odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

CVE-2022-44136-poc

CVE-2022-44136-poc Zenar CMS 9.3 在其文件管理模块中存在​​不受限制的文件上传漏洞​​，允许经过身份验证的攻击者（拥有最小权限）将任意文件（包括恶意 PHP 脚本）上传到 Web 服务器。由于文件扩展名验证不足和清理不当，攻击者可以通过上传精心构造的有效载荷（例如 Web shell）并通过 Web 根目录访问它，从而在目标系统上执行任意代码。...

PyShell

PyShell PyShell 是一个跨平台的 Python WebShell。该工具帮助你在 Web 服务器上获得类似 Shell 的界面，以便远程访问。与其他 WebShell 不同，该工具的主要目标是在服务器端使用尽可能少的代码，无论服务器使用的语言或操作系统如何。 借助这一点，你可以使用不同类型的 Shell（aspx、php、jsp、sh、py……），既可以在 Windows 上也可以在 Linux 上，支持命令历史、上传和下载文件，甚至可以像标准 Shell 一样在目录中导航。 需求 Python 3 安装 requirements.txt 下载 建议克隆完整仓库或下载 zi...

b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

android-c-sharp-rat-server

Android C R.A.T Server 这是一个为 C R.A.T Server 插件系统构建的插件。 1. 要安装此插件，请将 AndroidExtension/bin/Debug 中的 AndroidExtension.dll 文件放到 /TutServer/bin/Debug/scripts 2. 然后启动服务器并选择“插件”选项卡。 3. 从列表中选择 AndroidExtension.dll 并点击“执行”。 4. 输入服务器端口（与客户端使用的相同），默认为 101。 你需要 Android R.A.T 客户端 来连接服务器。 确保已在客户端程序中更换服务器 IP 地址...

BetterAndroRAT

Better Android RAT Troyano de Acceso Remoto para Android basado en Dendroid Toda responsabilidad es bajo tu propio riesgo. Úsalo solo con fines de investigación. Características Actualización Remota e Instalación de Aplicaciones Cámara Web Remota Grabación de Micrófono Remota Gestión Remota de...

CVE-2024-24137

CVE-2024-24137: 学生文件管理系统 SQL注入 概念验证PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24137.md 概念验证PoC : https://github.com/BurakSevben/CVE-2024-24137/blob/main/CVE-2024-24137.md...

CVE-2026-29909-MRCMS-vulnerability

CVE-2026-29909: MRCMS V3.1.2 - Enumeración de directorios sin autenticación ID de CVE CVE-2026-29909 Descripción MRCMS V3.1.2 contiene una vulnerabilidad de enumeración de directorios sin autenticación en el módulo de gestión de archivos. El endpoint /admin/file/list.do carece de controles de...

CVE-2026-86774 Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy

Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Model records without the required models.files permission...

oracleShell

oracleShell oracle 数据库命令执行 测试环境-DBA权限： SELECT FROM v$version root@kitploit: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1.0 - Production NLSRTL Version 11.2.0.1.0 ...

CVE-2026-73298 Microsoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processes

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...

EUVD-2026-57371

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...

CVE-2026-73298

The CVE-2026-73298 entry concerns the Microsoft Container Migration Solution Accelerator (multi-service AI-driven migration tool) with vulnerability in version 2.1.2 and earlier. The issue is an authenticated IDOR (Insecure Direct Object Reference) that permits reading, writing, and deleting proc...

CVE-2026-73298 Microsoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processes

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...

EUVD-2026-54853

A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. Performing a manipulation of the argument imagePath results in path traversal. The attack must be initiated...

CVE-2026-19326

CVE-2026-19326 affects Jevon-Zhong Ai-doctor 0.0.1. The vulnerability is in the deleteImage function of ai-doctor-server/src/filemanagement/filemanagement.service.ts, where manipulating the imagePath argument enables path traversal. Local access is required. The project was informed via an issue ...

CVE-2026-54416

Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php '.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar', checked against the last 4-5 characters of the...

EUVD-2026-53192

Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php '.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar', checked against the last 4-5 characters of the...

CVE-2026-15958

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

EUVD-2026-51393

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...