CVE-2021-21972

Uso:CVE-2021-21972.py option -u or --url: url di destinazione -t or --type: tipo di Payload ssh/webshell -f or --file: il file da caricare webshell o authorizedkeys Esempio: CVE-2021-21972.py -u https://127.0.0.1 -t webshell -f shell.jsp -p or --proxy: impostazione del proxy Esempio:...

malicious-devfile-registry

Bösartiges Devfile Registry Das Projekt enthält ein bösartiges Devfile Registry, das zur Ausnutzung von CVE-2024-0402 in Gitlab verwendet werden kann. Der Exploit Ein nodejs:2.2.1 Stack wird indiziert, um die Datei archive.tar verfügbar zu machen, die das Path-Traversal-Problem in der...

CVE-2022-40684

CVE-2022-40684 POC per CVE-2022-40684 che interessa i dispositivi Fortinet FortiOS, FortiProxy e FortiSwitchManager. Analisi Tecnica Un'analisi tecnica approfondita della causa principale della vulnerabilità è disponibile sul nostro blog:...

CVE-2024-415770-ssrf-rce

CVE-2024-415770-SSRF-RCE Beschreibung Dieses Skript interagiert mit dem Teamserver. Aktualisieren Sie das Skript mit Ihrer Teamserver-URL. Es führt mehrere Schritte durch, um einen Agenten zu registrieren, einen Socket zu öffnen und einen SSH-Schlüssel in die authorizedkeys-Datei des Ziels...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Getestet gegen VMware VCSA 6.7 SSH-Schlüsselpaar erstellen root@kitploit: ssh-keygen -t rsa -f vcsa.key -N '' Tarball mit ../../../../../home/vsphere-ui/.ssh/authorizedkeys erstellen root@kitploit: python2 evilarc.py -d 5 -p 'home/vsphere-ui/.ssh' -o unix -f evil.tar...

CVE-2022-40684

CVE-2022-40684 Pontuação CVSS: 9.6 POC para a CVE-2022-40684 que afeta os dispositivos Fortinet FortiOS, FortiProxy e FortiSwitchManager. Produtos Vulneráveis Versões do FortiOS entre 7.0.0 – 7.0.6 e 7.2.0 – 7.2.1 Versões do FortiProxy entre 7.0.0 – 7.0.6 e a versão 7.2.0 Versões do...

CVE-2026-20182

CVE-2026-20182 — Cisco Catalyst SD-WAN Controller / Manager Bypass di Autenticazione Un proof-of-concept di exploit per CVE-2026-20182 , un bypass critico CVSS 10.0 dell'autenticazione nel servizio vdaemon DTLS UDP/12346 su Cisco Catalyst SD-WAN Controller vSmart e Manager vManage. Divulgato: 14...

vSphereyeeter

vsphereyeeter.sh é um script bash automatizado para explorar a vulnerabilidade CVE-2021-21972 no vSphere Client para servidores vCenter. Uma vez executado, basta fornecer o endereço IP do seu alvo vulnerável e você receberá um shell SSH. "O vSphere Client HTML5 contém uma vulnerabilidade de...

CVE-2022-40684

CVE-2022-40684 POC per CVE-2022-40684 che colpisce i dispositivi Fortinet FortiOS, FortiProxy e FortiSwitchManager. Analisi tecnica Un'analisi tecnica della causa principale della vulnerabilità è disponibile sul nostro blog:...

CVE-2022-40684-POC

CVE-2022-40684-POC FortiProxy / FortiOS bypass dell'autenticazione Sfruttamento di massa /api/v2/cmdb/system/admin/ "ssh-public-key1": "" root@kitploit: ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H...

CVE-2022-40684

CVE-2022-40684 von 1vere$k Derzeit ist es eine POC-Kopie für CVE-2022-40684, die Fortinet FortiOS-, FortiProxy- und FortiSwitchManager-Geräte betrifft. Kopiert von https://github.com/horizon3ai/CVE-2022-40684 Analyse Der Exploit verwendet das einfache Payload: root@kitploit: PUT...

kube-alien

Kube-alien Questo strumento lancia un attacco su un cluster k8s dall'interno. Ciò significa che è già necessario avere un accesso con il permesso di distribuire pod in un cluster per eseguirlo. Dopo aver eseguito il pod kube-alien, tenta di prendere il controllo dei nodi del cluster aggiungendo l...

bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork

CVE-2026-73678 — RCE non autenticata in MindsDB Minds Platform / MindsHub Cowork PoC per CVE-2026-73678 CVSS 3.1 10.0 Critico , AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Analisi completa: www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork/ Il sidecar FastA...

hi_my_name_is_keyboard

Ciao, mi chiamo Keyboard Questo repository contiene script proof-of-concept per CVE-2023-45866, CVE-2024-21306 e CVE-2024-0230. Ulteriori dettagli sono disponibili nel post del blog. Proof of Concept| Descrizione ---|--- Iniezione di tasti su Android| Associa forzatamente una tastiera Bluetooth...

agent-vault-proxy

keys-on-the-wire Chiavi API just-in-time per agenti AI e qualsiasi altro processo che instradi attraverso di esso: il chiamante vede solo un segnaposto. Precedentementeagent-vault-proxy. La CLI ora è kow; il vecchio comando avp funziona ancora in questa release e verrà rimosso nella prossima majo...

UBUNTU-CVE-2026-68553

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which passes issecurestring validation and is embedded into Redis keys at nine call sites in...

CVE-2026-59992 Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the first-party production media adapters pass attacker-controlled object keys to storage SDK upload and delete operations without...

CVE-2026-71867 Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a single quote in a schema property name is emitted into single-quoted object keys in generated MSW mock factories without safe encoding. This permits attacker-controlled...

CVE-2026-45272 MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File

MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admin.py accepts SOCIALAUTH key names without validating quotes or newline characters, and SettingsLoader.dumpfile in...

Malicious code in fast-glob-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7695ac02a2492bbf3118fc68514378edb201a93183f2dcb0035727781f31d408 fast-glob-fast is a name-squat of the popular fast-glob package its repository field even points at mrmlnc/fast-glob. The declared postinstall hook...