CVE-2024-54761

BigAnt Office Messenger 5.6.06 通过SQL注入实现远程代码执行 BigAnt Messenger 中的 SQL 注入漏洞导致远程代码执行漏洞。按照以下步骤进行利用。 Usage: root@kitploit: CVE-2024-54761.py -h -r RHOST -p RPORT -u USERNAME -P PASSWORD options: -h, --help show this help message and exit -r, --rhost RHOST Target IP address -p, --rport RPORT Target...

CVE-2022-26629

锁屏绕过 CVE-2022-26629 受影响的产品 SoroushPlus+ Messenger 1.0.30 漏洞类型 不当的访问控制 影响 锁屏绕过 摘要 对权限和特权不足的处理不当，允许攻击者修改并覆盖锁屏功能，从而在未经任何授权的情况下绕过锁屏。 利用 BypassLockScreen.py 自动利用 PoC 1. 将 BypassLockScreen.py 放置到你的 SoroushPlus+ 安装目录中， 2. 运行 Python3 BypassLockScreen.py。 测试环境 Windows Linux 演示...

Joomla! Harmis Messenger 1.2.2 - Local File Inclusion

Joomla! Harmis Messenger 1.2.2 is vulnerable to local file inclusion which could give an attacker read access to arbitrary files. id: CVE-2019-9922 info: name: Joomla! Harmis Messenger 1.2.2 - Local File Inclusion author: 0xAkoko severity: high description: Joomla! Harmis Messenger 1.2.2 is...

Giga Messenger WordPress - Cross-Site Scripting

Giga Messenger WordPress plugin = 2.3.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

CVE-2025-49091-Gajim-RCE

CVE-2025-49091 - Python 概念验证 针对 Gajim 加密即时通讯软件的 CVE-2025-49091 概念验证（PoC）漏洞利用程序。 由 Patryk Ptak（SivertPL）和 Dennis Dast 独立发现，漏洞利用程序由 Patryk Ptak 编写。 文件 CVE-2025-49091.py —— Python 概念验证脚本。 使用方法 root@kitploit: python3 CVE-2025-49091.py 根据需要调整脚本中的必需参数或配置。 免责声明 本仓库仅用于教育目的...

hermes-the-messenger

Hermes 信使 一个通过 Windows 推送通知实现持久化的 PoC 更多技术细节和背景信息，请阅读我们的博客文章：https://www.persistent-security.net/post/beacon-on-demand-abusing-push-notifications-for-persistence 使用方法 在开始之前，你需要先 设置 Azure。然后，你需要运行一次该可执行文件，以便其自行注册推送通知。你只需将 Azure 应用的对象 ID 作为参数传入，如果一切顺利，它会打印 Microsoft 返回的通道 Uri。此时你就可以关闭该应用了。...

exploits

exploits Published PoCs can be found at exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

voron-crypto

Biblioteca de criptografía/protocolo Voron — solicitud de revisión Este es el núcleo criptográfico y de protocolo de mensajería de un pequeño proyecto de mensajería E2EE, extraído por separado para su revisión externa. No es el producto completo: el cliente Android y la configuración de despliegu...

cve-2020-27358-27359

CVE-2020-27358 / CVE-2020-27359 Pasos de explotación para CVE-2020-27358 y CVE-2020-27359 CVE-2020-27358 Se descubrió un problema en REDCap 8.11.6 hasta 9.x anteriores a 10. La función CSV del messenger que permite a los usuarios exportar sus hilos de conversación como CSV permite a usuarios no...

EUVD-2026-70850

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...

CVE-2026-67402

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...

CVE-2026-67402

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...

CVE-2026-67402

An insecure Apache configuration in ConfigServer Security & Firewall (CSF) by WebPros maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host . A remote unauthenticated attacker whose address is blocked by CSF can request a mapped executable and run arbitrary commands as the Apa...

PT-2026-85316

Name of the Vulnerable Software and Affected Versions ConfigServer Security & Firewall versions prior to 16.31 Description An insecure Apache configuration maps /usr/bin as CGI Common Gateway Interface programs through the Messenger v3 HTTPS virtual host. This allows a remote unauthenticated...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libceph: fixed invalid accesses to cephconnectionv1info. There is a place where generic code in messenger.c reads from certain fields, and another place where it writes to members of the con-v1 union without checking that those...

Astra Linux – Vulnerability in Linux 5.15

A issue was discovered in the net/ceph/messengerv2.c file within the Linux kernel before version 6.4.5. There is an integer signedness error, which leads to a buffer overflow and remote code execution via the HELLO command or one of the AUTH frames. This occurs due to an untrusted length value...

The vulnerability of the process_v2_sparse_read() function in the net/ceph/messenger_v2.c kernel module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the processv2sparseread function in the net/ceph/messengerv2.c kernel module of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2026-68156

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...

DEBIAN-CVE-2026-68156

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches au-buf-vec.iovbase and au-buf-vec.iovlen in struct cephauthhandshake. These cached values are then used by the messenger connect code wh...