176028 matches found
cve
CVE Problem statement: Stackoverflow I'm trying to build by project in Docker, So i'm using Docker Desktop to build my project, when i build the image i get this as one of my vulnerabilities root@kitploit: CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling...
CVE-2024-23334-PoC
Path Traversal PoC CVE-2024-23334 This script is a proof of concept PoC for vulnerability CVE-2024-23334 related to a Path Traversal. The script attempts to access files outside the allowed root directory by manipulating paths in HTTP requests. Requirements To run this script, you will need to ha...
CVE-2024-6387
CVE-2024-6387 This script, created by R4Tw1z, is designed to scan IP addresses to check if they are running a potentially vulnerable version of OpenSSH.This script is a faster and simpler version of an OpenSSH vulnerability scanner. The tool leverages multi-threading to optimize scanning...
CVE-2024-3596-Detector
RADIUS Vulnerability Detector Limits of the Code: The code is aimed directly at detecting MD5 conflict. However, a more comprehensive analysis may be required to thoroughly test all aspects of CVE-2024-3596. This code can only detect attacks based on MD5 collision. Additional analysis may be...
CVE-2024-7029
EN GenAvTechRCEExploit CVE-2024-7029 취약점에 대한 PoC 익스플로잇으로, AvTech 장치에서 원격 코드 실행RCE을 가능하게 합니다. 이 도구는 취약한 장치를 스캔하고 상호 작용 방식으로 명령을 실행할 수 있습니다. 기능 취약점 탐지 : AvTech 장치가 RCE에 취약한지 확인합니다. 대화형 셸 : 대화형 셸을 통해 대상 장치에서 명령을 실행합니다. 멀티스레드 스캐닝 : 멀티스레딩을 사용하여 여러 대상을 동시에 스캔합니다. 페이로드 실행 : 특수 제작된 페이로드를 전송하여 원격으로 명령을...
CVE-2024-24919-Checkpoint-Firewall-VPN-Check
CVE-2024-24919-Checkpoint-Firewall-VPN-Check This tool is used to validate the CVE-2024-24919 vulnerability in Checkpoint Firewall VPNs...
CVE-2024-4577-RCE
PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description...
CVE-2024-1086_Ausarbeitung
This repository does not have a README...
CVE-2024-48990-Exploit
CVE-2024-48990 Exploit My full writeup for how I came to re-discovering this N-day and creating my own exploit for it can be found on my blog. Essentially, you can git clone this repository into an attacker-controlled directory, export PYTHONPATH=, and then run main.py with that PYTHONPATH value...
s2-067-CVE-2024-53677
s2-067-CVE-2024-53677 s2-067CVE-2024-53677 Summary File upload logic is flawed, and allows an attacker to enable paths with traversals - similar problem as reported in S2-066 Who should read this All Struts 2 developers and users Impact of vulnerability Remote Code Execution Maximum security rati...
SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517
SPIP BigUp Unauthenticated RCE Exploit CVE-2024-8517 Description This Python script exploits an unauthenticated Remote Code Execution RCE vulnerability in the BigUp plugin of the SPIP CMS Système de Publication pour l'Internet Partagé. The flaw lies in the listerfichiersparchamps function, which...
CVE-2024-38077-RDLCheck
CVE-2024-38077-RDLCheck 检测RDL服务是否运行，快速排查受影响资产 使用方法： 安装impacket root@kitploit: git clone https://github.com/fortra/impacket.git cd impacket python3 -m pipx install . 脚本使用方法： root@kitploit: python3 RDLCheck.py usage: RDLCheck.py -h -ip IP -f F -t T Windows Remote Desktop Licensing Service Detect...
GenCrushSSTIExploit
EN GenCrushSSTIExploit 는 CrushFTP의 SSTI서버 측 템플릿 인젝션 취약점 CVE-2024-4040을 대상으로 하는 PoC 익스플로잇 도구입니다. 이 도구는 교육 및 윤리적 해킹 목적을 위해 해당 취약점을 어떻게 악용하는지 보여줍니다. 기능 CrushFTP 서버와 세션을 설정하여 인증 쿠키를 추출합니다. SSTI 취약점을 악용하여 페이로드를 주입합니다. 인증을 우회하고 서버에서 민감한 파일을 추출하려고 시도합니다. 콘솔 출력을 아름답고 스타일리시하게 만들기 위해 rich를 사용합니다. 면책 조항 ⚠️ 이...
FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-
FreeRDP-Out-of-Bounds-Read-CVE-2024-32459- The FreeRDP-Out-of-Bounds-Read-CVE-2024-32459 vulnerability is a security flaw discovered in FreeRDP, an open-source program used for implementing the Remote Desktop Protocol RDP This vulnerability arises from input processing weaknesses, allowing an...
xzbot
xzbot xz 백도어 탐구 CVE-2024-3094backdoor 다음 내용을 포함합니다: honeypot: 공격 시도를 탐지하기 위한 가짜 취약 서버 ed448 patch: 우리의 ED448 공개 키를 사용하도록 liblzma.so 패치 backdoor format: 백도어 페이로드의 형식 backdoor demo: ED448 개인 키를 알고 있다고 가정하고 RCE를 트리거하는 CLI honeypot openssh.patch 파일을 참조하세요. 이는 백도어 형식과 일치하는 공개 키 N을 가진 연결 시도를 기록하는 간단한...
CVE-2024-4956
This repository does not have a README...
GenGravSSTIExploit
EN GenGravSSTIExploit is a PoC Python script that exploits an authenticated Server-Side Template Injection SSTI vulnerability in Grav CMS versions = 1.7.44 CVE-2024-28116. This vulnerability allows a user with editor permissions to execute OS commands on a remote server. Note : This script requir...
CVE-2024-34102
CVE-2024-34102 Usage root@kitploit: python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL Target URL -ip IP, --ip IP Your IP address -p PORT, --port PORT Port for HTTP server -f FILE, --file FILE Path to the file to be included in the POC...
Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory
익스플로잇 제목: CVE-2024-9513 - NetAdmin IAM Active Directory 사용자 열거 취약점 날짜: 2024-10-04 익스플로잇 작성자: Elizeu Das Dores ELIZEUOPAIN 공급업체 홈페이지: https://netadmin.software/ 버전: 3.5 테스트 환경: 2024-10-05 CVE: CVE-2024-9513 참고:...