CVE-2025-14847

mongoExploit CVE-2025-14847 mongoExploit ist ein Proof-of-Concept-Exploit-Tool PoC für CVE-2025-14847 , eine Speicherleck-Schwachstelle in MongoDB. Dieses Tool nutzt einen Bug in der zlib-Dekomprimierung aus, um Serverspeicher über BSON-Feldnamen auszulesen. Durch die Konstruktion einer...

linux-smart-enumeration

First, a couple of useful oneliners ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...

CVE-2024-23897

जेन्किन्स में स्क्रिप्ट या शेल वातावरण से जेन्किन्स तक पहुँचने के लिए एक अंतर्निहित कमांड लाइन इंटरफ़ेस CLI है। जेन्किन्स CLI कमांड को संसाधित करते समय जेन्किन्स कंट्रोलर पर कमांड आर्गुमेंट और विकल्पों को पार्स करने के लिए args4j लाइब्रेरी का उपयोग करता है। इस कमांड पार्सर में एक विशेषता है जो कि...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 भेद्यता वातावरण, PoC के साथ https://jira.mongodb.org/browse/SERVER-115508 सारांश यह CVE-2025-14847 को संबोधित करने के लिए एक महत्वपूर्ण फिक्स है। 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, या 4.4.30 में अपग्रेड करें। समस्या विवरण और प्रभाव सर्वर के zlib इम्प्लीमेंटेशन का...

noseyparker

Nosey Parker is now Replaced by Titus. Nosey Parker is Officially Retired See our announcement post https://www.praetorian.com/blog/titus-open-source-secret-scanner/. The Titus Repo can be found at https://github.com/praetorian-inc/titus Overview Nosey Parker is a CLI tool that finds secrets and...

CVE-2024-24919

Check Point Security Gateways Offenlegung von Informationen - CVE-2024-24919 Dies könnte es einem Angreifer ermöglichen, bestimmte Informationen auf Check Point Security Gateways zu lesen, sobald diese mit dem Internet verbunden und mit Remote Access VPN oder Mobile Access Software Blades aktivie...

CVE-2020-5248

CVE-2020-5248 Proof of Concept PoC für CVE-2020-5248. Zusammenfassung GLPI vor Version 9.4.6 weist eine Schwachstelle auf, die einen standardmäßigen Verschlüsselungsschlüssel betrifft. GLPIKEY ist öffentlich und wird auf jeder Instanz verwendet. Das bedeutet, dass jeder sensible Daten entschlüsse...

CVE-2017-6206

CVE-2017-6206 Descobriu-se que o firmware da série de switches Websmart DGS-1510 possui vulnerabilidades de segurança. As vulnerabilidades incluem bypass de comando não autenticado e divulgação de informações não autenticada. O exploit.sh contém o código PoC e criará um usuário remoto no Switch...

GlobalUnProtect

GlobalUnProtect PoC tool per decrittare e raccogliere configurazione, cookie e file HIP di GlobalProtect da installazioni client Windows. Post del blog: https://rotarydrone.medium.com/4a1d8fc7773e Utilizzo Eseguire come standalone o in-memory tramite execute-assembly o equivalente. Raccoglie tutt...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to information disclosure (CVE-2025-14483)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed information disclosure security vulnerability Vulnerability Details CVEID:CVE-2025-14483 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51,...

CVE-2023-36159

CVE-2023-36159 sourcecodester Lost and Found Information System 1.0 में क्रॉस-साइट स्क्रिप्टिंग XSS भेद्यता मौजूद है, जो दूरस्थ हमलावरों को Create User पृष्ठ पर First Name, Middle Name और Last Name फ़ील्ड के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है।...

Security Bulletin: The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure (CVE-2025-36348)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the information disclosure vulnerability Vulnerability Details CVEID:CVE-2025-36348 DESCRIPTION: IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, an...

CVE-2026-31156

CVE-2026-31156 Esiste una vulnerabilità di path injection in OpenPLC-v3, che deriva dal fatto che il programma non esegue alcun controllo di validità sui parametri del percorso file passati dalla riga di comando. Gli attaccanti possono leggere qualsiasi file leggibile costruendo percorsi malevoli...

CVE-2020-24030

CVE-2020-24030 Descrição ForLogic Qualiex v1 e v3 possui expiração de token fraca. Isso permite escalonamento de privilégio remoto não autenticado e acesso a dados sensíveis através de reutilização de token. Datas Importantes Anúncio ao Fornecedor: 2020-07-12 Data de divulgação pública: 2020-08-3...

CVE-2020-24029

CVE-2020-24029 Beschreibung Aufgrund von nicht authentifizierten Passwortänderungen in ForLogic Qualiex v1 und v3 können Kunden- und Admin-Berechtigungen sowie Daten über eine einfache Anfrage abgerufen werden. Wichtige Daten Ankündigung an den Anbieter: 2020-07-12 Datum der öffentlichen...

CVE-2026-78174

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover...

CVE-2026-61802

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST API provides a...

CVE-2021-21424

CVE-2021-21424 Directory Traversal ed esposizione di file • CVE-2021-21424 • Descrizione: WebProfiler espone percorsi interni del server se non è disabilitato in produzione. • Versioni affette: Symfony 2.8 fino a 5.x. • Bypass tipico: accesso diretto a /appdev.php/profiler/. root@kitploit:...

cve-2021-38314

cve-2021-38314 - Divulgação não autenticada de informações sensíveis O plugin Gutenberg Template Library & Redux Framework = 4.2.11 para WordPress registrou várias ações AJAX disponíveis para usuários não autenticados na função includes em redux-core/class-redux-core.php. Essas ações eram...

CVE-2024-23897

Liest die ersten 3 Zeilen jeder Datei mit Leserechten für den aktuellen Benutzer auf dem System. Das Skript verwendet intern proxychains. Verwendung: python CVE-2024-23897.py Beispiel: python CVE-2024-23897.py /mnt/hgfs/Share/jenkins-cli.jar http://10.10.14.8:8080/...