SECURITY-3314-3315

= SECURITY-3314/SECURITY-3315 缓解措施 此仓库记录了防止在受影响实例上利用 SECURITY-3314 和 SECURITY-3315 的缓解措施。 == 概述 需要禁用对 CLI 的访问。 必须采取以下两个步骤： 移除 CLI HTTP 端点 禁用 SSH 端口（https://plugins.jenkins.io/sshd/SSH Server Plugin） NOTE 基于 remoting 的 CLI 已在 Jenkins 中移除...

CVE-2021-3019

CVE-2021-3019 将ip添加进ip.txt文本，注意格式： http://127.0.0.1 每行一个 打开Cheeetah，运行即可...

Copyparty <=1.18.6 - Cross-Site Scripting

Copyparty before 1.18.7 is vulnerable to reflected cross-site scripting XSS via the 'filter' parameter in the '/?ru' endpoint. Unsanitized user input is reflected in the HTML response, allowing attackers to execute arbitrary JavaScript in the context of the victim's browser. id: CVE-2025-54589...

CVE-2026-23744

CVE-2026-23744 – Prueba de Concepto El script de Python en esta PoC envía una solicitud HTTP simple al host objetivo que ejecuta el inspector MCPJam versión reemplace con su puerto de escucha Luego, abra otra shell y ejecute la PoC: root@kitploit: cd CVE-2026-23744 python3 exploit.py Referencias...

CVE-2025-24893

CVE-2025-24893 Uso root@kitploit: python CVE-2025-24893 http://target.com...

CVE-2026-61568

@zereight/mcp-gitlab, a Model Context Protocol server for GitLab, is affected in versions prior to 2.1.30 . The Streamable HTTP MCP endpoint lacks an effective Host or Origin allowlist , allowing a malicious web page to exploit DNS rebinding to route browser requests to a victim's local MCP liste...

EUVD-2026-78660

atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by supplying directory traversal sequences in request paths. Attackers can bypass path containment checks by including '../' segments in...

CVE-2024-1561

CVE-2024-1561 - Lectura Arbitraria de Archivos en Gradio CVE-2024-1561 es una vulnerabilidad de lectura arbitraria de archivos que afecta a Gradio en versiones anteriores a la 4.13.0. Gradio es un popular framework de Python utilizado para construir rápidamente interfaces web para modelos de...

CVE-2026-46453

Reproducción de inyección de encabezado sin prefijo camel-elasticsearch-rest-client CVE-2026-46453 Este proyecto demuestra una inyección de encabezados de mensaje / omisión de autorización en el componente camel-elasticsearch-rest-client de Apache Camel, registrada como CVE-2026-46453. El...

CVE-2019-3929

CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV 远程命令注入 CVE-2019-3929 Metasploit 模块 根据 Tenable 的描述： 远程未经身份验证的攻击者可以通过向 HTTP 端点 filetransfer.cgi 发送精心构造的请求，以 root 身份执行操作系统命令。此漏洞似乎影响所有已知设备，包括 Crestron AM-100 固件 1.6.0.2、Crestron AM-101 固件 2.7.0.1、Barco wePresent WiPG-1000 固件 2.3.0.10、Barco wePresent...

CVE-2021-37832

CVE-2021-37832 CVE 2021-37832 POC 用法 : python3 CVE-2021-37832.py http://test.com...

CVE-2023-23752

安装 root@kitploit: git clone https://github.com/0xx01/CVE-2023-23752.git cd CVE-2023-23752 chmod +x exploit.sh 用法 root@kitploit: ./exploit.sh http://localhost...

CVE-2021-26084

用法: python poc.py http://host:port/...

EUVD-2026-74270

n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check...

CVE-2026-75430

PowerJob Worker version 5.1.2 and likely earlier versions exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code...

EUVD-2026-71612

PowerJob Worker version 5.1.2 and likely earlier versions exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code...

CVE-2026-75430

PowerJob Worker version 5.1.2 (and likely earlier) exposes the /worker/deployContainer HTTP endpoint without authentication on its default transport port, allowing a remote unauthenticated attacker to execute arbitrary code . The vulnerability is scored CVSS 9.8 (Critical) — network attack vector...

CVE-2026-75430

PowerJob Worker version 5.1.2 and likely earlier versions exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code...

CVE-2026-54598 Missing Authentication for Critical Function in wallos

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, endpoints/db/migrate.php executes database schema migrations when called over HTTP with zero authentication. Any unauthenticated attacker can trigger pending migration files against the live SQLite...

PT-2026-82220

NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose bind address defaults to all interfaces, and registers routes for reading and writing gflags alongside status and statistics...