PT-2026-90554

QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping them in the list helper template. Attackers can induce authenticated users to submit crafted POST requests with malicious payloads to list controllers, executing arbitrary...

CVE-2026-90446

CVE-2026-90446 describes an API endpoint that interpolates a user-supplied value directly into the path of a backend request to a search and analytics data store without restricting its contents. An authenticated attacker can substitute an arbitrary backend path, causing the application's own ele...

nextcloud_android

Nextcloud Android 应用 Codacy Badge 用于Nextcloud 的 Android 客户端。轻松在您的 Nextcloud 上处理数据。 如何贡献 如果您想为 Nextcloud 做出贡献，我们非常欢迎： 在我们的 IRC 频道 和 上（位于 freenode） 我们的论坛：https://help.nextcloud.com 在 Transifex 上翻译应用 提交 issue 和 PR（包含对应的 issue） 贡献指南与许可协议 GPLv2。自 2016 年 6 月 16 日起，对本仓库的所有贡献均视为在 AGPLv3 或任何更高版本下许可。...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 检查所有您的Heroku应用，看它们是否运行着有漏洞的Rails版本 背景 在Ruby on Rails框架中发现了一个严重的安全漏洞。此漏洞影响几乎所有运行Rails 2.3和3.0版本的应用，并且已经提供了补丁。 Rails开发者可以通过运行此脚本来获取所有受影响的Heroku应用的完整列表。以下Rails版本已修补并被认为不受此漏洞影响： 3.0.20 2.3.16 3.2.x 3.1.x 如果您不升级，攻击者可以轻易访问您的应用及其数据，并运行任意代码或命令。Heroku建议立即升级到已修补的版本。 说明 root@kitploit: $...

GEVAUDAN

GEVAUDAN Gluster 环境漏洞认证数据访问与销毁。 开始使用 Gevaudan 是一个针对 Red Hat GlusterFS 的利用工具，漏洞编号为 CVE-2018-1088 和 CVE-2018-1112。提供独立版本和 Metasploit 模块两种格式。 演讲 | 日期| 会议| 视频链接| 幻灯片链接 ---|---|---|---|--- 1| 2018年8月11日| DEFCON 26 数据重复利用村| https://www.youtube.com/watch?v=8IyJjRVTMAk|...

CVE-2023-30092

CVE-2023-30092 关于 CVE-2023-30092 的所有详细信息 软件：Online Pizza Ordering System 1.0 软件链接：https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html 漏洞类型：SQL 注入 受影响组件：QTY 参数 影响 拒绝服务：是 影响 代码执行 : 是 攻击类型：远程 产品供应商：Sourcecodester 描述： SQL 注入（SQLi）是一种 Web...

CVE-2021-27905

CVE-2021-27905 Apache Solr ReplicationHandler 服务器端请求伪造（SSRF） 访问计数器 Apache Solr（全称 Searching On Lucene with Replication）是一个基于 Apache Lucene 库的免费开源搜索引擎，使用 Java 编写。Apache Solr 提供 RESTful XML/HTTP 和 JSON API，并支持多种编程语言的客户端库，例如 Java、Python、Ruby、C、PHP 等，广泛用于构建基于搜索和大数据分析的应用程序，涵盖网站、数据库、文件等场景。 Apache Solr...

CVE-2026-88046

A flaw was found in rclone, a command-line program for syncing files. This vulnerability allows an attacker to bypass configured directory restrictions by including parent-directory segments e.g., '..' in source object names. When a specially crafted source object is uploaded or copied, it can...

WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion

The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename' parameter of the 'umbrella-restore' action. This makes it possible for unauthenticated attackers to include and execute...

WordPress Simple Job Board - Unauthorized Data Access

The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to insufficient authorization checking in the fetchquickjob function in all versions up to and including 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be...

GeoServer Demo Request Endpoint - Server Side Request Forgery

It is possible to achieve Server Side Request Forgery SSRF via the Demo request endpoint if Proxy Base URL has not been set. An unauthenticated user can supply a request that will be issued by the server, allowing enumeration of internal networks and, in the case of cloud instances, access to...

Team WordPress Plugin (TLP Team) <= 5.0.9 - SQL Injection

Team WordPress plugin = 5.0.11 contains a SQL injection caused by improper sanitization and escaping of a parameter in an AJAX action accessible to unauthenticated users, letting remote attackers execute arbitrary SQL commands. id: CVE-2025-14124 info: name: Team WordPress Plugin TLP Team = 5.0.9...

Easy!Appointments <1.4.3 - Broken Access Control

Easy!Appointments prior to 1.4.3 allows exposure of Private Personal Information to an unauthorized actor via the GitHub repository alextselegidis/easyappointments. id: CVE-2022-0482 info: name: Easy!Appointments 1.4.3 - Broken Access Control author: francescocarlucci,opencirt severity: critical...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

CVE-2025-6713

CVE-2025-6713 craft aggregation pipeline to access data without proper authorisation due to improper handling of $mergeCursors in MongoDB v8.0 v7.0 v6.0 6.0.22 installation not very difficult - just use pip3 to install the requirements: pip install -r requirements usage root@kitploit: python3...

CVE-2024-4879

CVE-2024-4879 针对ServiceNow CVE-2024-4879漏洞的批量扫描工具。 概述 该工具专为批量扫描ServiceNow CVE-2024-4879漏洞而设计。其灵感来自Assetnote的安全研究，该研究详细介绍了近期的ServiceNow CVE-2024-4879、CVE-2024-5178和CVE-2024-5217漏洞。 使用方法 最低要求 Python 3.6 或更高版本 requests 库 单个目标： root@kitploit: python CVE-2024-4879.py -u https://target:9090 批量扫描：...

CVE-2026-81268 Langflow is vulnerable to authentication bypass and insufficient session expiration

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API keys after user deactivation...

CVE-2024-0044

CVE-2024-0044- CVE-2024-0044：一个影响 Android 12 和 13 的“以任意应用身份运行”高危漏洞 CVE-2024-0044 漏洞利用脚本 此 Bash 脚本演示如何利用 CVE-2024-0044。仅供教育和测试之用。 前提条件 已安装并配置 ADB（Android 调试桥） 已连接并开启 USB 调试的 Android 设备 脚本代码 root@kitploit: !/bin/bash Function to exploit CVE-2024-0044 exploitcve20240044 local url=$1 local...

EUVD-2026-75665

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

CVE-2022-21661-Technical-Analysis

Overview of CVE-2022-21661 CVE-2022-21661 is a SQL injection vulnerability found in WordPress, specifically affecting versions prior to 5.8.3. This vulnerability arises from improper sanitization in the WPQuery class, which is used for custom database queries. its classic SQL injection...