Lucene search
+L

478226 matches found

Kitploit
Kitploit
added 2026/08/27 12:33 a.m.2 views

CVE-2024-45409

Ruby-SAML / GitLab प्रमाणीकरण बाईपास CVE-2024-45409 शोषण यह स्क्रिप्ट CVE-2024-45409 का शोषण करती है, जो IDP द्वारा जारी किसी भी हस्ताक्षरित SAML दस्तावेज़ तक पहुँच रखने वाले अप्रमाणित हमलावर को SAML प्रतिसाद/अभिकथन जाली बनाने और GitLab पर किसी भी उपयोगकर्ता के रूप में पहुँच प्राप्त करने की अनुमत...

10CVSS7.9AI score0.10684EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/08/27 12:32 a.m.2 views

CVE-2026-6433

CVE-2026-6433 — 개념 증명 FlipperCode — 커스텀 CSS, JS 및 PHP · 인증되지 않은 SQL 인젝션 → RCE eval을 통해 영향 받는 버전: FlipperCode 커스텀 CSS, JS 및 PHP ≤ 2.0.7 · WordPress 플러그인의 공격 표면 admin-ajax.php를 통해 한눈에 보기...

7.3CVSS8AI score0.01195EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/27 12:32 a.m.2 views

CVE-2026-42647-Lab

CVE-2026-42647 - JoomSport Injeção SQL cega baseada em tempo não autenticada via sortf Resumo Executivo Este repositório contém um laboratório Docker local para reproduzir e validar a CVE-2026-42647, uma vulnerabilidade de injeção SQL não autenticada que afeta o plugin WordPress JoomSport - for...

9.3CVSS5.7AI score0.01323EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 12:32 a.m.1 views

CVE-2026-36826

CVE-2026-36826: Injeção SQL no genesisQL = 1.1.1 Resumo genesisQL 1.1.1 é vulnerável a Injeção SQL na função checkPassword. Os campos username e password fornecidos pelo usuário são interpolados diretamente na string da consulta SQL sem parametrização, permitindo injeção SQL não autenticada e...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 12:32 a.m.2 views

Ashwesker-CVE-2025-64155

🔒 CVE-2025-64155: Vulnerabilidade Crítica no FortiSIEM 📌 Visão Geral CVE-2025-64155 é uma vulnerabilidade de segurança crítica no Fortinet FortiSIEM , uma plataforma popular de gerenciamento de informações e eventos de segurança. Divulgada publicamente em 13 de janeiro de 2026 , ela permite que...

9.8CVSS9AI score0.43221EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/27 12:32 a.m.2 views

CVE-2025-58360

CVE-2025-58360 A vulnerabilidade em questão é CVE-2025-58360 pontuação CVSS: 8.2, uma falha não autenticada de Entidade Externa XML XXE que afeta todas as versões anteriores e incluindo 2.25.5, e das versões 2.26.0 a 2.26.1. Foi corrigido nas versões 2.25.6, 2.26.2, 2.27.0, 2.28.0 e 2.28.1. A...

9.8CVSS8.1AI score0.64874EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/27 12:32 a.m.3 views

CVE-2018-2380

CVE-2018-2380 CVSS v3 基础评分:6.6/10 通过 SAP NetWeaver AS JAVA CRM 的日志注入实现远程命令执行的 PoC 脚本使用示例 root@kitploit: python crmrce-CVE-2018-2380.py --host 127.0.0.1 --port 50001 --username administrator --password 123QWEasd --SID DM0 --ssl true 其中 --host 是 SAP 服务器 IP --port SAP NetWeaver AS Java 端口 可通过 SAP...

6.6CVSS7.1AI score0.28934EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/27 12:31 a.m.3 views

microctfs

microctfs Docker에서 실행되는 작은 CTF 챌린지 logviewer logviewer 챌린지 빌드 및 포트 8000에 노출하여 시작 root@kitploit: cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer logviewer 챌린지 재시작 root@kitploit: docker rm -f logchallenge && docker run -d -p 8000:80 --name logchalleng...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 12:31 a.m.5 views

CVE-2024-50498

CVE-2024-50498 الوصف ثغرة التحكم غير السليم في توليد الكود 'Code Injection' في WP Query Console من LUBUS تسمح بحقن الكود. تؤثر هذه المشكلة على WP Query Console: من غير محدد حتى 1.0. إعداد مستمع Netcat: افتح طرفية على جهازك وشغّل مستمع Netcat لانتظار اتصال الصدفة العكسية root@kitploit: nc -lvnp...

10CVSS8.9AI score0.53135EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/27 12:31 a.m.3 views

CVE-2026-38945

CVE-2026-38945 المؤلف: Rafael José Núñez Gulías الشركة: Iberian Var Group المنتجات المتأثرة: RayVentory Scan Engine 12.6 Update 8 والإصدارات السابقة نشرة Raynet: RSEC200967 rvia في Raynet ينفّذ أمر find بمعايير بحث منتهية بشكل غير صحيح لتحديد مواقع تثبيتات Java عند استدعاء خيار oracle. يمكن...

