68553 matches found
Monstra CMS 3.0.4 - HTTP Header Injection
Monstra CMS 3.0.4 is susceptible to HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter. An attacker can potentially supply invalid input and cause the server to allow redirects to attacker-controlled domains, perform cache poisoning, and/or allow improper access to...
Zeit Next.js < 4.2.3 - Local File Inclusion
Zeit Next.js before 4.2.3 is susceptible to local file inclusion under the /next request namespace. An attacker can obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2018-6184 info: name: Zeit Next.js =4.2...
Cybrotech CyBroHttpServer 1.0.3 - Local File Inclusion
Cybrotech CyBroHttpServer 1.0.3 is vulnerable to local file inclusion in the URI. id: CVE-2018-16133 info: name: Cybrotech CyBroHttpServer 1.0.3 - Local File Inclusion author: 0xAkoko severity: medium description: Cybrotech CyBroHttpServer 1.0.3 is vulnerable to local file inclusion in the URI...
DomainMOD 4.11.01 - Cross-Site Scripting
DomainMOD 4.11.01 is vulnerable to reflected cross-site Scripting via assets/edit/ip-address.php. id: CVE-2018-19137 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 is vulnerable to reflected cross-site Scripting via...
DomainMOD 4.11.01 - Cross-Site Scripting
DomainMOD 4.11.01 is vulnerable to reflected cross-site scripting via assets/edit/registrar-account.php. id: CVE-2018-19136 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 is vulnerable to reflected cross-site scripting v...
Jorani Leave Management System 0.6.5 - Cross-Site Scripting
Persistent cross-site scripting XSS issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the language parameter to session/language. id: CVE-2018-15917 info: name: Jorani Leave Management System 0.6.5 - Cross-Site Scripting author: ritikchaddha severity: medium...
Gogs (Go Git Service) 0.11.66 - Remote Code Execution
Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go. This is related to session ID handling in the go-macaron/session code for Macaron. id: CVE-2018-18925 info: name: Go...
CVE-2018-8174_EXP
CVE-2018-8174EXP 使い方: CVE-2018-8174.py -h -u URL -o OUTPUT -i IP -p PORT CVE-2018-8174 のエクスプロイト オプション引数: -h, --help このヘルプメッセージを表示して終了 -u URL, --url URL エクスプロイトURL -o OUTPUT, --output OUTPUT エクスプロイトRTFを出力 -i IP, --ip IP netcat用のIPアドレス -p PORT, --port PORT netcat用のポート 例: 1. python CVE-2018-8174.py ...
CVE-2018-8208
此存储库没有 README。...
cve-2018-17207
CVE-2018-17207 これはCvedの一部です： 脆弱なDockerコンテナを管理するためのツール。 Cved: https://github.com/git-rep-src/cved イメージソース：https://github.com/cved-sources/cve-2018-17207 イメージ作成者：https://github.com/cved-sources/cve-2018-17207...
CVE-2018-9995-POC
CVE-2018-9995-POC CVE-2018-9995 POC python CVE-2018-9995Bata.py -proxy 127.0.0.1:9487 -f Importdata.txt -o Outputdata.txt -p 12 -f ※バッチインポートファイル データソース形式例: 43.255.172.204:9200 192.168.168.5:1234 -o ※出力ファイル -proxy ※sock5転送プロキシ -p ※マルチスレッドコア数...
CVE-2018-13379-Fortinet
CVE-2018-13379-Fortinet FortiVuln...
CVE-2018-8039
Este repositorio no tiene un README...
CVE-2018-20250-WinRAR-ACE
CVE-2018-20250-WinRAR-ACE 利用WinRAR ACE文件解压路径漏洞（CVE-2018-20250）的C概念验证代码。 资源 https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/ 依赖项 用于校验和方法的InvertedTomato.Crc（可通过NuGet安装）。你也可以使用任何其他JAMCRC实现。 使用方法 root@kitploit...
MikroRoot
MikroRoot CVE-2018-14847 的自动化版本。它会从 Shodan 抓取易受攻击的主机，然后尝试对其进行利用。 如何使用 请注意，此脚本无法在 Python2.x 下运行，请仅使用 Python 3+ MikroRoot: python3 MikroRoot.py -k SHODANKEY -p page count User: ncss Pass: ncss!@2018 IP: 1.2.3.4 参数 -p 要抓取的页面数量 -k Shodan 密钥 漏洞利用作者 https://github.com/BasuCert/WinboxPoC GitAds 赞助...
Strutter
Strutter Prueba de concepto para CVE-2018-11776, viene completa con la capacidad de buscar en la API de Shodan objetivos CVE-2018-11776 Apache Struts versiones 2.3 a 2.3.34 y 2.5 a 2.5.16 sufren de posible Ejecución Remota de Código al usar resultados sin espacio de nombres y al mismo tiempo, sus...
cve-2018-7600
CVE-2018-7600 这是 Cved 的一部分： 一个用于管理易受攻击的 Docker 容器的工具。 Cved: https://github.com/git-rep-src/cved 镜像来源：https://github.com/cved-sources/cve-2018-7600 镜像作者：https://github.com/knqyf263/CVE-2018-7600...
Moodle-CVE-2018-1042
Moodle CVE-2018-1042 CVE-2018-1042を悪用して内部ポートスキャンを実行するスクリプト。...