CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py é um script Python projetado para detectar vulnerabilidades específicas em instâncias ServiceNow e extrair detalhes de conexão do banco de dados se a vulnerabilidade for encontrada. Esta ferramenta é particularmente útil para pesquisadores de segurança e testadores ...

CVE-2019-1653

CVE-2019-1653 Uma vulnerabilidade na interface de gerenciamento baseada na web dos roteadores VPN WAN Dual Gigabit Cisco Small Business RV320 e RV325 pode permitir que um atacante remoto não autenticado obtenha informações sensíveis. Este simples script Python é uma automação de exploit para o...

SOC_287

SOC287 - Lettura Arbitraria di File su Checkpoint Security Gateway CVE-2024-24919 Panoramica Questo repository contiene un'analisi dettagliata della vulnerabilità CVE-2024-24919 che colpisce i Check Point Security Gateway. La vulnerabilità consente la lettura arbitraria di file, esponendo...

CVE-2020-11651-PoC

CVE-2020-11651-PoC Repository che contiene un exploit CVE-2020-11651 aggiornato per funzionare con le ultime versioni di Python e gestire gli errori relativi alle connessioni. COPIA DEL README DAL REPOSITORY ORIGINALE Repository Originale Exploit PoC per CVE-2020-11651 e CVE-2020-11652 Questo è u...

CVE-2025-68461

Scanner CVE-2025-68461 Uno strumento di sicurezza in C++ per rilevare vulnerabilità di Cross-Site Scripting XSS nelle installazioni di Roundcube Webmail. Impatto Accesso non autorizzato agli account utente Dirottamento di sessione Esposizione dei dati Azioni non autorizzate per conto degli utenti...

CVE-2024-4956

CVE-2024-4956 - Path Traversal non autenticato in Nexus Repository Manager 3 Nexus Repository Manager è un gestore di repository che organizza, memorizza e distribuisce gli artefatti necessari per lo sviluppo. È stata scoperta una vulnerabilità di path traversal in Nexus Repository 3, nelle...

CVE-2023-49981

CVE-2023-49981 Sistema de Gestão de Taxas Escolares v1.0 - Controle de Acesso Incorreto - Listagem de Diretórios Descrição : Uma vulnerabilidade de listagem de diretórios no Sistema de Gestão de Taxas Escolares v1.0 permite que atacantes listem diretórios e arquivos sensíveis dentro da aplicação...

CVE-2024-50961

Esposizione di Dati Sensibili CVE-2024-50961 Descrizione In DonWeb Ferozo Hosting v1.1, un attaccante remoto può sfruttare i parametri URL per accedere a dati sensibili, incluse le credenziali del database. I vettori d'attacco includono l'intercettazione di rete, i log del server e la cronologia...

CVE-2025-9216

StoreEngine – Potente plugin eCommerce WordPress per pagamenti, membership, affiliazioni, vendite e altro = 1.4.0 - Caricamento arbitrario di file autenticato Subscriber+ Il plugin StoreEngine contiene una vulnerabilità nella funzionalità di importazione/esportazione CSV che consente a qualsiasi...

Apache Solr - Host Environment Variables Leak via Metrics API

Exposure of Sensitive Information to an Unauthorized Actor Vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users can specify which environment variables to hide, however, the default list is designed to wor...

Triofox - Improper Access Control

The Gladinet Triofox solution before 12.91.1126.65588 and CentreStack before 12.10.595.65696 allow unauthenticated access to the /management/admindatabase.aspx endpoint, exposing sensitive database management functionality to anyone with network access. An unauthenticated attacker can remotely...

ECOA Building Automation System - Directory Traversal Content Disclosure

The ECOA BAS controller suffers from a directory traversal content disclosure vulnerability. Using the GET parameter cpath in File Manager fmangersub, attackers can disclose directory content on the affected device id: CVE-2021-41291 info: name: ECOA Building Automation System - Directory Travers...

Atlassian Jira Seraph - Authentication Bypass

Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also...

SolarWinds Web Help Desk - Hardcoded Credential

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. id: CVE-2024-28987 info: name: SolarWinds Web Help Desk - Hardcoded Credential author:...

LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure

The LiteSpeed Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.1 through the debug.log file that is publicly exposed. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

ZK Framework - Information Disclosure

ZK Framework 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 is susceptible to information disclosure. An attacker can access sensitive information via a crafted POST request to the component AuUploader and thereby possibly obtain additional sensitive information, modify data, and/or execute...

WordPress BulletProof Security 5.1 Information Disclosure

The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible /dbbackuplog.txt file which grants attackers the full path of the site, in addition to the path of database backup files. This affects versions up t...

Oracle E-Business Suite - Server-Side Request Forgery

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Runtime UI. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. id:...

Laravel <5.5.21 - Information Disclosure

Laravel through 5.5.21 is susceptible to information disclosure. An attacker can obtain sensitive information such as externally usable passwords via a direct request for the /.env URI. NOTE: CVE pertains only to the writeNewEnvironmentFileWith function in...

CVE-2025-14847

📝 Scanner MongoDB – Notas de Execução Nome do Script mongoexposurescanner.py 1. Pré-requisitos Python 3.9+ Acesso de rede aos hosts alvo Escopo aprovado para varredura Verifique o Python: root@kitploit: python3 --version 2. Arquivos Utilizados Arquivo| Finalidade ---|--- mongoscanner.py| Script...