Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read

The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...

Copyparty <= 1.8.2 - Directory Traversal

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. id: CVE-2023-25135...

SolarView Compact <= 6.00 - Local File Inclusion

There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php id: CVE-2023-29919 info: name: SolarView Compact = 6.00 - Local File Inclusion author: For3stCo1d severity: critical description: | There is ...

WP Helper Lite < 4.3 - Cross-Site Scripting

The WP Helper Lite WordPress plugin, in versions 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability. id: CVE-2023-0448 info: name: WP Helper Lite 4.3 - Cross-Site Scripting author: ritikchaddha severity: medium description: | T...

Mosparo < 1.0.2 - Open Redirect

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2. id: CVE-2023-5375 info: name: Mosparo 1.0.2 - Open Redirect author: shankaracharya severity: medium description: | Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2. impact: | Unauthenticated attackers can exploit...

Control iD iDSecure - Authentication Bypass

An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative use...

SonicWall SMA1000 LFI

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory. id: CVE-2023-0126 info: name: SonicWall SMA1000 LFI author: tess severity: high description...

Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE

The plugin does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains. id: CVE-2023-0159 info:...

OpenMetadata - Authentication Bypass

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The JwtFilter handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request...

CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit

CVE-2023-44487 HTTP/2 DoS Rapid Reset Exploit Professional Edition v1.0.1 | Autor: Sudeepa Wanigarathna -orange.svg Inhaltsverzeichnis Überblick Schwachstellendetails Funktionen Anforderungen Installation Schnellstart Nutzungsanleitung Konfigurationsoptionen Docker-Unterstützung Beispiele...

Joomla-CVE-2023-23752-Exploit-Script

用法 root@kitploit: python exploit.py http://example.com...

CVE-2023-24078

विवरण यह स्क्रिप्ट CVE-2023-24078 के लिए मेरे द्वारा विकसित एक प्रूफ ऑफ कॉन्सेप्ट PoC एक्सप्लॉइट है। सार्वजनिक रूप से उपलब्ध PoCs को आज़माने के बाद, जो कार्यात्मक नहीं थे, और उन्हें डीबग करने की कोशिश में निराशा का सामना करने के बाद, मैंने बस अपनी खुद की स्क्रिप्ट बना ली। उपयोग root@kitploit:...

CVE-2023-37771

此存储库没有 README。...

cve-2023-50164

免责声明 尽管您与 Sysdig 签订的协议中可能包含任何相反的规定，Sysdig 不对这些脚本提供任何支持、更新或任何形式的保证或担保，包括其功能或其在您的环境中运行的能力。Sysdig 不承担与使用这些脚本相关的任何责任。 简介 用于演示 Sysdig 能够检测 CVE-2023-50164 的简单应用。...

CVE-2023-27163-POC

CVE-2023-27163 Request-Baskets 的 SSRF 漏洞 PoC CVE-2023-27163，基于 entr0pie 的此代码。 此 PoC 已扩展，用于模糊测试另一个 Web 服务（本地或其他）的内容，并返回找到的文件内容。 用法 root@kitploit: python3 CVE-2023-27163.py http://: -t http://: -w...

LocalPotato_CVE-2023-21746

विंडोज़ में एक लोकल प्रिविलेज एस्केलेशन LPE भेद्यता की सूचना Andrea Pierini @decoderit और Antonio Cocomazzi @splintercode द्वारा 9 सितंबर, 2022 को Microsoft को दी गई थी। यह भेद्यता एक होस्ट पर निम्न-विशेषाधिकार low-privilege खाते वाले हमलावर को SYSTEM विशेषाधिकारों के साथ मनमानी फाइलें पढ़ने/लिखन...

CVE-2023-35985

Poc für CVE-2023-35985...

jetty_9.4.31_CVE-2023-26048

Eclipse Jetty कैननिकल रिपॉज़िटरी यह Jetty प्रोजेक्ट के लिए कैननिकल रिपॉज़िटरी है, बेझिझक फ़ोर्क करें और अभी योगदान दें! पैच या पुल रिक्वेस्ट सबमिट कर रहे हैं? सुनिश्चित करें कि आपके पास Eclipse योगदानकर्ता समझौता ECA दर्ज है। eclipse.org/legal/ecafaq प्रोजेक्ट विवरण Jetty एक हल्का, अत्यधिक स्केले...

Unlearnable-Clusters

Unlearnable Clusters: Auf dem Weg zu label-agnostischen unlernbaren Beispielen Code zu „Unlearnable Clusters: Auf dem Weg zu label-agnostischen unlernbaren Beispielen“, CVPR2023. Vorverarbeitung Führen Sie zuerst preprocess.py aus, um das Dataset-Verzeichnis umzubenennen. root@kitploit: python...