CVE-2024-24919

CVE-2024-24919 漏洞利用工具 概述 本仓库包含 CVE-2024-24919 的概念验证（PoC）漏洞利用代码，这是 Check Point SVN 中发现的一个严重漏洞。该漏洞允许读取系统文件。 CVE ID : CVE-2024-24919 严重性 : 严重 目录 漏洞详情 利用工具详情 使用方法 1. 克隆仓库： git clone https://github.com/un9nplayer/CVE-2024-24919.git cd CVE-2024-24919 2. 目标/IP 必须存在于 domain-IP.txt 中 echo "目标/IP"...

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN pre-auth 文件读取 参考 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

CKAN DataStore SQL Search - SQL Injection

CKAN, an open-source data management system used for powering open data portals, contains an unauthenticated SQL injection vulnerability in the datastoresearchsql API endpoint. id: CVE-2026-42031 info: name: CKAN DataStore SQL Search - SQL Injection author: theamanrawat severity: high description...

White Star Software ProTop - Directory Traversal

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. id: CVE-2025-44177 info: name:...

Nextjs <2.4.1 - Local File Inclusion

ZEIT Next.js before 2.4.1 is susceptible to local file inclusion via the /next and /static request namespace, allowing attackers to obtain sensitive information. id: CVE-2017-16877 info: name: Nextjs 2.4.1 - Local File Inclusion author: pikpikcu severity: high description: ZEIT Next.js before 2.4...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

RawCopy

介绍 这是一个控制台应用程序，通过低级磁盘读取方法从 NTFS 卷复制文件。 语法 RawCopy /ImageFile:FullPath\ImageFilename /ImageVolume:1,2...n /FileNamePath:FullPath\Filename /OutputPath:FullPath /AllAttr:0|1 /RawDirMode:0|1|2 /WriteFSInfo:0|1 /TcpSend:0|1 参数说明 /ImageFile: 要从中提取的镜像文件的完整路径和文件名。如果使用了此参数，则必须设置 /ImageVolume:。可选。...

MifareClassicTool

MIFARE Classic Tool MCT Una aplicación NFC para Android para leer, escribir, analizar, etc. etiquetas RFID MIFARE Classic. Lee esta información en otros idiomas: English 简体中文 正體中文 Enlaces útiles: MIFARE Classic Tool versión donación en Google Play Capturas de pantalla Ayuda e información/manual d...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

CISCO-CVE-2020-3452-Scanner-Exploiter

CISCO CVE-2020-3452 扫描器与利用工具 它将从Shodan扫描目标服务器，然后找出存在CVE-2020-3452漏洞的服务器（Cisco自适应安全设备和FTD未授权远程文件读取）。 关于 Cisco自适应安全设备（ASA）软件和Cisco Firepower威胁防御（FTD）软件的Web服务接口存在一个漏洞，可能允许未经身份验证的远程攻击者进行目录遍历攻击并读取目标系统上的敏感文件。...

ChameleonMini

ChameleonMini Este NO es el repositorio oficial de ChameleonMini, una herramienta portátil libremente programable para el análisis de seguridad NFC que puede emular y clonar tarjetas sin contacto, leer etiquetas RFID y capturar/registrar datos RF. Este repositorio añade soporte para el Chameleon...

cve-2014-0160-Yunfeng-Jiang

cve-2014-0160-Yunfeng-Jiang 1. 阅读课程报告 ReadingCourseReport.pdf 2. 检测工具 1. heartbleed.py https://gist.github.com/eelsivart/10174134 用法: python heartbleed.py hostname 2. ssltest.py https://github.com/Lekensteyn/pacemaker/blob/master/ssltest.py 用法: python ssltest.py hostname 3. check-ssl-heartbleed.p...

adminer_CVE-2021-43008

CVE-2021-43008 — Adminer 漏洞 通过恶意 MySQL 服务器进行任意文件读取 1. 什么是 Adminer？ Adminer 是一个网页工具（PHP），用于轻松管理 MySQL、PostgreSQL、SQLite 或 SQL Server 数据库。 它通常作为 phpMyAdmin 的轻量级替代方案部署。 受影响版本：Adminer ≤ 4.6.2 2. 漏洞的本质是什么？ 2.1. 访问控制缺陷 Adminer 允许连接到任何远程 MySQL 服务器 。 然而，在连接到 MySQL 服务器时，客户端（此处为 Adminer）会接受： 服务器发送的一组初始指令，...

CVE-2026-82045 UTMStack < 11.2.16 JPQL Injection via searchPropertyValues

UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated attackers to read arbitrary entity data by exploiting UtmNetworkScanService.searchPropertyValues, which builds a JPQL query with String.format and executes it via em.createQuery without parameter binding...

CVE-2026-104456 YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username

YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateRequestWithACL, where a stored username is concatenated unescaped into a read-ACL LIKE clause. Attackers can self-register an account name containing a double-quote payload, then load non-admin...

Jellyfin <10.7.0 - Local File Inclusion

Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...

PT-2026-104077

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parse request function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can...

checker-cve2020-3452

Comprobador CVE-2020-3452 Este script de Python comprueba si el servidor objetivo es vulnerable a CVE-2020-3452. Cisco Adaptive Security Appliance y FTD: lectura remota no autorizada de archivos Una vulnerabilidad en la interfaz de servicios web del software Cisco Adaptive Security Appliance ASA ...