CVE-2024-24919

Introducción Script POC en Python simple que verifica y aprovecha la vulnerabilidad CVE-2024-24919 de Check Point Wrong Check Point; vulnerable a lectura arbitraria de archivos. Requisitos Python 3 Pip Librería/Módulo requerido Instalar vía PIP requests urllib3 tqdm Cómo Ejecutar root@kitploit: P...

CVE-2025-44823

Authenticated API Key Exposure in Nagios Log Server 2024R1.3.1 ▶️ PoC Demo CVE ID: CVE-2025-44823 Date: 2025-04-02 Authors: Alex Tisdale, Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...

CVE-2020-11651-PoC

CVE-2020-11651-PoC 该仓库包含 CVE-2020-11651 漏洞利用代码，已更新以适配最新版本的 Python 并处理连接错误。 从原始仓库复制的 README 原始仓库 CVE-2020-11651 和 CVE-2020-11652 的 PoC 漏洞利用 这是一个基于最初检查脚本的概念验证漏洞利用。使用它来验证您是否已成功将 Salt master 服务器更新为包含必要修复的版本。 感谢 F-Secure Labs 的研究及报告。 目前，该脚本可用于在 master 及所有连接的 minion 上进行文件系统访问和调度命令。请明智地使用这些权限！ 用法...

Bluetooth-Attacks-CVE-2025-27840

本稿では、攻撃者がモジュールアップデートを介して隠された脆弱性リストを導入し、ESP32デバイスを危険にさらし、秘密鍵への不正アクセスを取得する方法について説明します。これにより、このマイクロコントローラを使用する数十億のデバイスが影響を受けます。主要な問題の一つは、ESP32アーキテクチャで発見されたCVE-2025-27840脆弱性です。ビットコインネットワークのセキュリティを確保するために、以下の脆弱性を特定しました。関数hasinvalidprivkeyにおける下限チェック欠如による無効な秘密鍵の使用可能性、関数electrumsighashにおけるBIP-137非互換性によるト...

Zoho ManageEngine - getUserAPIKey Authentication Bypass

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 125657, 126002, 126104, and 126118 allow unauthenticated attackers to obtain a user's API key, and then access external...

Netmaker - Hardcoded DNS Secret Key

Netmaker makes networks with WireGuard. Prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage has been found in Netmaker allowing unauth users to interact with DNS API endpoints. id: CVE-2023-32077 info: name: Netmaker - Hardcoded DNS Secret Key author: iamnoooob,rootxharsh,pdresearch...

CVE-2026-27944

CVE-2026-27944 - Nginx UI 未授权备份下载与解密 https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red 本工具是 CVE-2026-27944 的概念验证（PoC）漏洞利用程序。CVE-2026-27944 是 Nginx UI ≤ 2.3.2 中的一个严重漏洞，允许任何未经身份验证的攻击者通过 /api/backup...

CVE-2026-13768

CVE-2026-13768 - Gardyn IoT Hub オーナーキー露出 !WARNING このリポジトリには、重大度の高いIoT脆弱性に対する完全に機能する概念実証（PoC）が含まれています。 このコードは教育目的、許可されたセキュリティ研究、および防御的テストのためだけに 提供されます。 無断使用は違法です。 所有者からの明示的な書面による許可なしにシステムをテストまたは悪用することは、Computer Fraud and Abuse Act（CFAA）、EUサイバーレジリエンス法、およびお住まいの地域のその他の適用法律に違反します。...

CVE-2026-75760

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai discloses provider request state and credentials in a user-facing validation error. In AshAi.Changes.Vectorize, when the embedding provider call fails the change added a changeset error whose message...

EUVD-2026-68309

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai discloses provider request state and credentials in a user-facing validation error. In AshAi.Changes.Vectorize, when the embedding provider call fails the change added a changeset error whose message...

ed25519-unsafe-libs

ed25519-unsafe-libs Double Public Key Signing Function Oracle Attack on Ed25519 A list of potentially unsafe ed25519 signature libraries that allow a public api where secret and public key can be provided independently as signing function inputs. Misuse of these public apis can result to private...

CVE-2026-82640

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...

CVE-2026-82641

Keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all network interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. An unauthenticated attacker on the network can retrieve NSS keylog lines via /agent/pcap/keylog and dec...

CVE-2026-82641 keploy 3.1.0 through 3.6.25 Unauthenticated TLS Key Exposure

keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt recorded TLS...

EUVD-2026-68216

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...

EUVD-2026-68215

NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server's OpenAI API key. The x-base-url header is validated using substring matching instead of hostname parsing, allowing any URL containing...

CVE-2025-47423

CVE-2025-47423 – Local File Inclusion in Personal Weather Station Dashboard 12lts Discovered by: Matthew Eagle Status: Public Disclosure Date Reported: 2025-05-05 CVE ID: CVE-2025-47423 🧩 Summary A Local File Inclusion LFI vulnerability in the Personal Weather Station Dashboard version 12lts allo...

CVE-2025-53690-Analysis

CVE-2025-53690: Analisi della vulnerabilità di deserializzazione ViewState di Sitecore Panoramica CVE-2025-53690 è una vulnerabilità di deserializzazione ViewState scoperta nella famiglia di prodotti Sitecore, una vulnerabilità di sicurezza critica che consente l'esecuzione remota di codice...

Leaked-Credentials

Per cercare credenziali trapelate utilizzando gli strumenti di sviluppo di Google Chrome e le regex, segui questi brevi passaggi: 1. Apri DevTools: In Chrome, naviga sul sito che stai ispezionando, poi apri gli Strumenti di sviluppo con Ctrl+Shift+I Windows/Linux o Cmd+Option+I macOS. 2. Vai alla...

CVE-2026-80708 s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...