CVE-2025-4603

eMagicOne Store Manager for WooCommerce = 1.2.5 - Eliminazione non autenticata di file arbitrari Il plugin eMagicOne Store Manager for WooCommerce espone un endpoint di protocollo di gestione remota ?connector=bridge che consente operazioni di eliminazione di file sul server. Il meccanismo di...

CVE-2025-5058

eMagicOne Store Manager for WooCommerce = 1.2.5 - Caricamento Arbitrario di File Non Autenticato tramite l'attività setimage Il plugin eMagicOne Store Manager for WooCommerce espone un endpoint di protocollo di gestione remota ?connector=bridge che consente il caricamento di file sul server. Il...

CVE-2023-27524-POC

CVE-2023-27524: Apache Superset Bypass dell'autenticazione Script per verificare se un server Apache Superset è vulnerabile a CVE-2023-27524 e, se è vulnerabile, forgiare un cookie di sessione con userid = 1, che di solito è l'utente admin, consentendo il bypass dell'autenticazione e l'accesso al...

CVE-2017-8225

CVE-2017-8225 Installa Python3 root@kitploit: apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Installazione: root@kitploit: git clone https://github.com/kienquoc102/CVE-2017-8225.git Codice Exploit: root@kitploit: cd CVE-2017-8225 python3...

CVE-2023-30765

CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Delta Electronics Infrasuite Device Master Privilegieneskalation Bug-Credit: Piotr Bazydlo @chudypb Links: https://www.zerodayinitiative.com/advisories/ZDI-23-905/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01 Verwendung root@kitploit:...

CVE-2022-24112-POC

CVE-2022-24112-POC Apache APISIX 2.12.1 Esecuzione di codice in remoto tramite bypass della restrizione IP e utilizzo del token admin AIP predefinito Guida completa https://kavigihan.medium.com/apache-apisix-2-12-1-remote-code-execution-5f920b22ccff...

Magnohost-Vulnerabilities-pentest

MagnoHost-pentest Pentest sul provider di hosting MagnoHost e infrastruttura MeteorCloud. Risultati: MariaDB esposto su 6 server CVSS 9.8, credenziali di default OmniDialer con accesso completo, Wings CVE-2024-27102 9.9, Grafana esposto, spoofing DMARC. Solo curlcffi + Python. Zero scanner...

Poc-CVE-2024-57040

Poc-CVE-2024-57040 CVE-2024-57040 è una vulnerabilità di sicurezza trovata in alcuni modelli di router TP-Link TL-WR845N. Nello specifico, riguarda una password "hardcoded" per l'account root del router. Ciò significa che una password predefinita e immutabile è integrata nel software del router...

CVE-2026-82329

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

CVE-2026-82266

Redpanda through 26.2.2 binds the Admin API to 0.0.0.0:9644 with adminapirequireauth defaulting to false, treating unauthenticated requests as superusers. Attackers can reach port 9644 without credentials to create and delete broker accounts, modify cluster configuration, and disrupt partition...

CVE-2024-40275_Scanner

CVE-2024-40725 Scanner Ein Python-basiertes Erkennungstool für CVE-2024-40725 , eine Schwachstelle zur Offenlegung von Quellcode im Apache HTTP Server, die die Versionen 2.4.0 und 2.4.61 betrifft. Rechtlicher Hinweis: Führen Sie diesen Scanner nur gegen Server aus, die Ihnen gehören oder für die...

CVE-2026-9198

...

CVE-2026-82329 Potential authentication bypass leading to administrative access in Artifactory

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

CVE-2026-82329

JFrog Artifactory contains an authentication weakness that, under default configuration , may allow an unauthenticated attacker with network access to obtain administrative privileges . The vulnerability is rated CVSS 9.8 (Critical) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating full...

EUVD-2026-67861

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

EUVD-2026-43003

Snipe-IT has CSS Injection via headercolor Setting...

fastjson-cve

CVE-2026-16723 प्रजनन परियोजना अवलोकन यह परियोजना CVE-2026-16723 का प्रजनन करती है — fastjson 1.2.68 से 1.2.83 में एक गंभीर रिमोट कोड निष्पादन RCE भेद्यता। यह भेद्यता डिफ़ॉल्ट कॉन्फ़िगरेशन के तहत RCE की अनुमति देती है, बिना AutoType सक्षम करने या पूर्व-मौजूद क्लासपाथ गैजेट्स की आवश्यकता के।...

CVE-2025-7775

CVE-2025-7775 PowerShell-Versionserkennung Es gibt auch eine coole Methode auf Basis von Datei-Hashes: https://github.com/fox-it/citrix-netscaler-triage/blob/main/scan-citrix-netscaler-version.py Sie können möglicherweise auch die Client-Binärdateien verwenden, um die Version zu ermitteln nicht...

CVE-2026-52824

CVE-2026-52824: Kimai डिफ़ॉल्ट APPSECRET लॉगिन लिंक जालसाज़ी...

CVE-2026-11116-SNMPv3-Authentication-Bypass-via-Default-EngineID

CVE-2026-11116 – Bypass dell'autenticazione SNMPv3 tramite EngineID predefinito Codice del programma Python con pysnmp root@kitploit: snmpagentsim.py - SNMPv3 agent using well-known EngineID from pysnmp.hlapi import def snmpgetengineid=SnmpEngineIDhexValue='8000000001020304': iterator = getCmd...