n-able_n-central_xxe_file_read

N-able N-central 未认证 XXE 敏感信息泄露 针对 N-able N-central 的概念验证漏洞利用代码，通过链式利用 CVE-2025-9316 和 CVE-2025-11700 读取包含凭据的文件 博客文章 深入分析请见： https://www.horizon3.ai/attack-research/attack-blogs/n-able-n-central-from-n-days-to-0-days/ 使用方法 root@kitploit: % python3 ncentralxxefileread.py -h usage:...

CVE-2025-9316_CVE-2025-11700

此存储库没有 README。...

Metasploit Wrap-Up 12/19/2025

React2Shell Payload Improvements Last week Metasploit released an exploit for the React2Shell vulnerability, and this week we have made a couple of improvements to the payloads that it uses. The first improvement affects all Metasploit modules. When an exploit is used, an initial payload is...

VulnCheck KEV: CVE-2025-9316

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...