pepe

PEPE - Post Exploitation Pastebin Emails Collect information about leaked email addresses from Pastebin About Script parses Pastebin email:password dumps and gather information about each email address. It supports Google, Trumail, Pipl, FullContact and HaveIBeenPwned. Moreover, it allows you to...

NPM: n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers

NPM: n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...

EUVD-2026-74277

n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers...

n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers

Impact The Elasticsearch and ElasticSecurity nodes built REST endpoints by interpolating user-provided identifiers straight into the request path. A value containing path separators or dot segments changed which endpoint the request actually reached, so an operation intended for one document coul...

hooker

Hooker: Análisis Dinámico Automatizado de Aplicaciones Android Acerca de Hooker Descripción Funcional Hooker es un proyecto de código abierto para el análisis dinámico de aplicaciones Android. Este proyecto proporciona varias herramientas y aplicaciones que se pueden utilizar para interceptar y...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. SYSTEM ANALYSIS Identifying the Attack Surface from the Docker Environment Starting with what is running in the environment. We list all active containers: root@kitploit: docker ps Result: Container p1/lab10:latest is running, exposing 2 ports externally: Port mapping|...

GHSA-FCCG-MWVH-QQG4 vulnerabilities

Vulnerabilities for packages: kayenta-fips, flyway, knative-kafka-broker, knative-kafka-broker-fips, ghidra, tez, zookeeper-fips, management-api-for-apache-cassandra-4.0, seata, apache-camel-karavan-devmode, neo4j, sonarqube, elasticsearch-fips, keycloak-fips, cruise-control-fips, floci-az, akhq,...

CVE-2026-75596 vulnerabilities

Vulnerabilities for packages: kayenta-fips, flyway, knative-kafka-broker, knative-kafka-broker-fips, ghidra, tez, zookeeper-fips, management-api-for-apache-cassandra-4.0, seata, apache-camel-karavan-devmode, neo4j, sonarqube, elasticsearch-fips, keycloak-fips, cruise-control-fips, floci-az, akhq,...

ElasticSearch v1.1.1/1.2 RCE

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to search. Be aware this only violates the vendor's intended security policy if the user does not run...

Apache Solr <= 7.1 - XML Entity Injection

Apache Solr with Apache Lucene before 7.1 is susceptible to remote code execution by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external...

RS4LOGJ-CVE-2021-44228

RS4LOGJ-CVE-2021-44228 Apache Log4j vulnerability - CVE-2021-44228 instructions for Remote Syslog: Remote Syslog uses the Elasticsearch module to save logging. Effected products: RSv2 RSE RSX RSC is not effected. Check: Check version: root@kitploit: curl -XGET 'http://localhost:9200' Output:...

GHSA-C4C3-7FPV-J4Q5 vulnerabilities

Vulnerabilities for packages: kayenta-fips, flyway, knative-kafka-broker, knative-kafka-broker-fips, ghidra, tez, zookeeper-fips, management-api-for-apache-cassandra-4.0, seata, apache-camel-karavan-devmode, neo4j, sonarqube, elasticsearch-fips, keycloak-fips, cruise-control-fips, floci-az, akhq,...

Elasticsearch-CVE-2023-31419

PoC del CVE 2023-31419 de Elasticsearch...

Kibana 9.4.x < 9.4.5 Missing Authorization (ESA-2026-147)

The version of Kibana installed on the remote host is 9.4.x prior to 9.4.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-147 advisory. - Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization contro...

Elasticsearch 8.18.x < 8.19.20 / 9.0.x < 9.4.5 / 9.5.x < 9.5.1 Information Disclosure (ESA-2026-141)

The version of Elasticsearch installed on the remote host is 8.18.x prior to 8.19.20, or 9.0.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-141 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling'...

Elasticsearch 8.x < 8.19.20 / 9.0.x < 9.3.0 DoS (ESA-2026-47)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.20, or 9.0.x prior to 9.3.0. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-47 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial...

Kibana 9.0.x < 9.4.6 / 9.5.x < 9.5.1 Missing Authorization (ESA-2026-149)

The version of Kibana installed on the remote host is 9.0.x prior to 9.4.6, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-149 advisory. - Missing Authorization CWE-862 in Kibana can lead to information disclosure via Exploiting Incorrectly...

Elasticsearch 8.x < 8.19.20 / 9.0.x < 9.4.5 / 9.5.x < 9.5.1 RCE (ESA-2026-114)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.20, or 9.0.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-114 advisory. - Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine...

Elasticsearch-Exploit-CVE-2023-31419

Vulnerabilidad de desbordamiento de pila en Elasticsearch Se descubrió una falla en Elasticsearch que afecta a la API search y que permitía que una cadena de consulta especialmente manipulada provocara un desbordamiento de pila y, en última instancia, una denegación de servicio. Versiones...

CVE-2026-86079

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and document identifiers directly into REST request paths. An identifier containing path separators or dot segments could...