612 matches found
shiro-cve-2020-17523
Analyse des contournements d'authentification Apache Shiro CVE-2020-17523 0x01 Description de la vulnérabilité Apache Shiro est un framework de sécurité Java puissant et facile à utiliser, qui assure l'authentification, l'autorisation, la gestion des mots de passe et des sessions. Grâce à l'API...
CVE-2021-43798
CVE-2021-43798 Обход каталогов Grafana Простая программа для эксплуатации обхода каталогов Grafana Установка gem install httparty gem install colorize gem install timeout ruby cve-2021-43798.rb...
CVE-2025-53632
CVE-2025-53632 이 저장소에는 Chall-Manager !WARNING Chall-Manager가 시나리오를 처리하는 방식상, zip slip 없이도 여전히 완전히 악용 가능합니다. 시나리오의 pulumi 바이너리를 변조하여 다음 실행 시 임의 코드가 실행되도록 하면 됩니다. 우리는 Chall-Manager v0.1.3에 대한 공격을 시연합니다. 시나리오 노출된 Chall-Manager를 상상해 봅시다 실제로는 그러지 마세요. RCE 온디맨드 앱이므로 노출용이 아닙니다. 챌린지를 생성할 때 시나리오는 Pulumi...
BurpSuite_403Bypasser
403Bypasser Une extension BurpSuite pour contourner les restrictions 403 sur les répertoires. Grâce au scan passif activé par défaut, chaque requête 403 sera automatiquement analysée par cette extension, il suffit donc de l'ajouter à BurpSuite et de profiter. Payloads : $1: HOSTNAME $2: PATH...
NVMS-1000-Directory-Traversal-Bash
NVMS-1000-Directory-Traversal-Bash Exploit di Directory Traversal scritto in Bash per NVMS-1000 CVE-2019-20085. Utilizzo root@kitploit: ./cve-2019-20085-poc.sh -u TARGETURL -f TARGETFILE Esempio root@kitploit: ./cve-2019-20085-poc.sh -u http://127.0.0.1/ -f path/to/file.txt Dichiarazione di non...
pgAdmin < 6.17 - Unauthenticated Remote Code Execution
pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication. id: CVE-2022-4223 info: name: pgAdmin 6.17 - Unauthenticated Remote Code Execution...
OpenMetadata - Authentication Bypass
OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The JwtFilter handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request...
CVE-2026-82257
SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attackers can manipulate the deletion path to remove methods on the prototype, potentially disabling application...
EUVD-2026-67583
SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attackers can manipulate the deletion path to remove methods on the prototype, potentially disabling application...
CVE-2026-82257 SvelteKit before 2.69.1 Prototype Pollution via File Input
SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attackers can manipulate the deletion path to remove methods on the prototype, potentially disabling application...
CVE-2026-82257 SvelteKit before 2.69.1 Prototype Pollution via File Input
SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attackers can manipulate the deletion path to remove methods on the prototype, potentially disabling application...
CVE-2026-79706
The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...
CVE-2025-6218-POC
CVE-2025-6218 Prova di concetto POC Panoramica Questo repository contiene una semplice prova di concetto POC per CVE-2025-6218 , che dimostra lo sfruttamento di una vulnerabilità relativa alla gestione dei percorsi di estrazione degli archivi da parte di WinRAR. Lo script batch della POC crea un...
CVE-2022-22965
CVE-2022-22965 Spring4Shell-PoC Versione Spring Framework 5.2.20 e 5.3.18 Versione con patch: Spring Framework 5.3.18 e 5.2.20 Spring Boot 2.6.6 e 2.5.12 Dettagli Spring Core è il componente principale di Spring Framework. Questa è la base per costruire altri componenti nell'ecosistema Spring...
CVE-2025-44137
CVE-2025-44137 Lettura di file non autenticata in MapTiler Tileserver-php v2.0. Descrizione MapTiler Tileserver-php v2.0 è vulnerabile a Directory Traversal. La funzione renderTile all'interno di tileserver.php è responsabile della consegna delle tile memorizzate come file sul server tramite...
CVE-2024-48990
CVE-2024-48990 Hallo, dies ist 0x3bs Auf dem Opfer-Rechner: root@kitploit: set -e cd /tmp 1. Create the malicious module directory structure mkdir -p malicious/importlib auf dem Angreifer-Rechner um lib.c auf dem Angreifer-Rechner zu kompilieren: root@kitploit: gcc -shared -fPIC -o exp.so lib.c u...
CVE-2024-32019-ndsudo
Die ndsudo-Schwachstelle ermöglicht es einem Angreifer, Root-Berechtigungen zu erlangen, indem er einen nicht vertrauenswürdigen Suchpfad im ndsudo-Tool ausnutzt, das Teil des Netdata-Agents ist. Dies kann die Ausführung beliebiger Programme mit erhöhten Rechten ermöglichen, wenn der Angreifer ei...
CVE-2025-69599
CVE-2025-69599 लेखक: Rafael José Núñez Gulías कंपनी: Iberian Var Group प्रभावित उत्पाद: RayVentory Scan Engine 12.6 Update 8 और पिछले संस्करण Raynet सलाह: RSEC200965 rvia Raynet में अनियंत्रित खोज पथ तत्व Uncontrolled Search Path Element समस्या के लिए संवेदनशील है। जब साझा ऑब्जेक्ट लोड करते हैं औ...
CVE-2020-8816
CVE-2020-8816 Ein Python-Skript zur Ausnutzung von CVE-2020-8816, einer Schwachstelle zur Remote-Code-Ausführung auf dem Pi-hole. Dieses Skript verwendet die von François Renaud-Philippon gefundenen Techniken, um eine Remote-Code-Ausführung auf einem Pi-hole zu erreichen, das eine Weboberfläche i...