CVE-2023-23752-poc

Betroffene Versionen 4.0.0 = 4.2.8 Joomla 3 und alle früheren Versionen sind von dieser Schwachstelle nicht betroffen. http://127.0.0.1/Joomla/api/index.php/v1/config/application?public=true Diese API wird verwendet, um die wichtigsten Konfigurationsinformationen der Website abzurufen,...

system_prompts_leaks

Come visto su The Washington Post: Scopri le regole nascoste dietro l'IA. Poi usale per riscrivere questo articolo. 11 maggio 2026 Fughe di System Prompt Lo scopo di questa repository è documentare le istruzioni dei System Prompt per tutti i chatbot AI disponibili - Claude, ChatGPT, Gemini ecc...

CVE-2022-24483

CVE-2022-24483 CVE-2022-24483 के लिए POC nt!PfpPrivSourceEnum फ़ंक्शन में एक सूचना प्रकटीकरण बग। विश्वसनीयता: उच्च।...

CVE-2021-1699

CVE-2021-1699 POC para CVE-2021-1699, um bug de divulgação de informações no modem.sys...

CVE-2025-14847

mongoExploit CVE-2025-14847 mongoExploit ist ein Proof-of-Concept-Exploit-Tool PoC für CVE-2025-14847 , eine Speicherleck-Schwachstelle in MongoDB. Dieses Tool nutzt einen Bug in der zlib-Dekomprimierung aus, um Serverspeicher über BSON-Feldnamen auszulesen. Durch die Konstruktion einer...

CVE-2024-23897

जेन्किन्स में स्क्रिप्ट या शेल वातावरण से जेन्किन्स तक पहुँचने के लिए एक अंतर्निहित कमांड लाइन इंटरफ़ेस CLI है। जेन्किन्स CLI कमांड को संसाधित करते समय जेन्किन्स कंट्रोलर पर कमांड आर्गुमेंट और विकल्पों को पार्स करने के लिए args4j लाइब्रेरी का उपयोग करता है। इस कमांड पार्सर में एक विशेषता है जो कि...

Scanner-CVE-2021-41773

Scanner-CVE-2021-41773 Uno scanner automatico per Apache 2.4.49 root@kitploit: • esegui: go run main.go OPPURE go build main.go && ./main • puoi personalizzare il tuo payload • gli host vulnerabili vengono salvati root@kitploit: Crea il tuo lab: 1. Tira l'immagine: sudo docker pull...

CVE-2021-29447

CVE-2021-29447 POC zum Ausnutzen von WordPress 5.6-5.7 PHP 8+ Authenticated XXE Injection. Mehr über diese CVE hier Beispiel Beispielverwendung gegen die HackTheBox-Maschine MetaTwo, die eine WordPress-Website mit einer für XXE-Injection anfälligen Medienbibliothek hostet. root@kitploit: python...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 भेद्यता वातावरण, PoC के साथ https://jira.mongodb.org/browse/SERVER-115508 सारांश यह CVE-2025-14847 को संबोधित करने के लिए एक महत्वपूर्ण फिक्स है। 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, या 4.4.30 में अपग्रेड करें। समस्या विवरण और प्रभाव सर्वर के zlib इम्प्लीमेंटेशन का...

CVE-2024-24919

Check Point Security Gateways Offenlegung von Informationen - CVE-2024-24919 Dies könnte es einem Angreifer ermöglichen, bestimmte Informationen auf Check Point Security Gateways zu lesen, sobald diese mit dem Internet verbunden und mit Remote Access VPN oder Mobile Access Software Blades aktivie...

CVE-2017-6206

CVE-2017-6206 Descobriu-se que o firmware da série de switches Websmart DGS-1510 possui vulnerabilidades de segurança. As vulnerabilidades incluem bypass de comando não autenticado e divulgação de informações não autenticada. O exploit.sh contém o código PoC e criará um usuário remoto no Switch...

GlobalUnProtect

GlobalUnProtect PoC tool per decrittare e raccogliere configurazione, cookie e file HIP di GlobalProtect da installazioni client Windows. Post del blog: https://rotarydrone.medium.com/4a1d8fc7773e Utilizzo Eseguire come standalone o in-memory tramite execute-assembly o equivalente. Raccoglie tutt...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to information disclosure (CVE-2025-14483)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed information disclosure security vulnerability Vulnerability Details CVEID:CVE-2025-14483 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51,...

Security Bulletin: The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure (CVE-2025-36348)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the information disclosure vulnerability Vulnerability Details CVEID:CVE-2025-36348 DESCRIPTION: IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, an...

CVE-2020-24030

CVE-2020-24030 Descrição ForLogic Qualiex v1 e v3 possui expiração de token fraca. Isso permite escalonamento de privilégio remoto não autenticado e acesso a dados sensíveis através de reutilização de token. Datas Importantes Anúncio ao Fornecedor: 2020-07-12 Data de divulgação pública: 2020-08-3...

CVE-2020-24029

CVE-2020-24029 Beschreibung Aufgrund von nicht authentifizierten Passwortänderungen in ForLogic Qualiex v1 und v3 können Kunden- und Admin-Berechtigungen sowie Daten über eine einfache Anfrage abgerufen werden. Wichtige Daten Ankündigung an den Anbieter: 2020-07-12 Datum der öffentlichen...

Breach-Report-Collection

Raccolta di report sulle violazioni Una raccolta di aziende che rendono pubbliche le TTP degli avversari dopo essere state violate Utile per l'analisi di intrusioni lanciate da avversari con effetti e impatto misurabili Organizzazione| Data della violazione| Avversario| Fonte ---|---|---|---...

CVE-2026-78174

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover...

CVE-2026-61802

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST API provides a...

CVE-2021-21424

CVE-2021-21424 Directory Traversal ed esposizione di file • CVE-2021-21424 • Descrizione: WebProfiler espone percorsi interni del server se non è disabilitato in produzione. • Versioni affette: Symfony 2.8 fino a 5.x. • Bypass tipico: accesso diretto a /appdev.php/profiler/. root@kitploit:...