CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 の認証不要のパストラバーサル...

CVE-2015-6668

CVE-2015-6668 Evangelos Mourikis POC for CVE-2015-6668 converted for Python 3 Exploits IDOR vulnerability in Job Manager plugin for Wordpress. Tested on Python 3.11.9 References NIST CVE WPScan Vuln DB Setup and Usage Clone the repo, setup virtual environment if desired, install requests, and run...

faraday

オープンソース脆弱性管理ツール セキュリティには、新しい情報をスマートに入手する方法を考案することと、発見した情報を追跡して改善活動を強化することという、2つの難しい課題があります。Faradayを使えば、脆弱性の発見に集中できます。残りの部分は私たちがお手伝いします。ターミナルでそのまま使用し、作業を効率的に整理してください。 Faradayは、コミュニティで利用可能なツールを真のマルチユーザー方式で活用できるように設計されています。 Faradayは読み込んだデータを集約・正規化し、管理者とアナリストの双方にとって有益なさまざまな可視化形式でデータを探索できるようにします。...

magento2-cosmic-sting-patch

Magento 2 Patch for CVE-2024-34102aka Cosmic Sting An alternative solutionas a Magento 2 extension to fix the XXE vulnerability CVE-2024-34102aka Cosmic Sting. If you cannot upgrade Magento or cannot apply the official patch, try this one. If you don't fix this vulnerability, the attacker can RCE...

SAP_EEM_CVE-2020-6207

PoC for CVE-2020-6207 SAP Solution Managerにおける認証チェック欠落 このスクリプトは、SAP Solution Managerに接続されたSAP SMDAgent上でRCEに繋がるSAP EEMサーブレットtcsmdagentapplicationeemの認証チェック欠落を確認し、悪用するためのものです。 発見者: Pablo Artuso Yvan 'iggy' G 論文: An Unauthenticated Journey to Root :Pwning Your Company's Enterprise Software Servers...

CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 Dork: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" Poc : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Multiple cross-site scripting XSS vulnerabilites in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Page Specific Metadata and Smarty data in the Content Manager Menu. Attack Vectors:...

PoC

PoC 概念実証エクスプロイトとツールのリポジトリ。 BMCRSCDRCE BMC Server AutomationのRSCDエージェントに対する認証なしリモートコマンド実行エクスプロイト。このエクスプロイトは、CVE-2016-1542（Nessusにより検出）の影響を受けるサーバーに対して動作します。 これは現在Metasploitモジュールになっています。exploits/multi/misc/bmcserverautomationrscdnshrce を参照してください。...

CVE-2024-29847

CVE-2024-29847 Ivanti Endpoint Manager AgentPortal の信頼できないデータのデシリアライゼーションによるリモートコード実行脆弱性 CVE-2024-29847 の PoC この脆弱性の根本原因分析は私のブログでご覧いただけます: https://summoning.team/blog/ivanti-epm-CVE-2024-29847-deserialization-RCE/ 使用方法 root@kitploit: CVE-2024-29847.exe --uselease --installdir "C:\Program...

CVE-2023-46694

CVE-2023-46694 Discovered by: Federico Zambito with Innovery Summary Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, resulting in remote code execution. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckedito...

CVE-2026-9290

CVE-2026-9290 — WP User Manager LFI to RCE Exploit Pre-Auth Path Traversal via 'tab' Parameter → Local File Inclusion Overview CVE-2026-9290 is a high-severity CVSS 7.5 unauthenticated Local File Inclusion vulnerability in the WP User Manager – User Profile Builder & Membership WordPress plugin ≤...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 Remote Code Execution without authentication 3.15.0 found by Rico Tencent Security Yunding Lab and @voidfyoo Detailed analysis english: https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/...

cormem-read-poc

DISCLAIMER : This project is for educational and security research purposes only. Use only on systems you own or have explicit permission to test. Unauthorized use may be illegal in your jurisdiction. cordrvexploit — CVE-2026-38194 Vulnerability This tool demonstrates CVE-2026-38194, a...

pmanager

Pmanager 데모 설명 오프라인 안전 데이터베이스에서 비밀번호를 저장하고 검색하세요. 비밀번호가 이전에 유출되었는지 확인하여 표적화된 비밀번호 재사용 공격을 방지하세요. 왜 또 다른 비밀번호 관리자를 개발하나요? 이 프로젝트는 처음에 Rust를 배우고자 하는 열망에서 시작되었습니다. keepassxc의 투박한 GUI에 지쳐 있었습니다. 암호학에 대해 더 배우고 싶었습니다. 재미로. : 기능 최신 암호화 알고리즘으로 안전한 비밀번호 저장. 공격자가 무차별 대입 공격을 수행하기 어렵게 하기 위해 여러 번의 argon2id 반복...

easyssh

EasySSH 인생을 편하게 만들어 줄 SSH 연결 관리자 관리자를 찾고 있습니다! 완전하고 효율적이며 사용하기 쉬운 관리자입니다. 연결 및 그룹 생성 및 편집, 터미널 사용자 지정, 동일한 연결의 여러 인스턴스를 지원합니다. 기능 연결 및 그룹 관리 터미널 사용자 지정 다크 테마 동일한 연결의 여러 인스턴스 열려 있던 호스트 복원 /.ssh/config 동기화 비밀번호로 데이터 보호 기부 PayPal | Patreon 개발 및 빌드 직접 EasySSH를 개발하고 빌드하려면 다음 의존성이 필요합니다: libgee-0.8-dev...

b4tm4n

B4TM4N PHP WEBSHELL Login Account Default root@kitploit: Username : k4mpr3t Password : k4mpr3t Features root@kitploit: 0 File Manager 1 Sec. Info 2 Simply Database 3 Interactive terminal 4 PHP Reverse Back Connect 5 Run PHP Code 6 Custom Toolz 7 Self Script Encryptor ! 8 Error Handler 9 Themes Se...

b4tm4n

B4TM4N PHP 웹쉘 로그인 계정 기본값 root@kitploit: Username : k4mpr3t Password : k4mpr3t 기능 root@kitploit: 0 파일 관리자 1 보안 정보 2 간단 데이터베이스 3 대화형 터미널 4 PHP 리버스 백 커넥트 5 PHP 코드 실행 6 사용자 정의 도구 7 셀프 스크립트 암호화기! 8 오류 처리기 9 테마 셀프 스크립트 암호화기 root@kitploit: 사용법 :...

CVE-2019-13498

CVE-2019-13498 脆弱性タイトル: MITM - HSTS欠如による認証情報とコンテンツ操作 日付: 07/10/2019 脆弱性作者: Furqan Khan ベンダーホームページ: https://www.oneidentity.com/ ソフトウェアリンク: https://www.oneidentity.com/products/cloud-access-manager/ バージョン: 8.1.3 テスト環境: Kali Linux , Windows 7 ,Ubantu 16.04 MITM攻撃を実施し、ユーザー名、パスワード、OTPを盗むために、bettercap...

tinyfilemanager-wh1z-edition

Tiny File Manager WH1Z-Edition Introducing Tiny File Manager WH1Z-Edition, the compact and efficient solution for managing your files and folders with enhanced privacy and security features. Gone are the days of relying on external resources – I've stripped down the code to its core, making it...

CVE-2023-36723

CVE-2023-36723 This is PoC for arbitrary directory creation bug in Container Manager service. This PoC is not thoroughly tested so it may not even work most of the time it was enough for msrc to confirm vulnerability. In order to exploit this vulnerability a Windows Sandbox feature have to be...