cve-2023-34034

cve-2023-34034 Démonstration du contournement d'autorisation CVE-2023-34034 dans Spring Security. Voir Contournement d'autorisation Spring Security CVE-2023-34034 sur Don't Panic!...

ActiveMQ-RCE-Exploit

ActiveMQ-Exploit English | Chinois simplifié CVE-2023-46604 ActiveMQ RCE 5.18.3 Exploit - exploitation sans connexion sortante Prend en charge l'exécution avec jdk 1.8, vérification automatique si la version cible est dans la plage vulnérable. Prend en charge l'exploitation sans connexion sortant...

CVE-2023-40931-POC

CVE-2023-40931 Доказательство концепции PoC 🚨 Этот репозиторий содержит доказательство концепции PoC для CVE-2023-40931, уязвимости безопасности, обнаруженной в пострадавшем программном обеспечении/системе. Цель этого репозитория — продемонстрировать уязвимость исключительно в образовательных и...

weblogic_CVE-2023-21931_POC-EXP

CVE-2023-21931의 POC&EXP CVE-2023-21931 분석 기사 JNDI-Injection-Exploit 설명 PoC 스크립트를 실행하기 전에 다음 JAR 파일들을 라이브러리 종속성으로 추가하는 것이 좋습니다: root@kitploit: coherence\lib oraclecommon\lib oraclecommon\modules wlserver\modules POC&EXP https://satoshi-box.com/pay/CJhZuu...

Openssl_1.1.1g_CVE-2023-0464

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Tous droits réservés. DESCRIPTION Le projet OpenSSL est un effort collaboratif visant à développer une boîte à outils Open Source robuste, de qualité commerciale, complète et op...

external_aac_AOSP10_r33_CVE-2023-21282

Ce depot n’a pas de fichier README...

CVE-2023-37779

Ce depot n’a pas de fichier README...

itsm-exploit

Эксплойты для Ivanti Neurons for ITSM On Premise Этот скрипт эксплуатирует несколько уязвимостей, которые позволяют неаутентифицированному злоумышленнику получить доступ администратора и выполнять удалённые команды CVE-2023-46808 на Ivanti Neurons for ITSM On Premise. Технические подробности см. ...

OFBiz-Attack

OFBiz-Attack A Tool For CVE-2023-49070/CVE-2023-51467 Attack Тестовая среда vulhub/ofbiz:18.12.09 Использование Запуск root@kitploit: java -jar OFBiz-Attack.jar Всего три модуля: Проверка уязвимости Просто введите целевой URL, не добавляйте лишние маршруты, иначе это повлияет на использование...

reNgine 2.2.0 - Command Injection

reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/wafdetector/?url= string. The commands are executed as root via subprocess.checkoutput. id: CVE-2023-50094 info: name: reNgine 2.2.0 - Command Injection...

Mlflow < 2.11.0 - Path Traversal

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

mooSocial 3.1.8 - External Service Interaction

mooSocial 3.1.8 is vulnerable to external service interaction via multiple parameters in the post function. id: CVE-2023-43323 info: name: mooSocial 3.1.8 - External Service Interaction author: ritikchaddha severity: medium description: | mooSocial 3.1.8 is vulnerable to external service...

XWiki >= 13.10.8 - Cross-Site Scripting

Reflected XSS vulnerability in XWiki authenticate endpoints allows execution of arbitrary JavaScript. id: CVE-2023-29506 info: name: XWiki = 13.10.8 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Reflected XSS vulnerability in XWiki authenticate endpoints allows...

JS Help Desk <= 2.8.1 - SQL Injection

The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the 'email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

Issabel PBX 4.0.0-6 - Directory Listing

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory id: CVE-2023-37599 info: name: Issabel PBX 4.0.0-6 - Directory Listing author: ritikchaddha severity: high description: | An issue in issabel-pbx v.4.0.0-6 allows a remote attacker...

phpMyFAQ < 3.2.0 - Cross-site Scripting

Cross-site Scripting XSS Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2. id: CVE-2023-5863 info: name: phpMyFAQ ' - 'phpMyFAQ' condition: and - type: word part: header words: - "tex...

PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting XSS via the "action" parameter of index.php. id: CVE-2023-40751 info: name: PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | PHPJabbers Fundraising Script v1.0 is...

WordPress Perfect Images (WP Retina 2x) < 6.4.6 - Sensitive Information Exposure

Jordy Meow Perfect Images Manage Image Sizes, Thumbnails, Replace, Retina versions up to 6.4.5 contain a vulnerability that exposes sensitive information to unauthorized actors, letting attackers access confidential data, exploit requires no specific conditions. id: CVE-2023-44982 info: name:...

OpenCATS - Open Redirect

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...

qdPM 9.2 - Directory Traversal

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI. id: CVE-2023-45855 info: name: qdPM 9.2 - Directory Traversal author: DhiyaneshDk severity: high description: | qdPM 9.2 allows Directory Traversal to list files and directories by navigating to t...