CVE-2024-22263_Scanner

CVE-2024-22263Scanner 倫理的な用途にのみ使用してください。有害または悪意のある活動は一切許可されません。また、すべて自己責任で行ってください。 CVE-2024-22263: Spring Cloud Dataflow における任意ファイル書き込み 使用方法 root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝...

CVE-2024-37084-Poc

CVE-2024-37084-Poc 설정 ,분석 , 데모 익스플로잇 및 CVE-2024-37084에 대한 PoC 사용 방법 : root@kitploit: py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optional arguments: -h, --help show this he...

CVE-2024-25641

Cacti CVE-2024-25641 Authenticated Package Upload RCE Proof of Concept PoC This script is a Proof of Concept PoC for exploiting the CVE-2024-25641 vulnerability in Cacti, a web-based monitoring tool. The script automates the process of authenticating with the application, uploading a malicious...

GL.iNet-Multiple-Vulnerabilities

GL.iNet Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2023-46454: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

CVE-2026-80469

CVE-2026-80469 affects the Device Manager extension shipped with SICK Sentio Creator , in releases up to and including version 2026.2 . An attacker can achieve arbitrary code execution on a target system by uploading a malicious device driver package that bypasses driver verification mechanisms, ...

CVE-2026-63016

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...

CVE-2026-63016 Apache InLong: Ordinary users can create new packages

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...

CVE-2026-63016

Apache InLong versions 2.0.0 through 2.3.x have an Uncontrolled Resource Consumption flaw where unauthenticated network users can upload non-official packages, potentially disrupting availability (CVSS 5.3, MEDIUM). Fix: upgrade to 2.4.0 or cherry-pick PRs #12095 and #11732. No exploitation obser...

EUVD-2026-63397

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...

PT-2026-79041

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...

CVE-2026-59763

Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...

CVE-2026-56755

Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload...

CVE-2026-59763 Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...

EUVD-2026-58125

Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...

CVE-2026-59763 Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...

CVE-2026-59763

CVE-2026-59763 affects Gitea’s package upload flow, where unbounded Arch package file metadata can cause resource amplification (availability impact). The issue is tied to Arch metadata handling in the package upload pipeline, leading to potential denial of service through resource exhaustion. Pu...

CVE-2026-56755 Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload

Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload...

CVE-2026-56755

Summary: CVE-2026-56755 is a DoS vulnerability in Gitea related to Denial of Service (CPU and memory exhaustion) caused by O(N^2) string concatenation during Debian package upload. The vulnerability is exploitable locally (attack vector: LOCAL) and is described with an impact of high availability...

PT-2026-65698

An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server...

GO-2026-6037 Gitea: Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload in gitea.dev

Gitea: Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload in gitea.dev...