grafanaExp

grafanaExp 利用grafana CVE-2021-43798任意文件读漏洞，自动探测是否有漏洞、存在的plugin、提取密钥、解密server端db文件，并输出datasourrce信息。 使用方法 提供exp和decode功能。 root@kitploit: ➜ ./grafanaExp -h NAME: grafanaExp - Exploit Grafana with CVE-2021-43798 Arbitrary File Read. USAGE: grafanaExp global options command command options arguments...

CVE-2026-21994

CVE-2026-21994 Summary Oracle OKIT oci-designer-toolkit version 0.3.0 contains two critical misconfigurations that chain into an unauthenticated full takeover. A hardcoded Flask SECRETKEY exposed in the public repository allows any attacker to forge a valid admin session cookie — no credentials...

Photon

Photon Increíblemente rápido rastreador diseñado para OSINT. Wiki de Photon • Cómo Usar • Compatibilidad • Librería de Photon • Contribución • Hoja de Ruta Características Clave Extracción de Datos Photon puede extraer los siguientes datos mientras rastrea: URLs dentro del alcance y fuera del...

Apisix_Crack

ApisixCrack 概述 Apisix系列漏洞探测利用工具，包括未授权访问漏洞（CVE-2021-45232）和默认秘钥漏洞（CVE-2020-13945），支持批量探测利用。 使用方法 批量探测：文件中逐行写入需要检测的URL，参数-TF 指定文件 -t 并发数量 单个目标探测：-T http://x.x.x.x 执行效果 玉兔安全致力于web安全、红蓝对抗、内网渗透、免杀技巧、安全工具系列干货分享。更多安全工具分享，欢迎关注玉兔安全公众号！...

CVE-2021-40903

Exploit Title: Antminer Monitor 0.5.0 - 身份验证绕过 CVE: CVE-2021-40903 日期: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 漏洞作者: CQR.company / Vulnz. 厂商主页: https://github.com/anselal/antminer-monitor, https://twitter.com/intent/follow?screenname=AntminerMonitor 软件链接:...

Langflow < 1.7.0 - Path Traversal

Langflow 1.7.1 contains a path traversal caused by insufficient filtering of foldername and filename parameters in downloadprofilepicture endpoint, letting attackers read secretkey across directories, exploit requires crafted request. id: CVE-2026-33497 info: name: Langflow 1.7.0 - Path Traversal...

rack-bug

Rack::Bug Code Climate Repositorio: http://github.com/brynary/rack-bug Descripción Rack::Bug añade una barra de herramientas de diagnóstico a las aplicaciones Rack. Cuando está habilitada, inyecta un div flotante que permite explorar el registro, las consultas a la base de datos, los tiempos de...

FallingSkies-CVE-2023-35885

CVE-2023-35885 Exploit 0-day de Cloudpanel Autor: @EagleTube, @Mzulfahmy, @farphalabs Github : https://github.com/datackmy/FallingSkies-CVE-2023-35885/blob/main/ Versión afectada: v2.0.0 – v2.3.0 Versión parcheada: v2.3.1 Página del proveedor: CloudPanel.io Producto: CloudPanel Referencias:...

gitlab-cve-2020-10977

GitLab CVE2020-10977 Introdução Este script fornece execução remota de código contra GitLab Community Edition CE e Enterprise Edition EE. O CVE é uma leitura arbitrária de arquivos que permite extrair o secretkeybase do Rails baixando o arquivo secrets.yaml do GitLab. Isso, por sua vez, permite...

CVE-2026-53519-PoC

CVE-2026-53519 — Path Traversal y falsificación de JWT en Nezha Dashboard English | 繁體中文 | 简体中文 Este repositorio contiene un exploit de Prueba de Concepto PoC para una vulnerabilidad en el Nezha Dashboard que permite path traversal sin autenticación , lo que conduce a la divulgación de archivos...

redash-reset

redash-reset これはデフォルトの REDASHSECRETKEY キー c292a0a3aa32397cdb050e233733900f を使用します。これにより、ユーザーIDのパスワードをリセットできますが、それに関連付けられたメールアドレスを知っている必要があります。 情報 https://github.com/getredash/redash/security/advisories/GHSA-g8xr-f424-h2rv セットアップ root@kitploit: pip install -r requirements.txt 使い方 root@kitploit:...

CVE-2025-10294

Exploit: Bypass de Autenticação via ownidsharedsecret Vazio Falsificação de JWT 1 Forje um JWT válido usando uma chave HMAC vazia root@kitploit: SUB= SUB="$SUB" python3 - /tmp/jwt.txt import base64, hmac, hashlib, json, time, os b64u = lambda b: base64.urlsafeb64encodeb.rstripb'='.decode header =...

CVE-2022-23529-Exploration

CVE-2022-23529 Le versioni della libreria JSON Web Token JWT precedenti alla 3.4.6, alla 4.0.4 e alla 4.1.5 sono vulnerabili a RCE. Le funzioni di hashing HMAC accettano qualsiasi stringa come input, il che porta a RCE. A causa delle precondizioni, è improbabile che questa vulnerabilità sia...

SubDomainizer

Offrimi un Caffè SubDomainizer SubDomainizer è uno strumento progettato per trovare sottodomini nascosti e segreti presenti sia in pagine web, che in Github, che in javascript esterni presenti nell'URL dato. Questo strumento trova anche bucket S3, URL di CloudFront e altro da quei file JS che...

cookiemonster

🍪 CookieMonster CookieMonster è uno strumento da riga di comando e un'API per decodificare e modificare cookie di sessione vulnerabili provenienti da diversi framework. È progettato per essere eseguito in pipeline di automazione che devono essere in grado di elaborare efficientemente un gran nume...

CVE-2026-19197

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

CVE-2026-19197 Broken access control in dashboard snapshots

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

CVE-2024-3408-dtale

CVE-2024-3408 - Bypass dell'autenticazione e RCE in D-Tale Ambiente di laboratorio riproducibile per CVE-2024-3408, una vulnerabilità di bypass dell'autenticazione ed esecuzione remota di codice in D-Tale. Vulnerabilità Le versioni di D-Tale fino alla 3.15.1 sono vulnerabili a causa di: 1...

D-Tale 3.10.0 - 3.15.1 - Authentication Bypass & Remote Code Execution

man-group/dtale 3.10.0 contains an authentication bypass and remote code execution caused by improper input validation and a hardcoded SECRETKEY in Flask configuration, letting attackers forge session cookies and execute arbitrary code, exploit requires attacker to access the application. id:...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...