CVE-Exploit-Research-Development

🔐 SSH漏洞利用工具（仅供教育用途） 📌 描述 该工具演示了以下漏洞的利用： CVE-2008-0166 CVE-2008-1657 它连接到存在漏洞的SSH服务，并提供： 持久的交互式Shell 命令执行日志记录 自动生成PDF和DOCX报告 ⚙️ 功能 持久的Shell（cd、ls、pwd等） 捕获真实的命令输出 生成专业报告 有序的输出目录 📦 安装 root@kitploit: git clone https://github.com/yourusername/ssh-exploit-tool.git cd ssh-exploit-tool pip install -r...

CVE-Exploit-Research-Development

🔐 SSH 漏洞利用工具（仅限教育用途） 📌 描述 此工具演示以下漏洞的利用： CVE-2008-0166 CVE-2008-1657 它连接存在漏洞的 SSH 服务，并提供： 持久化交互式 Shell 命令执行日志记录 自动生成 PDF 与 DOCX 报告 ⚙️ 功能特性 持久化 Shell（cd、ls、pwd 等） 捕获真实命令输出 生成专业报告 有序的输出目录 📦 安装 root@kitploit: git clone https://github.com/yourusername/ssh-exploit-tool.git cd ssh-exploit-tool pip instal...

patch-diffing-in-the-dark

黑暗中的补丁比对 一个利用CVE分析与补丁比对来发现新漏洞的系列博客文章。 正如博客文章所示，4个CVE均源自对CVE-2021-1657的深入研究。 目录 CVE-2021-1657的成果： 第1部分 - 黑暗中的补丁比对 第2部分 - 坠入兔子洞 第3部分 - 倒下但未出局 第4部分 - 你信任我吗？ CVE-2020-1030的成果（额外研究）： 补丁比对：又一个Spooler漏洞 发现又一个Spooler漏洞 CVE映射...

📄 WordPress EventPrime 4.2.8.1 Arbitrary File Upload

WordPress EventPrime plugin versions 4.2.8.1 and below suffer from an unauthenticated arbitrary file upload vulnerability. CVE-2026-1657: Unauthenticated Arbitrary File Upload in EventPrime Plugin Disclaimer: This repository is created for educational purposes and ethical disclosure only. The...

Exploit for CVE-2026-1657

CVE-2026-1657 CVE-2026-1657 exp...

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

🔐 SSH Exploit Tool Educational Use Only 📌 Description Th...

CVE-2025-1657

The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection due to a missing capability check on the stmlistingajax AJAX action in all versions up to, and including, 2.1.7. This makes it possible for...

CVE-2025-1657

The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection due to a missing capability check on the stmlistingajax AJAX action in all versions up to, and including, 2.2.0. This makes it possible for...

CVE-2025-1657

creationtimestamp| type| source ---|---|--- 2025-03-15 02:45:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7650 2025-03-15 03:48:54+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114164402365852016 2025-03-15 04:00:45+00:00| seen|...

CVE-2025-1657

CVE-2025-1657 concerns the Directory Listings WordPress plugin – uListing for WordPress. The Red Hat and NVD entries, plus Wordfence details, state that all versions up to and including 2.1.7 are vulnerable due to a missing capability check on the stm_listing_ajax AJAX action. This allows authent...

CVE-2025-1657 Directory Listings WordPress plugin – uListing <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection

The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection due to a missing capability check on the stmlistingajax AJAX action in all versions up to, and including, 2.1.7. This makes it possible for...

Linux Distros Unpatched Vulnerability : CVE-2011-1657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 ZipArchive::addGlob and 2 ZipArchive::addPattern functions in ext/zip/phpzip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service...

CVE-2022-1657

Vulnerable versions of the Jupiter = 6.10.1 and JupiterX = 2.0.6 Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion. In the JupiterX theme, the jupiterxcploadpaneaction AJAX action present in the...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2024:1657-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1657-1 advisory. - CVE-2023-52425: Fixed etree XMLPullParser tests for Expat =2.6.0 with reparse deferral bsc1219559. Tenable has extracted the preceding...

CVE-2024-1657 Platform: insecure websocket used when interacting with eda server

A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation from the Ansible rulebook EDA server. An attacker that has access to any machine in the CIDR block could download all rulebook data from the WebSocket, resulting in loss of...

CVE-2024-1657

creationtimestamp| type| source ---|---|--- 2024-02-29 18:16:53+00:00| seen| https://t.me/ctinow/196889...

CVE-2024-1657

A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation from the Ansible rulebook EDA server. An attacker that has access to any machine in the CIDR block could download all rulebook data from the WebSocket, resulting in loss of...

CVE-2008-1657

creationtimestamp| type| source ---|---|--- 2023-12-17 23:26:59+00:00| seen| https://t.me/arpsyndicate/1865...

SUSE CVE-2011-1657

The 1 ZipArchive::addGlob and 2 ZipArchive::addPattern functions in ext/zip/phpzip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service application crash via certain flags arguments, as demonstrated by a GLOBALTDIRFUNC and b GLOBAPPEND...

Amazon Linux AMI : postgresql92 (ALAS-2023-1657)

The version of postgresql92 installed on the remote host is prior to 9.2.24-3.68. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1657 advisory. When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a...