Lucene search
+L

70 matches found

Kitploit
Kitploit
added 2026/08/27 7:56 a.m.2 views

CVE-2021-26814

CVE-2021-26814 CVE-2021-26814 を悪用し、API サービスを介して Wazuh Manager v.4.0.0-4.0.3 で RCE を達成するシンプルな Python PoC です。 実行するには、.py スクリプトを実行可能にして、必要なパラメータを指定して起動するだけです。 root@kitploit: PoC.py -h -user USERNAME -pwd PASSWORD -lip SRCIP -lport SRCPORT -tip DESTIP -tport DESTPORT 警告 : マネージャ上の wazuh-apid.py ファイルは...

8.8CVSS8.1AI score0.08746EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/27 12:15 a.m.2 views

ipChecker

ipChecker 주어진 IP가 Tor 노드인지 공개 프록시인지 확인하는 도구입니다. 왜? 때로는 모든 속도 제한만으로는 무차별 대입 공격이나 대규모 공격을 막기에 충분하지 않을 수 있습니다. 이 도구는 Tor나 공개 프록시를 사용하는 일부 공격자를 차단하는 데 도움을 줄 수 있습니다. 작동 방식 ipChecker는 공개 사이트에서 프록시 IP를 수집하는 여러 플러그인을 가지고 있습니다. 이 모든 IP는 제공된 API를 사용하여 조회할 수 있는 데이터베이스에 저장됩니다. 기본적으로 make run 명령을 실행하면 docker...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

CVE-2014-0160-Chrome-Plugin

Heartbleed chrome plugin DEPRECATO ========= Plugin Chrome che verifica se il sito corrente e tutti i sottodomini chiamati sono vulnerabili a CVE-2014-0160. Il controllo della vulnerabilità è effettuato da un servizio API che ora è morto non lo era nel 2014! Magari il codice può comunque essere...

7.5CVSS7.3AI score0.99999EPSS
SaveExploits93References1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

CVE-2021-26814

CVE-2021-26814 Un semplice PoC Python per sfruttare CVE-2021-26814 e ottenere RCE su Wazuh Manager v.4.0.0-4.0.3 tramite il servizio API. Per eseguirlo, rendi eseguibile lo script .py e lancialo con i parametri richiesti. root@kitploit: PoC.py -h -user USERNAME -pwd PASSWORD -lip SRCIP -lport...

8.8CVSS8.1AI score0.08746EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/25 4:13 a.m.2 views

columbus-server

Columbus Server Dieses Repository ist veraltet! ‼️ Die Server-Komponente wurde nach https://github.com/elmasy-com/columbus verschoben. Columbus Project ist ein API-first-Subdomain-Entdeckungsdienst, ein blitzschneller Subdomain-Enumeration-Dienst mit erweiterten Funktionen. Columbus gab 638...

5.5AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/09 12:15 p.m.12 views

EUVD-2026-54920

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...

3.1CVSS3.9AI score0.00207EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2026/06/17 6:07 p.m.23 views

Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join

Summary A cross-tenant authorization flaw in Daytona's notification WebSocket gateway allowed any authenticated user to subscribe to another organization's realtime notification channel and passively receive that organization's events. Impact The notification gateway's JWT handshake joined a...

6.5CVSS5.3AI score0.00456EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/04 12:00 a.m.41 views

PT-2026-46840

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions 32 through 35.0.1 Description An unauthenticated malicious user can cause a service crash by submitting a crafted JSON string to certain endpoints on the API or JSON-RPC service. Recommendations Update OpenStack Ironi...

7.5CVSS5.5AI score0.00433EPSS
SaveExploits0References21
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.21 views

PT-2026-43276

Name of the Vulnerable Software and Affected Versions FastNetMon Community Edition versions prior to 1.2.10 Description The software exposes a gRPC API server on port 50052 that lacks an authentication mechanism. The server is initialized using grpc::InsecureServerCredentials, allowing any user...

8.1CVSS6.1AI score0.00233EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/03/27 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-23921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL...

8.7CVSS8.8AI score0.02901EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/03/10 5:06 p.m.16 views

EUVD-2026-10703

OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a verification code resend for any UserWhatsApp record by ID. Ownership is not validated unlike the verify endpoint. This affects the...

5.3CVSS5.8AI score0.00371EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.14 views

PT-2026-23615

Name of the Vulnerable Software and Affected Versions OliveTin versions prior to 3000.11.1 Description OliveTin allows access to predefined shell commands from a web interface. A flaw exists in the RestartAction functionality where a low-privileged authenticated user can execute actions they are...

5.3CVSS6.2AI score0.00414EPSS
SaveExploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-4669

Malware in sbrugna...

4.3CVSS4.8AI score0.00696EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-26491

Malware in sbrugna...

7.8CVSS7.6AI score0.00425EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.26 views

EUVD-2021-22930

Malware in sbrugna...

6.8CVSS5.1AI score0.00813EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2012-4023

Malware in sbrugna...

5CVSS6.4AI score0.01218EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-0242

Malware in sbrugna...

7.5CVSS7.6AI score0.02005EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.7 views

EUVD-2021-8872

Malicious code in bioql PyPI...

6.5CVSS6.7AI score0.00832EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2024-48492

Malicious code in bioql PyPI...

8.1CVSS7AI score0.01619EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2024-48494

Malicious code in bioql PyPI...

8.1CVSS7AI score0.02016EPSS
SaveExploits0References2
Rows per page
Query Builder