19356 matches found
Log4jUnifi
Log4jUnifi 在 Unifi Network Application 中利用 CVE-2021-44228 实现远程代码执行等。 又一个 Log4j 问题：Unifi 为什么？ 针对此漏洞的概念验证代码分散且需要手动执行。本仓库自动化了利用过程。关于后渗透的指导，请参阅上面的博客文章。 安装 本仓库可手动使用或通过 Docker 使用。 手动安装 要手动下载并运行利用程序，请执行以下步骤。首先，确保攻击主机上已安装 Java 和 Maven。在基于 Debian 的操作系统上使用 apt 执行此操作，请运行以下命令： root@kitploit: apt update && ap...
thinkphp5.0.1-automatic-getshell
thinkphp5.0.1-automatic-getshell Script de getshell automático para thinkphp5.0.1 Resuelve algunos pequeños problemas que se encuentran al usar thinkphp5.0.1, evitando la molestia de la reproducción manual mediante la creación de una rueda propia...
defender
🛡️ Linux-Defender.sh 📝 Table of Contents 📌 Overview 🚀 Features 🐧 Supported Distros 📦 Tools Installed ⚙️ Installation Building from Source General 📦 Package Installation Debian .deb Package Arch Linux Package 🧰 Running the Defender 🧾 License 🙋♂️ Author ☕ Support & Contribution 📌 Overview Linux...
Script-For-CVE-2024-20666
CVE-2024-20666 修复脚本 自动更新 WinRE 分区（无需先调整其大小）并修补 CVE-2024-20666 BitLocker 漏洞。 微软链接（脚本在此） 适用于 Windows Server 2022（服务器核心安装）（KB5034439：适用于 Azure Stack HCI 版本 22H2 和 Windows Server 2022 的 Windows 恢复环境更新：2024 年 1 月 9 日） Windows Server 2022（KB5034439：适用于 Azure Stack HCI 版本 22H2 和 Windows Server 2022 的...
Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for August 2026.
Summary Security vulnerabilities are addressed with IBM Business Automation Insights 26.0.0-IF002 and 24.0.1-IF009. These vulnerabilities have been also addressed in 24.0.0-IF008 and 25.0.0-IF006 Vulnerability Details CVEID:CVE-2026-11806 DESCRIPTION: IBM WebSphere Application Server - Liberty...
CVE-2026-16675 Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation
A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows...
CVE-2026-84235
A denial-of-service vulnerability exists in the Rockwell Automation 1756-ENBT CIP Ethernet module. A crafted CIP packet sent to the affected module causes it to crash, rendering the device non-operational until it is restarted. The vulnerability is exploitable over the network with low complexity...
CVE-2026-84235 Rockwell Automation 1756-ENBT Denial of Service Vulnerability
A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a restart to recover...
CVE-2026-19472
CVE-2026-19472 affects Rockwell Automation ArmorStart® LT , specifically its embedded web server . The root cause is the improper handling of a crafted HTTP PUT request , which leads to a denial-of-service condition and loss of web server availability. The vendor-assigned CVSS 4.0 score is 8.7 (H...
CVE-2026-19471 Rockwell Automation ArmorStart® LT Stored Cross-site scripting
Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious scripts that will be executed when other users access the affected page...
CVE-2026-19471
Rockwell Automation ArmorStart® LT is affected by multiple stored cross-site scripting (XSS) vulnerabilities. The root cause is improper sanitization of user input that is stored on the server, enabling an attacker to inject malicious scripts that execute when other users access the affected page...
OpenPLC_v3
OpenPLC Runtime version 3 简介 OpenPLC 是一个基于软件、易于使用的开源可编程逻辑控制器。我们的重点是为自动化与研究提供低成本的工业解决方案。OpenPLC 已被多篇研究论文用作工业网络安全研究的框架，因为它是唯一提供完整源代码的控制器。OpenPLC 项目包含三个子项目： 1. Runtime 2. 编程编辑器 3. HMI 构建器 安装 root@kitploit: mkdir /opt/PLC cd /opt/PLC git clone https://github.com/tranquac/OpenPLCv3.git cd OpenPLCv3...
CVE-2025-66478-github-patcher
Next.js CVE 自动修复工具 使用 Go 编写的自动化工具，用于扫描 GitHub 仓库，检测存在漏洞的 Next.js 版本（CVE-2025-66478），并自动创建包含特定安全补丁的 Pull Request。 📋 前提条件 请确保你的环境中已安装并配置了以下工具： 1. Go （1.20 或更高版本） 2. Git （SSH 密钥已配置并加载到代理中） 3. GitHub CLI gh 身份验证 在运行此工具之前，你必须在 GitHub CLI 中完成身份验证： root@kitploit: gh auth login Select "SSH" as git protoc...
Shockwave-OSS
BountyTricks Sharing Bug Bounty tips and tricks with the community including but not limited to automation, one liners and useful thoughts Cyllabus 💂♂️ Misc Regex Validator Homograph Generator Shodan-Scripts HTTP Headers MIME Types Reverse-Proxies Writeups HTTP Request Smuggling Github local recon...
CVE-2026-53553
Goploy is an open-source automation deployment system affected by a path traversal vulnerability in the /deploy/fileDiff (File Compare) backend API endpoint. The flaw occurs when handling client-supplied file paths, enabling arbitrary file read with potential for remote server compromise , as ind...
awesome-soc — Updated!
Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...
WordPress Groundhogg — CRM, Newsletters, and Marketing Automation plugin < 4.5.13 - Unauthenticated Stored XSS vulnerability
Unauthenticated Stored XSS vulnerability discovered by Artus KG in WordPress Plugin Groundhogg versions 4.5.13...
osmedeus v5.1.0
Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...
