

CVE-2025-24016

CVE-2025-24016 How does this detection method work? This Nuclei HTTP template checks a target URL and its /app/login page for the Wazuh web interface, extracts the wazuhVersion value with a regex, and confirms the page is accessible 200 status and actually a Wazuh UI via title and keyword match. ...

ludus_crushftp_cve-2025-31161_sim

Ansible Role: CrushFTP CVE-2025-31161 Simulation Ludus Companion role for luduscrushftpcve-2025-31161 that adds a realistic scenario layer on top of the vulnerable CrushFTP instance. !NOTE This role requires the main luduscrushftpcve-2025-31161 role to be applied first. What It Does Simulated...

web-server-audit_CVE-2026-42945

webserveraudit No preguntes si eres vulnerable. Pregunta si eres explotable. Una herramienta Python de un solo archivo que audita nginx y Apache contra CVEs conocidos comprobando tanto la versión instalada como si la ruta de código vulnerable es realmente alcanzable a través de tu configuración...