kcfg-bypass

kcfg-bypass kcfgバイパスの例 - CVE-2024-21338...

spring-webmvc5

spring-webmvc5 Fork spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819 Maven プロジェクトのpom.xmlのdependenciesに以下を追加してください: root@kitploit: io.github.jaloon spring-webmvc5 5.3.39.1...

MagiskEoP

はじめに これは、MagiskアプリにおけるCVE-2024-48336の脆弱性を利用したエクスプロイトであり、ローカルアプリがユーザーの同意なしに静かにrootアクセスを取得することを可能にします。 この脆弱性は @vvb2060 によって最初に報告され、@canyie によってPoCが作成されました。Canary 27007で修正されました。 この脆弱性を悪用して静かにroot権限を取得し、任意のアプリにrootを許可するデモビデオ: https://github.com/canyie/MagiskEoP/blob/main/screen-20220302-093745.mp4...

CVE-2024-36401-WoodpeckerPlugin

CVE-2024-36401-WoodpeckerPlugin はじめに CVE-2024-36401 のバッチ検出と利用、カスタムメモリーシェル注入をサポート 1. バッチ検出可能 2. URLアドレスのバックエンドは既にフィルタリング済み（URLをそのまま送るだけで良い） 3. カスタム生成したメモリーシェルを注入可能（デフォルトのメモリーシェル注入にはインジェクタークラス名が追加されています: java.lang.test 「目的はJDK11でのdefineAnonymousClassバイパス」） インストール ソースコードをダウンロードして実行 root@kitploit: mv...

CVE-2024-38063

이 저장소에는 README가 없습니다...

Shodan-CVE-2024-4577

このリポジトリには README がありません。...

Debuggable-App-Exploit

CVE-2024-31317 디버깅 가능 앱 익스플로잇 CVE-2024-31317 Android Zygote Injection을 위한 Python 기반 익스플로잇입니다. hiddenapiblacklistexemptions 설정을 통해 악의적인 zygote 인수를 주입하여 설치된 모든 Android 앱을 디버깅 가능하게 만듭니다. 런타임 후킹을 위한 선택적 Frida gadget 주입을 포함합니다. 개요 이 익스플로잇은 Android Zygote 프로세스의 명령어 주입 취약점을 활용하여 대상 애플리케이션을 debuggable 플래...

CVE-2024-21338_PoC

Exploit poc para CVE-2024-21338...

CVE-2024-21413

Explotación de CVE-2024-21413 Outlook Estado del proyecto: En pausa práctica incompleta; no se logró capturar hashes NTLM Objetivos Intentar explotar la vulnerabilidad CVE-2024-21413, que permite la fuga de hashes NTLM en Outlook al interactuar con enlaces maliciosos. El objetivo de la práctica n...

Simple File List < 6.1.13 - Reflected Cross-Site Scripting

Simple File List WordPress plugin \u003C 6.1.13 contains a reflected cross-site scripting caused by unsanitized URL output in an attribute, letting attackers execute malicious scripts in admin browsers, exploit requires victim to be an admin. id: CVE-2024-10146 info: name: Simple File List 6.1.13...

Linksys E2000 1.0.06 position.js Improper Authentication

Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file. id: CVE-2024-27497 info: name: Linksys E2000 1.0.06 position.js Improper Authentication author: DhiyaneshDk severity: high description: | Linksys E2000 Ver.1.0.06 build 1 is vulnerable to...

All-in-One WP Migration < 7.87 - Unauthenticated Information Disclosure

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to unauthenticated information disclosure due to its error.log file being publicly accessible in versions before 7.87. id: CVE-2024-8852 info: name: All-in-One WP Migration 7.87 - Unauthenticated Information Disclosure...

LearnPress < 4.2.7.1 - SQL Injection

The LearnPress WordPress LMS Plugin before 4.2.7.1 is vulnerable to unauthenticated SQL injection via the 'cfields' parameter in the /wp-json/lp/v1/courses/archive-course REST API endpoint, allowing attackers to extract sensitive information from the database. id: CVE-2024-8529 info: name:...

Wordpress WPMobile.App >= 11.42 - Cross-Site Scripting

WPMobile.App versions up to 11.41 contain a reflected cross-site scripting XSS caused by improper input neutralization during web page generation, letting attackers execute scripts in the victim's browser, exploit requires attacker to craft malicious input. id: CVE-2024-35694 info: name: Wordpres...

Advance Post Prefix WordPress plugin - Reflected XSS

Advance Post Prefix WordPress plugin through 1.1.1 contains a reflected cross-site scripting caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12734 info: name: Advance...

Stash < 0.26.0 - SQL Injection

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter. id: CVE-2024-32231 info: name: Stash Stash" tags: cve,cve2024,stash,sqli,vuln http: - raw: - | POST /graphql HTTP/1.1 Host: Hostname Content-type: application/json...

Arcserve Unified Data Protection - Authentication Bypass

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin. id: CVE-2024-0799 info: name: Arcserve Unified Data Protection -...

Usermin 2.100 - Username Enumeration

Usermin version 2.100 and below is susceptible to username enumeration via the password change functionality. An attacker can determine valid usernames by analyzing the response messages from the password change endpoint. id: CVE-2024-44762 info: name: Usermin 2.100 - Username Enumeration author:...

Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference

Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3. id: CVE-2024-33939 info: name: Masteriyo LMS = 1.7.3 - Insecure Direct Object Reference author:...

XWiki Platform - Unauthorized Document History Access

A vulnerability in XWiki Platform's REST API allows unauthorized users to access document history information. The REST API endpoint exposes the history of any page including modification times, version numbers, author details username and display name, and version comments, regardless of access...