CVE-2022-36804

CVE-2022-36804 - Schwachstelle für Befehlsinjektion in Atlassian Bitbucket Server und Data Center ⚠️ Nur für Bildungs- und autorisierte Sicherheitsforschungszwecke Originale Exploit-Autoren Vielen Dank an den ursprünglichen PoC-Autor Walnut Security Services Pvt. Ltd Beschreibung Mehrere...

CloudPrivs

CloudPrivs Ich habe Creds, was nun? Überblick CloudPrivs ist ein Tool, das die vorhandene Leistungsfähigkeit von SDKs wie Boto3 nutzt, um Berechtigungen aller Cloud-Dienste durchzuprobieren und herauszufinden, welche Berechtigungen für einen bestimmten Satz von Anmeldeinformationen bestehen. Dies...

cargo-perm

描述 在 cargo 版本 1.7.0 中发现了一个新漏洞，详情请见此处。 逐步操作 首先，你需要确认你的 cargo 版本是否存在此漏洞。 cargo --version 假设我有一个 cargo 项目，其 src/main.rs 文件如下： root@kitploit: use numbigint::BigInt; use std::str::FromStr; // 无聊的猜数字游戏 fn main let secretnumber = BigInt::fromstr"123456789"; loop println!"猜一个数字："; let mut guess =...

CVE-2024-23700

PoC para CVE-2024-23700, permitindo obter silenciosamente permissões para ler/escrever contatos, SMS, calendário, registro de chamadas e correio de voz, fazer chamadas de saída ou atender chamadas recebidas, manipular configurações de chamada, acessar e controlar notificações enviadas por outros...

CVE-2026-75339

cjbi admin3 v3.0.0 suffers from missing permission checks on the /storage/upload storage endpoint. Any logged-in user can upload arbitrary files, while any anonymous attacker can download them, enabling unauthorized file access and potential data exposure. The CVSS v3.1 score is 8.8 (High) (AV:N/...

CVE-2026-75339

The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...

gtfobins-cli

🚀 GTFOBins CLI Panoramica GTFOBins CLI è un'interfaccia a riga di comando per GTFOBins, che fornisce accesso immediato alle tecniche di sfruttamento dei binari Unix. Questo strumento aiuta i professionisti della sicurezza e gli amministratori di sistema a identificare e comprendere come i binari...

CVE-2023-33246

CVE-2023-33246 - RocketMQ 远程代码执行 CVE-2023-33246 - Apache RocketMQ 配置远程代码执行漏洞 概述 RocketMQ 是一个分布式消息流平台。 RocketMQ 5.1.0 及以下版本存在任意代码注入漏洞。RocketMQ 的 Broker 组件暴露在外部网络，且缺乏权限验证。攻击者可以利用此漏洞，通过更新配置功能以运行 RocketMQ 的系统用户身份执行命令。此外，攻击者还可以通过伪造 RocketMQ 协议内容达到同样效果。 检测 RocketMQ 版本以识别漏洞 root@kitploit: usage: check.p...

CVE-2025-29927

CVE-2025-29927 Next.Js Umgehung von Berechtigungen CVE-2025-29927 Weitere PoCs unter https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X path Standard /, Multithreading Standard 10 Batch-Scan: python poc.py -f url.txt -p /path -t 10 Einzelner Scan: python poc.py -u your-ip -p /path -t 10...

CVE-2026-77507

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, Weblate's object-scoped RSS feeds do not apply the permission checks used elsewhere, allowing unauthorized users to read change-history metadata from private projects and...

Tomcat-CVE-2017-12615

ثغرة الكتابة التعسفية للملفات في Tomcat من خلال طريقة PUT CVE-2017-12615 中文版本Chinese version إصدار Tomcat: 8.5.19 إعداد البيئة root@kitploit: docker-compose build docker-compose up -d بعد تشغيل الأوامر أعلاه بنجاح، سترى صفحة المثال الخاصة بـ Tomcat عند زيارة الموقع http://your-ip:8080. الأساس...

CVE-2024-34223

Human Resource Management System Project in PHP and MySQL Free Source Code Einreicher: Kha Do Schwachstelle Unsichere Berechtigung Beschreibung Die Schwachstelle „Unsichere Berechtigung" in /hrm/leaverequest.php im SourceCodester Human Resource Management System 1.0 ermöglicht es Angreifern,...

CVE-2023-36664-Ghostscript-command-injection

PoC della vulnerabilità di command injection in Ghostscript CVE-2023-36664 La vulnerabilità divulgata in Ghostscript precedente alla versione 10.01.2 consente l'esecuzione di codice punteggio CVSS 9.8. Ufficiale descrizione della vulnerabilità: Artifex Ghostscript fino alla 10.01.2 gestisce in mo...

CVE-2023-27035

CVE-2023-27035 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Tipo di vulnerabilità: Controllo di accesso non corretto Descrizione: Un problema scoperto in Obsidian Canvas 1.1.9 consente a utenti malintenzionati remoti di inviare notifiche desktop, registrare l'audio dell'utente e altri impatti non...

CVE-2026-77507

Weblate , a web-based continuous localization platform, is affected by an information disclosure vulnerability in its object-scoped RSS feeds prior to version 2026.8 . The root cause is that these feeds fail to enforce the permission checks applied elsewhere, allowing unauthorized users to read c...

CVE-2026-77507 Weblate: Object-scoped RSS feeds disclose private change history to unauthorized users

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, Weblate's object-scoped RSS feeds do not apply the permission checks used elsewhere, allowing unauthorized users to read change-history metadata from private projects and...

smbeagle

root@kitploit: / \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle SMBeagle è uno strumento di audit delle condivisioni file SMB multipiattaforma che scova tutti i file che riesce a vedere...

CVE-2024-34221

मानव संसाधन प्रबंधन प्रणाली परियोजना PHP और MySQL में निःशुल्क स्रोत कोड प्रस्तुतकर्ता: Kha Do भेद्यता असुरक्षित अनुमति विवरण SourceCodester मानव संसाधन प्रबंधन प्रणाली 1.0 में /hrm/controller/ccity.php?positionedit= में एक असुरक्षित अनुमति भेद्यता है, जो हमलावरों को उन फ़ंक्शनों तक पहुँचने की...

iam-vulnerable

IAM Vulnerable Usa Terraform per creare il tuo playground AWS IAM di escalation dei privilegi vulnerabile di proposito. IAM Vulnerable utilizza il binario Terraform e le tue credenziali AWS per distribuire oltre 250 risorse IAM nel tuo account AWS selezionato. In pochi minuti, puoi iniziare a...

PurplePanda

PurplePanda Dieses Tool ruft Ressourcen aus verschiedenen Cloud-/SaaS-Anwendungen ab, wobei der Fokus auf Berechtigungen liegt, um Privilege-Escalation-Pfade und gefährliche Berechtigungen in den Cloud-/SaaS-Konfigurationen zu identifizieren. Beachten Sie, dass PurplePanda sowohl...