five-nights-at-follina-s

Cinque Notti da Follina Un progetto di cybersecurity della Fullstack Academy che esamina l'intero ciclo della vulnerabilità Follina CVE-2022-30190, dallo sfruttamento alla rilevazione e difesa. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu Questo set di strumenti presuppone che t...

doctrack

Doctrack Strumento per manipolare e armare i documenti Office Open XML. Caratteristiche Creare documenti Office Open XML Word, Excel Inserire pixel di tracciamento e percorsi UNC Iniezione di modelli remoti Inserire parti CustomXML Ispezionare URL target esterni, metadati e parti XML personalizza...

evince-cve-2017-1000083

Questo repository non contiene un README...

node-ip-vex

node-ip-vex Dieses Beispielprojekt hängt vom npm-Paket node-ip ab, das für CVE-2024-29415 anfällig ist. Da unser Projekt die anfällige Funktion .isPublic jedoch nicht direkt verwendet, ist es für CVE-2024-29415 nicht ausnutzbar. Führen Sie eine Analyse mit Docker Scout durch Ich kann mein Projekt...

follina-spring

Sfruttamento di Follina MS-MSDT con Spring Boot Questo repository contiene una semplice applicazione Spring Boot che funge sia da server per ospitare/attivare payload Follina , sia da generatore di documenti Word dannosi pronti per essere utilizzati come vettori d'attacco per sfruttare...

XWiki Platform - Unauthorized Document History Access

A vulnerability in XWiki Platform's REST API allows unauthorized users to access document history information. The REST API endpoint exposes the history of any page including modification times, version numbers, author details username and display name, and version comments, regardless of access...

ColumbiaSoft DocumentLocator - Improper Authentication

Instances of ColumbiaSoft's Document Locator prior to version 7.2 SP4 and 2021.1 are vulnerable to an Improper Authentication/SSRF vulnerability. This template identifies vulnerable instances of the ColumbiaSoft Document Locater application by confirming external DNS interaction/lookups by...

WordPress SP Project & Document Manager <4.22 - Authenticated Shell Upload

WordPress SP Project & Document Manager plugin before 4.22 is susceptible to authenticated shell upload. The plugin allows users to upload files; however, the plugin attempts to prevent PHP and other similar executable files from being uploaded via checking the file extension. PHP files can still...

ESAFENET CDG - Arbitrary File Download

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. id: CVE-2019-9632 info: name: ESAFENET CDG - Arbitrary File Download author: pdteam severity: hi...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

osTicket - Arbitrary File Read

Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficientl...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

D-Scan

Quando il Contesto Morde: Rilevare l'Avvelenamento RAG tramite il Collasso dell'Attenzione a Livello di Documento D-SCAN è un framework di analisi per rilevare attacchi di avvelenamento dei documenti nei sistemi RAG Retrieval-Augmented Generation. Raccoglie gli stati interni dell'LLM durante la...

CVE-2024-34102

Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting è uno strumento basato su Go progettato per sfruttare CVE-2024-34102, una vulnerabilità di esecuzione di codice in remoto Remote Code Execution. Dettagli CVE-2024-34102 Le versioni di Adobe Commerce 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 e preceden...

CVE-2017-11882

CVE-2017-11882 Das ursprüngliche Skript stammt von https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research:...

CVE-2022-30190

CVE-2022-30190 المعروف أيضًا باسم Follina وصف الثغرة توجد Follina في أداة تشخيص الدعم من مايكروسوفت Microsoft Support Diagnostic Tool، MSDT. عندما يستدعي تطبيق MSDT عبر بروتوكول URL للحصول على الدعم، تظهر ثغرة تنفيذ التعليمات البرمجية عن بُعد. الاستغلال الناجح يسمح للمهاجم بتنفيذ تعليمات برمجية...

CVE-2018-8174-msf

CVE-2018-8174-msf Questo è un modulo metasploit che crea un documento Word dannoso per sfruttare la vulnerabilità CVE-2018-8174 - corruzione della memoria di VBScript. Questo modulo è un porting molto rapido e utilizza il campione di exploit trovato in natura. L'exploit funziona solo per Microsof...

CVE-2014-9173

CVE-2014-9173: Google Document Embedder - Exploração de Injeção SQL Cega Baseada em Tempo Autor: ratiros01 PoC Original: https://www.exploit-db.com/exploits/35371...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say root@kitploit: sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say...