GraphQLmap

GraphQLmap GraphQLmap 是一个脚本引擎，用于与 graphql 端点进行交互，以进行渗透测试。 安装 功能与示例 转储 GraphQL 模式 与 GraphQL 端点交互 执行 GraphQL 查询 自动补全查询 GraphQL 字段模糊测试 示例 1 - 爆破单个字符 示例 2 - 遍历数字 GraphQL 字段中的 NoSQL 注入 GraphQL 字段中的 SQL 注入 我 ❤️ 拉取请求，欢迎改进此脚本 : 你也可以通过 🍻 线下或使用 GitHub Sponsoring 按钮贡献。 安装 root@kitploit: $ git clone...

nmap-nse-vulnerability-scripts

Scripts de escaneo de vulnerabilidades de NMAP Una colección de scripts de escaneo de vulnerabilidades de nmap para ayudar a la detección y remediación asequibles. Antecedentes Estos scripts utilizan el Nmap Scripting Engine NSE para implementar comprobaciones de diversas vulnerabilidades...

RustScan

➡️ Discord | Guía de instalación | Guía de uso ⬅️ Rápido, inteligente, efectivo. 🤔 ¿Qué es esto? El escáner de puertos moderno. Encuentra puertos rápidamente 3 segundos en su máxima velocidad. Ejecuta scripts a través de nuestro motor de scripting compatible con Python, Lua, Shell. 🛠️ Instalación...

CVE-2024-43044-jenkins

简介 这是一个针对 CVE-2024-43044 的利用工具，该漏洞允许代理从控制器读取任意文件。 该利用工具将利用该漏洞读取文件，伪造一个管理员账户的“记住我”Cookie，从而获取对 Jenkins 脚本引擎的访问权限。 查看完整的分析文章：https://blog.convisoappsec.com/en/analysis-of-cve-2024-43044/ 构建利用工具 root@kitploit: mvn package 运行利用工具 root@kitploit: 利用工具用法： java -jar exploit.jar modesecret java -jar...

CVE-2019-1367

0x00 Antecedentes Internet Explorer es un navegador web desarrollado por Microsoft Corporation. Cuenta con una enorme base de usuarios. El 23 de septiembre, Microsoft lanzó una actualización de seguridad de emergencia para corregir una vulnerabilidad de ejecución remota de código que afecta al...

CVE-2020-5902-NSE

Este repositorio no tiene un README...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

nmap-nse-scripts

Repositorio para el desarrollo de NSE Nmap Scripting Engine. Encontrarás mis scripts incluyendo los no oficiales, librerías, recursos y otro material relacionado de mis talleres. TODO Finalizando la librería NSE de SMB2 Actualmente trabajando en la funcionalidad de modificación de contraseñas...

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” 全球最快内存存储中的严重远程代码执行漏洞 Redis Lua 脚本执行区域现已成为认证后的完美着陆点。 经过认证的攻击者 → 精心构造的 Lua 脚本 → 逃逸沙箱 → 在宿主机上实现完全 RCE ⚠️ 概述 CVE-2025-49844 （“RediShell ”）是 Redis 嵌入式 Lua 脚本引擎中一个严重的释放后使用（UAF）内存破坏漏洞 。 一个经过认证的 用户通过 EVAL/EVALSHA 提交一个精心构造的 Lua 脚本，该脚本操纵垃圾收集器，在解析/执行过程中触发 UAF，逃逸 Lua...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 Un exploit Bash simplificado para CVE-2023-27350. Este script automatiza el bypass de autenticación, la preparación del entorno y la inyección de comandos a través del motor de scripts de impresora de PaperCut. Prueba visual RCE básico: Activando una reverse shel...

CVE-2018-8353-POC

CVE-2018-8353 POC PoC simple de CVE-2018-8353 Microsoft Scripting Engine Use After Free fuente : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...

Linux Distros Unpatched Vulnerability : CVE-2026-18708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed withi...

Redis < 6.2.20 / 7.0.x < 7.2.11 / 7.4.x < 7.4.6 / 8.0.x < 8.0.4 / 8.2.x < 8.2.2 RCE (RediShell)

The version of Redis installed on the remote host is prior to 6.2.20, 7.0.x prior to 7.2.11, 7.4.x prior to 7.4.6, 8.0.x prior to 8.0.4, or 8.2.x prior to 8.2.2. It is, therefore, affected by a vulnerability as referenced in the security advisory. - A use-after-free vulnerability in the Lua...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 147.0.7727.55 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

EUVD-2026-62937

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

CVE-2026-76372

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

CVE-2026-72712

A flaw was found in Nmap. A remote attacker can exploit this denial of service vulnerability by sending a specially crafted packet that includes a zero-length Transmission Control Protocol TCP option. This malformed packet forces the application to enter an infinite loop during packet processing,...

CVE-2026-65813

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:06+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 01:01:02+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 12:49:33+00:00| seen|...

Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes

An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed within the query scope of other users, through a specially crafted stored value processed during an internal maintenance cycle. This could...

CVE-2026-18708

The CVE-2026-18708 issue affects MongoDB Server’s JavaScript scripting engine. An authenticated user with write privileges can cause code they control to run within the query scope of other users via a specially crafted stored value processed during an internal maintenance cycle. This can lead to...