Spring Cloud Gateway Code Injection

Applications using Spring Cloud Gateway prior to 3.1.1+ and 3.0.7+ are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote...

SAP Solution Manager 7.2 - Remote Command Execution

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

Drupal - Remote Code Execution

Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10 V contain certain field types that do not properly sanitize data from non-form sources, which can lead to arbitrary PHP code execution in some cases. id: CVE-2019-6340 info: name: Drupal - Remote Code Execution author: madrobot severity:...

Rails File Content Disclosure

Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...

Oracle WebLogic Server Administration Console - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...

IncomCMS 2.0 - Arbitrary File Upload

IncomCMS 2.0 has a an insecure file upload vulnerability in modules/uploader/showcase/script.php. This allows unauthenticated attackers to upload files into the server. id: CVE-2020-29597 info: name: IncomCMS 2.0 - Arbitrary File Upload author: princechaddha severity: critical description: |...

apache-activemq-rce-research

Apache ActiveMQ Classic — Ricerca RCE Archivio di ricerca privato per la catena di esecuzione remota di codice Jolokia → addNetworkConnector → xbean/Spring-XML Apache ActiveMQ Classic CVE-2026-34197 e il suo bypass della patch CVE-2026-42588, più un audit completo di auto-ricerca della versione...

dinkleberry

Dinkleberry 🫐 Sei una delle 92,000+ persone1 bloccate con un NAS D-Link vulnerabile a CVE-2024-3272 e nessuna patch in vista? Questo strumento utilizza l'exploit stesso per correggere un dispositivo vulnerabile. 1: Vedi la divulgazione originale nei riferimenti Cosa fa Dinkleberry eseguirà un...

New-lib3mf.dll-for-MeshMixer

Nova lib3mf.dll para MeshMixer lib3mf.dll pré-compilada para MeshMixer que inclui um patch backportado para o CVE-2021-21772 e uma versão atualizada do zlib 1.3.1. Substitua o original em C:\Program Files\Autodesk\Meshmixer\ Código fonte incluído, se desejar compilá-lo você mesmo. CVE-2021-21772:...

python-patrol

Python Patrol Escaneie instalações do Python no macOS e execute o script CVE-2015-20107.py para relatar se a correção é necessária Vários destes scripts precisam de permissões de Acesso Total ao Disco e devem ser executados como root para que possam escanear todo o sistema de arquivos do macOS...

kali-nethunter-installer

Kali NetHunter Installer Dieser Kali NetHunter-Installer ist im Grunde nur eine ZIP-Datei, die von build.py aus dem hier enthaltenen Ordnerlayout erzeugt wird. Befolge die folgenden Anweisungen, um die Kali-NetHunter-Installer-ZIP zu erstellen. Alles, was du tun musst, ist, sie über Recovery/TWRP...

text4shell-tools

commons-text-tools Schnelllinks Zum Finden anklicken: Finde commons-text .jar-Dateien und ihre Versionen Aufrufe verwundbarer commons-text-Funktionen Hot-Patch für commons-text .jar-Dateien, um die verwundbaren Verhaltensweisen zu deaktivieren Beispiel für Scan und Patch Übersicht CVE-2022-42889...

CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch

CVE-2026-3030 – JSON मर्ज पैच में प्रोटोटाइप प्रदूषण प्रोग्राम कोड Node.js root@kitploit: // server.js - Vulnerable REST API with deep merge const express = require'express'; const app = express; app.useexpress.json; let config = role: 'user', settings: ; // Insecure deep merge function pollutabl...

SCCMVersionGuesser

SCCMVersionGuesser Automatisiertes Tool zur Erkennung von SCCM-Build- und Patch-Leveln Voraussetzungen requests Verwendung root@kitploit: $ python3 SCCMVersionGuesser.py https://sccm.example.com Referenzen https://learn.microsoft.com/en-us/intune/configmgr/hotfix/...

MS-SharePoint-July-Patch-RCE-PoC

MS-SharePoint-July-Patch-RCE-PoC PoC के लिए: CVE-2024-38094 CVE-2024-38024 CVE-2024-38023 PoC वीडियो: https://youtu.be/u8mccaakISw...

smbexec

root@kitploit: smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage...

CVE-2026-32202

Zero-Click-Erzwingung der Authentifizierung: Das Anzeigen eines Ordners mit der manipulierten .lnk-Datei löst während der Symbolwiedergabe eine UNC-Auflösung aus, wodurch das Opfer zu einer vom Angreifer gesteuerten ausgehenden Verbindung gezwungen wird, die dessen Net-NTLMv2-Anmeldeinformationen...

CVE-2026-50657

Die CVE-2026-50657 Betroffen vom CVE-2026-50657-Exploit: Nese Vista, Nese Server 2008, Nese 7 with Service Pack 2, Nese Server 2008 R2 with Service Pack 1, Nese Storage Server 2012, Nese 9, Nese Server 2012 R2, Nese 10, Nese 11 BETA Nese 7 with Service Pack 2 Ursprünglicher Patch: 30. Juni 2026 n...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi Patch-Umgehung Nur zur Verwendung in kontrollierten und eigenen Umgebungen. Nicht gegen Systeme ohne Autorisierung verwenden. Beschreibung PoC entwickelt, um CVE-2021-42013 zu demonstrieren, das in Apache HTTP Server 2.4.50 vorhanden ist. Dies...

CVE-2025-50154

Toolkit di Hardening e Caccia alle Minacce NTLM/SMB Autore: w01f Versione: 1.0 Scopo: Eseguire audit, hardening e caccia per l'uso insicuro di NTLM/SMB al fine di mitigare rischi come CVE-2025-50154. Panoramica di CVE-2025-50154 Gravità: Alta Tipo: Perdita di credenziali NTLM + Bypass della patch...