CVE-2021-21972

Uso:CVE-2021-21972.py option -u or --url: url di destinazione -t or --type: tipo di Payload ssh/webshell -f or --file: il file da caricare webshell o authorizedkeys Esempio: CVE-2021-21972.py -u https://127.0.0.1 -t webshell -f shell.jsp -p or --proxy: impostazione del proxy Esempio:...

malicious-devfile-registry

Bösartiges Devfile Registry Das Projekt enthält ein bösartiges Devfile Registry, das zur Ausnutzung von CVE-2024-0402 in Gitlab verwendet werden kann. Der Exploit Ein nodejs:2.2.1 Stack wird indiziert, um die Datei archive.tar verfügbar zu machen, die das Path-Traversal-Problem in der...

CVE-2022-40684

CVE-2022-40684 POC per CVE-2022-40684 che interessa i dispositivi Fortinet FortiOS, FortiProxy e FortiSwitchManager. Analisi Tecnica Un'analisi tecnica approfondita della causa principale della vulnerabilità è disponibile sul nostro blog:...

CVE-2024-415770-ssrf-rce

CVE-2024-415770-SSRF-RCE Beschreibung Dieses Skript interagiert mit dem Teamserver. Aktualisieren Sie das Skript mit Ihrer Teamserver-URL. Es führt mehrere Schritte durch, um einen Agenten zu registrieren, einen Socket zu öffnen und einen SSH-Schlüssel in die authorizedkeys-Datei des Ziels...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Getestet gegen VMware VCSA 6.7 SSH-Schlüsselpaar erstellen root@kitploit: ssh-keygen -t rsa -f vcsa.key -N '' Tarball mit ../../../../../home/vsphere-ui/.ssh/authorizedkeys erstellen root@kitploit: python2 evilarc.py -d 5 -p 'home/vsphere-ui/.ssh' -o unix -f evil.tar...

CVE-2022-40684

CVE-2022-40684 Pontuação CVSS: 9.6 POC para a CVE-2022-40684 que afeta os dispositivos Fortinet FortiOS, FortiProxy e FortiSwitchManager. Produtos Vulneráveis Versões do FortiOS entre 7.0.0 – 7.0.6 e 7.2.0 – 7.2.1 Versões do FortiProxy entre 7.0.0 – 7.0.6 e a versão 7.2.0 Versões do...

CVE-2026-20182

CVE-2026-20182 — Cisco Catalyst SD-WAN Controller / Manager Bypass di Autenticazione Un proof-of-concept di exploit per CVE-2026-20182 , un bypass critico CVSS 10.0 dell'autenticazione nel servizio vdaemon DTLS UDP/12346 su Cisco Catalyst SD-WAN Controller vSmart e Manager vManage. Divulgato: 14...

vSphereyeeter

vsphereyeeter.sh é um script bash automatizado para explorar a vulnerabilidade CVE-2021-21972 no vSphere Client para servidores vCenter. Uma vez executado, basta fornecer o endereço IP do seu alvo vulnerável e você receberá um shell SSH. "O vSphere Client HTML5 contém uma vulnerabilidade de...

CVE-2022-40684

CVE-2022-40684 POC per CVE-2022-40684 che colpisce i dispositivi Fortinet FortiOS, FortiProxy e FortiSwitchManager. Analisi tecnica Un'analisi tecnica della causa principale della vulnerabilità è disponibile sul nostro blog:...

CVE-2022-40684-POC

CVE-2022-40684-POC FortiProxy / FortiOS bypass dell'autenticazione Sfruttamento di massa /api/v2/cmdb/system/admin/ "ssh-public-key1": "" root@kitploit: ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H...

CVE-2022-40684

CVE-2022-40684 von 1vere$k Derzeit ist es eine POC-Kopie für CVE-2022-40684, die Fortinet FortiOS-, FortiProxy- und FortiSwitchManager-Geräte betrifft. Kopiert von https://github.com/horizon3ai/CVE-2022-40684 Analyse Der Exploit verwendet das einfache Payload: root@kitploit: PUT...

kube-alien

Kube-alien Questo strumento lancia un attacco su un cluster k8s dall'interno. Ciò significa che è già necessario avere un accesso con il permesso di distribuire pod in un cluster per eseguirlo. Dopo aver eseguito il pod kube-alien, tenta di prendere il controllo dei nodi del cluster aggiungendo l...

Malicious code in fast-glob-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7695ac02a2492bbf3118fc68514378edb201a93183f2dcb0035727781f31d408 fast-glob-fast is a name-squat of the popular fast-glob package its repository field even points at mrmlnc/fast-glob. The declared postinstall hook...

EUVD-2026-58549

luci-app-openvpn fails to properly validate the instancename2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SS...

CVE-2026-73664

FreePBX is an open source IP PBX. From 17.0.5.34 until 17.0.11, the publicKeySave AJAX endpoint in Backup.class.php accepts an authenticated administrator's SSH public key and appends it to /home/asterisk/.ssh/authorizedkeys for the asterisk system user without reliably enforcing backup-only...

CVE-2026-72841

luci-app-openvpn fails to properly validate the instancename2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SS...

CVE-2026-72841

The CVE-2026-72841 entry affects the OpenWrt luci-app-openvpn component. An insecure validation of the instance_name2 parameter during file upload lets authenticated users perform path traversal and write arbitrary files outside the intended directory. Attackers could place SSH keys in system dir...

CVE-2026-73664 FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module

FreePBX is an open source IP PBX. From 17.0.5.34 until 17.0.11, the publicKeySave AJAX endpoint in Backup.class.php accepts an authenticated administrator's SSH public key and appends it to /home/asterisk/.ssh/authorizedkeys for the asterisk system user without reliably enforcing backup-only...

CVE-2026-73664

The CVE-2026-73664 issue affects FreePBX (Open Source IP PBX) and concerns the publicKeySave AJAX endpoint in Backup.class.php, vulnerable from 17.0.5.34 through 17.0.11. It accepts an authenticated administrator’s SSH public key and appends it to /home/asterisk/.ssh/authorized_keys for the aster...

PT-2026-71904

Name of the Vulnerable Software and Affected Versions luci-app-openvpn affected versions not specified Description Authenticated users can perform path traversal and write arbitrary files outside the intended directory because the software fails to properly validate the instance name2 parameter...