7.8CVSS5.2AI score0.00799EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 12:31 a.m.2 views

docker-lab-cve-2017-5638-cve-2021-41773

مختبر المهاجم: CVE-2017-5638 & CVE-2021-41773 مختبر محاكاة هجمات قائم على Docker يحتوي على 7 مضيفات، مصمم لتوضيح سلسلة قتل متعددة المراحل، والحركة الجانبية، واكتشاف IDS متعدد النقاط. نظرة عامة يحاكي هذا المختبر بيئة شبكة واقعية يتقدم فيها المهاجم من الاستطلاع الأولي إلى نقطة ارتكاز، وأخيرًا إلى ه...

10CVSS8.4AI score0.99999EPSS
SaveExploits207
EUVD
EUVD
added 2026/08/27 12:30 a.m.4 views

EUVD-2026-66809

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS7.3AI score
SaveExploits0References7
EUVD
EUVD
added 2026/08/27 12:30 a.m.2 views

EUVD-2026-66814

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json...

5.9AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/27 12:30 a.m.3 views

EUVD-2026-66816

The front-end interface /superdiamond/preview/projectCode/module/type of super-diamond-server = 1.3.3 is vulnerable to SQL injection. The module parameter is directly concatenated into the SQL IN clause through StringUtils.split and string concatenation without being parameterized and bound...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/27 12:29 a.m.2 views

MAL-004

MAL-004: Roundcube Webmail中CVE-2020-12641的命令注入绕过 针对影响1.4.5和1.3.12之前版本的“CVE-2020-12641:Roundcube Webmail中通过“imconvertpath”实现的命令注入”发现了一种绕过方法。 为了防止“CVE-2020-12641:通过“imconvertpath”参数实现的命令注入”而实施的PHP “escapeshellcmd”函数,其预处理操作不充分,因此可以通过以下方式绕过此“过滤器”: 命令特定标志(同时适用于Linux和Windows环境) 远程SMB路径(仅适用于Windows环境)...

9.8CVSS8.4AI score0.84456EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/27 12:29 a.m.2 views

DropSpawn_BOF

DropSpawn 소개 DropSpawn은 비교적 알려지지 않은 DLL 하이재킹 방법을 통해 추가 비콘Beacon을 생성하는 데 사용되는 CobaltStrike BOF입니다. x86-x86, x64-x64, x86-x64/그 반대를 지원합니다. 프로세스 인젝션 대안으로 사용하세요. Windows 실행 파일은 DLL 검색 순서를 따릅니다. 절대 경로가 지정되지 않은 DLL을 로드하려고 할 때: DLL 하이재킹은 일반적으로 다음 중 하나가 필요합니다: A. 사용자가 실제 DLL이 있는 폴더보다 검색 순서 우선순위가 높은 폴더에 쓰...

5.4AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/27 12:29 a.m.2 views

zencart_auth_rce_poc

zencartauthrcepoc CVE-2021-3291 1- سجّل الدخول كمسؤول 2- افتح صفحة تعديل أي وحدة 3- افحص العنصر لأي زر اختيار radiobox بقيمة true 4- غيّر true إلى true','MODULEORDERTOTALTOTALSTATUS'; echo id; // 5- انقر على زر التحديث 6- لتشغيل الأمر، عد إلى صفحة التعديل مرة أخرى CVE-2021-3291...

9CVSS7AI score0.16782EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/27 12:29 a.m.2 views

CVE-2025-26794

CVE-2025-26794: Injeção SQL cega no Exim 4.98 SQLite DBM - writeup de exploração Relatório do Exim: https://www.exim.org/static/doc/security/CVE-2025-26794.txt Descobri esta vulnerabilidade através de uma revisão manual de código. Detalhes da vulnerabilidade: Problema Os parâmetros SQL, quando o...

9.8CVSS8.3AI score0.77173EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/27 12:29 a.m.2 views

CVE-2025-26055

CVE-2025-26055 Descrição da CVE Autor : Rohan Deshpande OS Command Injection Resumo A injeção de comando no sistema operacional é uma vulnerabilidade de segurança que permite a um atacante executar comandos arbitrários no sistema operacional do host através de uma aplicação vulnerável. Isso pode...

6.5CVSS5.3AI score0.01082EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 12:29 a.m.2 views

cve-2024-4577

Script de teste da vulnerabilidade CVE-2024-4577 Este script Python é uma ferramenta simples de PoC Proof of Concept para diagnosticar a vulnerabilidade recente do PHP CVE-2024-4577. ⚠️ Esta ferramenta é fornecida para fins de diagnóstico de segurança e deve ser usada somente em sistemas de sua...

9.8CVSS7.7AI score0.99987EPSS
SaveExploits68
Rows per page
Query Builder