ADB-Toolkit

!made-with-bashhttps://img.shields.io/badge/-Made%20with%20Bash-1f425f.svg?logo=image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAYAAADgdz34AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyZpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlk...

CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection

CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection Spring Security OAuth 2.3 Open Redirection - Analisi e Riproduzione Exploit Title: Redirect aperto in spring-security-oauth2 Date: 17 June 2019 Exploit Author: Riemann Vendor Homepage: https://spring.io/projects/spring-security-oauth Softwa...

Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution

Rejetto HTTP File Server HFS 2.3.x - Esecuzione remota di comandi CVE-2014-6287 Riscrittura di Pergyz 49584.py per restituire una Reverse Shell PowerShell x64 Utilizzo $ python3 hfs-2-3-exploit.py Fornisci le variabili quando richiesto, avvia automaticamente Netcat per te...

HFS_EXPLOIT_PROJECT

HFSEXPLOITPROJECT Metasploit RCE su HFS 2.3 - CVE-2014-62 🔖 Titolo del Progetto root@kitploit: Esecuzione di codice remoto tramite HTTP File Server HFS 2.3 ⚙ Strumenti Utilizzati • Kali Linux • Nmap • Metasploit • Target: HFS 2.3 su Windows 7 🔐 Dettagli della Vulnerabilità • Nome: CVE-2014-6287 •...

TospoVirus

Building TospoVirus for Distribution: ./build.sh Distribute to a working pineapple with version 2.3: ssh -oStrictHostKeyChecking=no -oUserKnownHostsFile=/dev/null [email protected] "mkdir /tospo" scp -oStrictHostKeyChecking=no -oUserKnownHostsFile=/dev/null dist/tv...

HFS2.3_poc

HFS2.3poc Esecuzione remota di codice non autenticata in HFS2.3 CVE-2024-23692 python HFS2.3poc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --'...

Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

Dieses Repository hat keine README-Datei...

st2-048

Vulnerabilità di esecuzione di codice remoto St2-048 Apache Struts 2 possibile RCE nell'app Struts Showcase nell'esempio del plugin Struts 1 nella serie Struts 2.3.x http://struts.apache.org/docs/s2-048.html https://cwiki.apache.org/confluence/display/WW/S2-048 Utilizzo: root@kitploit: python...

CVE-2024-23692-RCE

TG हमसे जुड़ें https://t.me/WanLiChangChengWanLiChang हमसे जुड़ें और समय-समय पर विभिन्न कमजोरियों के EXP POC प्राप्त करें CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS सर्वर RCE FOFA "HttpFileServer" सावधानियां प्रभाव क्षेत्र HFS2.3 और उससे नीचे के संस्करण उपयोग विधि How To Use ulimit -n...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 Controlla tutte le tue app heroku per verificare se stanno eseguendo una versione vulnerabile di Rails Contesto Una grave vulnerabilità di sicurezza è stata trovata nel framework Ruby on Rails. Questo exploit colpisce quasi tutte le applicazioni che eseguono versioni di Rails...

hfs-cve-2014-6287-exploit

أداة استغلال HFS CVE-2014-6287 نظرة عامة يحتوي هذا المستودع على أداة استغلال مبنية بلغة Python مصممة لاستغلال الثغرة الأمنية CVE-2014-6287 في خادم ملفات HTTP HFS الإصدارات 2.3.x. تسمح هذه الثغرة للمهاجم بتنفيذ أوامر عشوائية على الخادم، مما قد يؤدي إلى وصول وتحكم غير مصرح به. ⚠️ إخلاء مسؤولية: هذه...

go-cpe

go-cpe Una libreria Go per CPE Common Platform Enumeration 2.3 go-cpe è un'implementazione degli algoritmi di Naming e Matching del CPE, come descritto nei NIST IR 7695 e 7696. Per l'implementazione Java di riferimento, vedi:...

CVE-2026-63044

CVE-2026-63044 is a Server-Side Request Forgery (SSRF) vulnerability in Apache InLong Manager , affecting versions 2.0.0 through before 2.4.0 . Any authenticated user (no admin role required) can abuse the POST /api/node/testConnection endpoint to force the server to make outbound HTTP requests o...

CVE-2026-63039

CVE-2026-63039 is an SQL injection (CWE-89) in Apache InLong's manager component, specifically in AuditAlertRuleEntityMapper.selectByCondition. The root cause is MyBatis ${} string interpolation of attacker-controlled orderField and orderType fields in the ORDER BY clause, allowing arbitrary SQL ...

EUVD-2026-63398

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause against the Manager backend database. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgra...

PT-2026-79045

Files or Directories Accessible to External Parties vulnerability in Apache InLong. StreamSource performs no authorization check, any authenticated user can logically delete ALL stream sources. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache...

CVE-2026-68582

Vikunja up to 2.3.0 contains a broken object level authorization (BOLA) in the task-collection endpoint GET /api/v1/projects/{project}/views/{view}/tasks. The endpoint loads the requested project view from the URL path without validating the caller’s authorization, allowing a link-share token hol...

CVE-2026-46733

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

EUVD-2026-39410

Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command...

EUVD-2026-39355

Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass...