Gogs_RCE

Riproduzione della vulnerabilità GogsRCE 0x01 Registrazione di un account normale dal frontend 0x02 Compilare Go per falsificare la sessione amministratore go run main.go root@kitploit: package main import "bytes" "encoding/gob" "encoding/hex" "fmt" "io/ioutil" func EncodeGobobj...

CVE-2024-48887-Exploit

CVE-2024-48887-확인되지 않은 비밀번호 변경 CWE-620 개요 Fortinet FortiSwitch GUI에서 확인되지 않은 비밀번호 변경 취약점으로, 원격의 인증되지 않은 공격자가 특수하게 조작된 요청을 통해 관리자 비밀번호를 변경할 수 있습니다. 익스플로잇: 여기서 다운로드 세부 정보 CVE ID : CVE-2024-48887 게시일 : 04/08/2025 영향 : 중요 익스플로잇 가용성 : 공개되지 않음, 비공개만 가능. CVSS : 9.8 패치 가능 여부: 아직 공식 패치 없음 영향 이 중요한 취약점으로 인...

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684 - प्रमाणीकरण बाईपास, एडमिन उपयोगकर्ता और LDAP कॉन्फ़िग निकालें - यह PoC केवल पढ़ने की क्रियाएं करता है। एक्सप्लॉयट चलाएं root@kitploit: USE: python3 exploit.py https://target.com Ex: python3 exploit.py https://target.com न्यूक्ली टेम्पलेट चलाएं root@kitploit: echo...

Belsen_Group-et-exploitation-de-la-CVE-2022-40684

BelsenGroup और CVE-2022-40684 का शोषण संदर्भ 29 जनवरी 2025 को, साइबर अपराधी फोरम BelsenGroup के एक उपयोगकर्ता ने एक संदेश प्रकाशित किया जिसमें दावा किया गया कि उसके पास 15,000 समझौता किए गए Fortinet उपकरण हैं, जिनमें कॉन्फ़िगरेशन फ़ाइलें और VPN पासवर्ड शामिल हैं। वह अब डार्क वेब पर 1,000 विशेष...

ProxyLogon-CVE-2021-26855

CVE-2021-26855 Questa è una versione modificata di un POC per proxylogon. Anziché lanciare "whoami", crea un nuovo utente, lo aggiunge al gruppo degli amministratori e crea una reverse shell. Il codice POC originale può essere trovato qui: https://www.exploit-db.com/exploits/49663 Utilizzo: pytho...

CVE-2026-37072

Veno File Manager Project 4.4.9 contains an Incorrect Access Control vulnerability in admin-head-updates.php. An unauthenticated attacker can exploit a Local File Inclusion flaw in the lang GET parameter by sending a crafted POST request to corrupt the configuration file. A subsequent GET request...

PT-2026-82780

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...

PT-2026-82793

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

PT-2026-82778

The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device...

PT-2026-82794

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

PT-2026-82787

go-wind-cms GoWind before 1.0.0 has a missing authorization vulnerability. The NewAuthorizer function in app/admin/service/internal/data/data.go and app/app/service/internal/data/data.go returns a no-op authorization engine noop.State, so the authz middleware always allows requests. Any...

CVE-2026-37066

CVE-2026-37066 affects Veno File Manager Project 4.4.9 , where a path traversal vulnerability in the endpoints /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php leads to arbitrary file read. An authenticated attacker with the super administrator role can disclose sensitive information by sen...

CVE-2026-75419

go-wind-cms (GoWind) before 1.0.0 suffers from a missing authorization flaw. The NewAuthorizer() function in app/admin/service/internal/data/data.go and app/app/service/internal/data/data.go returns a no-op authorization engine (noop.State{}), causing the authz middleware to always allow requests...

Find-AdminAccess

FindAdminAccess Ein C-Dienstprogramm, das Domänencomputer auflistet und administrative Zugriffsrechte auf diese testet, einschließlich Konnektivitätsprüfungen, Verifizierung von Administratorrechten und Prüfung der Schreibbarkeit der administrativen C$-Freigabe. Features Alle Computer in einer...

CVE-2025-9485

Exploit: Authentifizierungsumgehung via unsigniertes JWT alg: none 1 Ein unsigniertes JWT mit der Admin-E-Mail-Adresse erstellen root@kitploit: TOKEN=$node -e ' function b64us return Buffer.froms.toString"base64" .replace/+/g,"-" .replace///g,"" .replace/=+$/,"" const header = b64uJSON.stringify...

fracture

Fracture FragAttacks — Framework di Penetrazione WiFi CVE-2020-24586 / CVE-2020-24587 / CVE-2020-24588 Fracture automatizza tre nuove catene d'attacco tramite l'iniezione di frame 802.11. Sfrutta la vulnerabilità di aggregazione A-MSDU in WPA2/WPA3 per iniettare frame arbitrari in chiaro in reti...

CVE-2024-27198_Lab

Labo CVE-2024-27198 Description TeamCity fournit une page réservée aux administrateurs pour la gestion des jetons qui n'est pas protégée par l'authentification. Cela permet à un utilisateur non authentifié de générer un jeton d'accès pour l'utilisateur administrateur s'il parvient à trouver l'ID...

open-sammy

SAMMY Open Source v2 Questo repository ospita la versione open source di SAMMY - lo strumento OWASP SAMM. https://owasp.org/www-project-open-sammy/ Licenza Questo progetto è concesso in licenza secondo i termini della Creative Commons Attribution-ShareAlike 4.0 International License. Consulta il...

CVE-2018-6606

CVE-2018-6606 Questo termina qualsiasi PID. Testato su Windows 10 64-bit, Flare VM. Sono richiesti privilegi di amministratore. Potrebbero essere necessarie alcune modifiche — vedi resource.rc. Toolchain Download:...

FORTIWEB_CVE-2025-64446-58034

Simulazione di sfruttamento di FortiWeb CVE-2025-64446 e CVE-2025-58034 Nota: Questo documento ha solo scopo didattico e di ricerca sulla sicurezza. Non utilizzare per attaccare sistemi senza autorizzazione. 1. Panoramica FortiWeb è un dispositivo Web Application Firewall WAF utilizzato per...