RCE-in-Spring-Cloud-CVE-2022-22963

Exploit per RCE in Spring Cloud CVE 2022-22963 Exploit per l'esecuzione remota di comandi CVE-2022-22963 in Spring Cloud Function Vedi i dettagli sulla vulnerabilità qui e qui PoC Esegui netcat sul tuo host: root@kitploit: $ nc -lvnp 9001 Esegui l'exploit esempio con la porta predefinita 9001...

CVE-2022-3656

Il Red Team di Imperva ha recentemente rivelato una vulnerabilità chiamata CVE-2022-3656 che colpisce più di 2,5 miliardi di utenti di Google Chrome e dei browser basati su Chromium. Questa vulnerabilità consente il furto di file sensibili, come portafogli crittografati e credenziali di provider...

log4shell-cloud-scanner

.. image:: images/Mitigalogo.png Introduzione Forniamo ai team DevOps e di sicurezza uno script per identificare carichi di lavoro cloud potenzialmente vulnerabili alla vulnerabilità Log4j log4shell nel loro account AWS. Attualmente supportiamo le vulnerabilità RCE "CVE-2021-44228" e...

CVE-2021-21972

CVE-2021-21972 विवरण vSphere Client HTML5 में एक vCenter Server प्लगइन में रिमोट कोड निष्पादन की कमजोरी पाई गई है। पोर्ट 443 तक नेटवर्क पहुंच वाला कोई दुर्भावनापूर्ण अभिकर्ता इस समस्या का शोषण करके vCenter Server को होस्ट करने वाले अंतर्निहित ऑपरेटिंग सिस्टम पर अप्रतिबंधित विशेषाधिकारों के साथ...

CVE-2022-22963

Spring Cloud Function Schwachstelle CVE-2022-22963 Verwundbare Anwendung für CVE-2022-22963 CVE-2022-22963 Exploit-Demo https://user-images.githubusercontent.com/57348147/161266562-51d025f0-54d4-488f-ac50-2317e29bfbdf.mp4 Erstellen root@kitploit: docker pull me2nuk/cves:2022-22963 docker run -it ...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

CVE-2026-32662

CERT/CC VU653116 | Avviso CISA ICSA-26-055-03 | Tutte le CVE | Repository dei casi CVE-2026-32662: Codice di Debug Attivo in Produzione Avviso Campo| Valore ---|--- CVE| CVE-2026-32662 ICSA| ICSA-26-055-03 Aggiornamento A CVSS 3.1| 5.3 Medio Vettore| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...

CVE-2026-34160

CVE-2026-34160 — SSRF non autenticato in Chamilo LMS tramite plugin PENS pens.php Gravità : Alta CVSS 7.5 CWE : CWE-918 Server-Side Request Forgery Componenti interessati : chamilo/chamilo-lms 2.x commit af6b7002 e precedenti Advisory : GHSA-g2xj-4cch-j276 NVD :...

CVE-2026-33752

CVE-2026-33752 CVE-2026-33752 SSRF basato su reindirizzamento che porta all'accesso alla rete interna in curlcffi Riepilogo curlcffi non limita le richieste agli intervalli IP interni e segue automaticamente i reindirizzamenti tramite la libreria libcurl sottostante. Per questo motivo, un URL...

poc-cve-2026-32255

Kan SSRF tramite Download Allegati CVE-2026-32255 - Proof of Concept Questo repository contiene una proof of concept POC per CVE-2026-32255 , una vulnerabilità di Server-Side Request Forgery SSRF ad alta gravità in Kan , uno strumento open-source di gestione progetti. L'endpoint vulnerabile...

CVE-2021-44529

CVE-2021-44529 Homepage del fornitore: https://www.ivanti.com/ Link del software: https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 Versione: CSA 4.6 4.5 - EOL ago 2021 Esegui root@kitploit: python3 exploit.py Esempio root@kitploit: python3 exploit.py 'https://x.x.x....

CVE-2026-47894

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...

CVE-2026-47879

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Gateway 4.3.0 - 4.3.5 Spring Cloud Gateway 4.0.0 - 4.2.9 Spring Cloud Gateway 3.1.13 and earlier...

bug-bounty-tools

Bug-Bounty-Skript Ein BASH-Skript zur Automatisierung der Installation der beliebtesten Bug-Bounty-Tools; der Hauptzweck dieses Skripts besteht darin, es auf temporären/wegwerfbaren virtuellen Maschinen in der Cloud auszuführen. Verwendete Tools Nuclei httpx Naabu Subfinder DNSx Nmap Katana Recox...

CVE-2026-47894 Spring Cloud Config Server Native Environment Repository Exposure

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...

EUVD-2026-66845

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...

CVE-2026-47894

Spring Cloud Config Server is affected by a vulnerability in its native environment repository that allows exposure of configuration files outside the configured repository path. The issue affects versions 5.0.0–5.0.4 , 4.3.0–4.3.4 , 4.0.0–4.2.8 , and 3.1.14 and earlier . Per the CVSS 3.1 score o...

EUVD-2026-66842

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Gateway 4.3.0 - 4.3.5 Spring Cloud Gateway 4.0.0 - 4.2.9 Spring Cloud Gateway 3.1.13 and earlier...

CVE-2026-47879

Spring Cloud Gateway's JsonToGrpcGatewayFilterFactory permits arbitrary Spring Resource locations when defining the proto descriptor, enabling SSRF and native file access via gRPC. Affected versions span 5.0.0–5.0.2 , 4.3.0–4.3.5 , 4.0.0–4.2.9 , and 3.1.13 and earlier . The CVSS 3.1 score is 7.7 ...

kali-cloud

Construtor de imagens cloud FAI Este repositório tem como objetivo criar imagens Kali para todos os fornecedores de cloud. É um fork de: https://salsa.debian.org/cloud-team/debian-cloud-images/ Primeiros passos Vai precisar de um checkout deste repositório no seu disco e de um pacote fai-server...