CVE-2021-29447

CVE-2021-29447 POC to exploit WordPress 5.6-5.7 PHP 8+ Authenticated XXE Injection. More about this CVE here Example Example usage against HackTheBox's MetaTwo machine, which hosts a WordPress website with Media Library vulnerable to XXE Injection. root@kitploit: python lfi.py -u manager -p...

vaas-cve-2014-0160

サービスとしての脆弱性 - CVE 2014-0160 脆弱性のあるlibsslとopensslのバージョンと、CVS-2014-0160（別名Heartbleed）を紹介するウェブサーバーを備えたDebian Wheezy Linuxシステム。 概要 このDockerコンテナはDebian Jessieをベースにしており、脆弱性のあるバージョンのlibsslとopensslを使用するように変更されています。 シンプルな静的WebページがApache 2を介して提供されます。 使用方法 docker pull hmlio/vaas-cve-2014-0160 でコンテナをインストールしま...

htshells

HTSHELLS - 自己完結型のWebシェルや、.htaccessファイルを介したその他の攻撃 攻撃は module.attack.htaccess という形式で命名され、攻撃タイプごとにディレクトリにグループ化されています。必要なものを選び、新しいファイルにコピーして .htaccess という名前で保存し、アップロード前にファイルを確認して編集が必要かどうかチェックしてください。Webシェルは、ファイルに別途記載がない限り、クエリパラメータ c からコマンドを実行します。 準備として ./prepare.sh file を実行すると、アップロードする .htaccess...

CVE-2026-2380

CVE-2026-2380 affects Arista EOS when OpenConfig-related services (gNMI, gNSI, RESTCONF, or NETCONF) are enabled. The OpenConfig/Octa agent may unintentionally log sensitive requests and responses—such as CLI commands containing passwords or OpenConfig YANG secret-key leafs—to local agent logs or...

CVE-2026-2380 Security Advisory 0168

On affected platforms running Arista EOS with OpenConfig-related services i.e., gNMI, gNSI, RESTCONF and NETCONF, sensitive requests and responses may be unintentionally logged. These may be stored on the local EOS device or recorded on remote accounting servers. Note that gRPC-based streaming vi...

CVE-2026-89776

CVE-2026-89776 affects the Linux kernel VXLAN VNI filter (vxlan: vnifilter). The root cause is that GROUP/GROUP6 address attributes were declared with NLA_BINARY and only a maximum length, allowing validate_nla() to accept payloads shorter than the address. The consumer then performs an unconditi...

EUVD-2026-80297

In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes The VXLAN VNI filter entry policy declares the GROUP/GROUP6 address attributes as NLABINARY with only a maximum length, so validatenla accepts a payload shorter th...

CVE-2025-14847-MongoBleed

CVE-2025-14847 MongoBleed MongoDB zlib Compression Memory Disclosure — Analysis, Detection, and Remediation Overview CVE-2025-14847, commonly referred to as MongoBleed , is a high-severity information disclosure vulnerability affecting :contentReferenceoaicite:0index=0 Server. The vulnerability...

EUVD-2026-80285

Ash fieldpolicies are documented to protect against filter-based information disclosure: when a field the actor may not see is referenced in a filter, it is replaced with an expression that evaluates to nil, so a filter cannot be used as a yes/no oracle to read a value the actor cannot see. This...

CVE-2026-86338 Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracle

Ash fieldpolicies are documented to protect against filter-based information disclosure: when a field the actor may not see is referenced in a filter, it is replaced with an expression that evaluates to nil, so a filter cannot be used as a yes/no oracle to read a value the actor cannot see. This...

CVE-2026-86338

Ash (Elixir) field_policies were intended to prevent filter-based information disclosure by nilling forbidden field references in filters. The nilling mechanism matched only Ash.Resource.* structs (attributes) but failed to match Ash.Query.Calculation and Ash.Query.Aggregate structs, so filters r...

CVE-2024-26160

CVE-2024-26160（cldflt.sys 信息泄露漏洞） 这里有一篇关于 CVE-2024-26160 的简短分析，该漏洞可在二月补丁（KB5034765 ，Windows 11 22H2、Windows 11 23H2）中找到。该漏洞已在三月补丁（KB5035853 ）中修复。 分析 该漏洞位于 CldiPortProcessGetRangeInfo 函数中，它没有 检查用户应用程序传入的缓冲区大小。由于该大小可由用户控制，memmove（用于复制返回的信息）在正确传入大小的情况下，可以获取包含内核地址的相邻内存池。 三月补丁（KB5035853 ）引入了对缓冲区大小的额外检...

Security update for lcms2

This update for lcms2 fixes the following issue: CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

CVE-2026-27553

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...

CVE-2021-21402

CVE-2021-21402 CVE-2021-21402 Jellyfin arbitrary file read Wker script, batchable. The logic is very simple, it checks for the existence of win.ini via GET: root@kitploit: define payload = /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ define info = CVE-2021-21402...

cve-2000-0649

CVE-2000-0649 for Apache CVE-2000-0649 is a low risk vulnerability that can potentially disclose the internal IP addresses of the server from the Location parameter in the respose header. Official details are here: Rapid7: https://www.rapid7.com/db/modules/auxiliary/scanner/http/iisinternalip/ CV...

CVE-2024-8465-PoC

CVE-2024-8465 – SQL Injection Proof of Concept Team Information Team Name: The Misfits Team Members: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi Overview This repository contains a vulnerable web application created as a Proof of Concept PoC to demonstrate an SQL...

cve-2021-41773

Cve-2021-41773-grabber Apache HTTP Server 2.4.49 におけるパストラバーサルおよびファイル開示の脆弱性 このスクリプトは、Shodanからcve-2021-41773の脆弱性サーバを取得します。 使用方法 : Python 3 を使用 shodanモジュールをインストール: pip install shodan スクリプト内のキーワードをShodanのキーワードに変更 Shodan APIキーが必要 実行: python3 apache.py 出力数...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core (CVE-2026-41284,CVE-2026-42498,CVE-2026-43514,CVE-2026-24880, CVE-2026-34483,CVE-2026-34487,CVE-2026-34500)

Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core CVE-2026-41284,CVE-2026-42498,CVE-2026-43514,CVE-2026-24880, CVE-2026-34483,CVE-2026-34487,CVE-2026-34500 Vulnerability Details CVEID:CVE-2026-41284 DESCRIPTION: Allocation of Resources Without Limits or...

EUVD-2026-80236

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...