CVE-2023-23752

CVE-2023-23752 用于Joomla CVE-2023-23752扫描的简单程序。这是一个简单的Ruby脚本，用于检查目标列表是否易受CVE-2023-23752攻击，该漏洞是一个严重的Web应用程序安全漏洞。脚本向指定端点发送HTTP GET请求，并从响应中提取信息以判断目标是否存在漏洞。 用法 root@kitploit: ruby scanner.rb list.txt output.txt list.txt文件包含一系列目标域名或IP，每行一个。output.txt是保存结果的输出文件。 需求 该脚本需要以下Ruby gem： root@kitploit: httpar...

Patch-management-

补丁管理- 企业补丁管理场景——"金融系统关键补丁响应" 背景 你是一家跨国金融服务公司的IT管理员，该公司在印度、美国和欧洲运营。一个关键漏洞（例如：CVE-2025-4321）必须在48小时内识别、批准并准备补丁部署。...

CVE-2025-49113

Detección de CVE-2025-49113 NOTA Esta plantilla ha sido implementada en la herramienta Artemis de CERT Polska. Estoy profundamente honrado de ser reconocido por CERT Polska por este script de detección de vulnerabilidades. Es un verdadero privilegio desempeñar un papel en el fortalecimiento de lo...

CVE-2023-22515-NSE

CVE-2023-22515-NSE Este repositorio proporciona una herramienta para verificar la presencia de la vulnerabilidad CVE-2023-22515 en Atlassian Confluence Server utilizando el Motor de Scripting de Nmap NSE. Resumen de CVE-2023-22515 CVE-2023-22515 es una vulnerabilidad crítica en Atlassian Confluen...

CVE-2023-1698

wagoexploit.py - Exploit PoC para CVE-2023-1698 🚀 Acerca de wagoexploit.py es un exploit de prueba de concepto PoC para CVE-2023-1698 , una vulnerabilidad crítica que afecta a PLC WAGO. Este exploit otorga al atacante acceso a la shell del dispositivo, exponiendo potencialmente operaciones...

cve-2025-55182

🛡️ React2Shell CTF 🚀 React2Shell-CTF 에 오신 것을 환영합니다. React2ShellCVE-2025-55182 악용을 연습하도록 설계된 Docker 기반 환경입니다. React2Shell 은 React 기반 애플리케이션에 영향을 주는 치명적인 취약점입니다. 이 저장소는 이 결함을 이해하고 완화하는 데 도움이 되도록 로컬에 안전하게 배포할 수 있는 CTFCapture The Flag 챌린지를 제공합니다. Reverse Shell을 획득할 수 있나요? 🐚 ℹ️ 취약점 정보 CVE-2025-55182 에...

Mikrotik-router-hack

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseñas en texto plano. La vulnerabilidad ya fue corregida hace tiempo, por lo que este proyecto ha terminado y ya no recibirá soporte ni...

CVE-2020-5902-F5BigIP

CVE-2020-5902 dispositivos F5 BIG-IP Resumen: Un paquete de detección Zeek para CVE-2020-5902, una vulnerabilidad CVE10.0 que afecta a dispositivos F5 Networks BIG-IP. Referencias: https://corelight.blog/2020/07/28/zeek-in-its-sweet-spot-detecting-f5s-big-ip-cve10-cve-2020-5902/...

CVE-2026-76757

CVE-2026-76757 affects the Drupal Gammu SMS Daemon contrib module across all versions (. ). The Drupal security team has marked the project as unsupported , and the known security flaw remains unaddressed by the maintainer. No specific root cause or affected function is identified in the provided...

CVE-2024-3094-One-Liner

CVE-2024-3094 单行漏洞检查器 此仓库提供简单而强大的单行脚本，旨在帮助您快速判断服务器是否容易受到 CVE-2024-3094 的攻击，这是在 xz 工具的某些版本中发现的一个关键安全漏洞。此外，我们还提供了一种便捷的方法来扫描您的代码仓库中是否有对 xz 库的引用，这可能表明存在潜在的间接漏洞。 检查服务器漏洞 要确定您的服务器是否容易受到 CVE-2024-3094 的攻击，请在终端执行以下命令： root@kitploit: type dpkg &/dev/null && dpkg -l xz 2/dev/null | awk '/^ii/print $3' | gr...

CVE-2023-22518

CVE-2023-22518 Verificador de las vulnerabilidades críticas CVE-2023-22518 y CVE-2023-22515 en Confluence. Descripción Este script está diseñado para verificar y explotar vulnerabilidades en instancias de Atlassian Confluence. Comprueba la vulnerabilidad CVE-2023-22518 y explota la vulnerabilidad...

GoF5-CVE-2020-5902

GoF5-CVE-2020-5902 开源实用工具，用于验证 F5 BIG-IP Traffic Management User Interface TMUI 中的关键漏洞 CVE-2020-5902，使用 Golang 编写。 Windows 演示...

CVE-2023-38408

CVE-2023-38408 针对影响 OpenSSH 9.3p2 版本的最新关键漏洞的 PoC 旨在与涵盖此漏洞的 TryHackMe 免费访问实验室环境无缝配合。 https://tryhackme.com/room/cve202338408 注意：这在 THM 实验室环境之外 无法正常工作。 https://github.com/kali-mx/CVE-2023-38498/assets/76034874/21382c5b-9468-494d-93c7-ff2b996a4be5...

CVE-2023-23397

CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...

blmvuln

Corrige la vulnerabilidad de seguridad grave en sitios web PrestaShop :rocket: ¡Detector y corrector de CVE-2022-31101! Un exploit recién descubierto podría permitir a atacantes remotos tomar el control de tu tienda...

TotoLink Router setMacFilterRules - Command Injection

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function. id: CVE-2024-24328 info: name: TotoLink Router setMacFilterRules - Command Injection author: pussycat0x severity: critical description: |...

DataEase v2.10.2 - JWT Signature Verification Bypass

DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected versions, the lack of signature verification of JWT tokens allows attackers to forge JWTs, which then allow access to any interface. The...

Mitel MiCollab - Arbitary File Read

The Mitel Collab Arbitrary File Read vulnerability allows an unauthenticated attacker to read arbitrary files from the underlying file system on a Mitel Collab server. Exploiting this flaw involves sending specially crafted requests to the server, bypassing access controls and allowing the attack...

YMC Filter - SQL Injection

YMC Filter = 3.11.5 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2026-54836 info: name: YMC Filter - SQL Injection author: theamanrawat severity: critical...

openSIS Classic v9.1 - SQL Injection

SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is due to improper input validation of the $usernamestnid parameter, which can be manipulated by an attacker to inject arbitrary SQL commands. id: CVE-2024-51211...