CVE-2023-22518

CVE-2023-22518 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization Vulnerability Installation: root@kitploit: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py Usage: root@kitploit: python3...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)

XWiki = 17.3.0 contains a server-side template injection caused by improper validation of Apache Velocity template code in the Administration interface HTTP Meta Info field, letting authenticated administrators execute arbitrary template logic. id: CVE-2025-51991 info: name: XWiki = 17.3.0 -...

Angular-Base64-Upload - Remote Code Execution

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...

CVE-2024-3094-One-Liner

Verificador de Vulnerabilidade CVE-2024-3094 em Uma Linha Este repositório fornece scripts simples, porém poderosos, em uma única linha, projetados para ajudar a determinar rapidamente se o seu servidor é vulnerável ao CVE-2024-3094, uma vulnerabilidade de segurança crítica encontrada em certas...

CVE-2024-6387

CVE-2024-6387 Überprüfen Sie, ob Ihr Server von CVE-2024-6387 betroffen ist, mit dem folgenden einzeiligen Bash-Skript: root@kitploit: curl -fsSL https://dub.sh/cve-2024-6387-CN |bash...

CVE-2019-1006

CVE-2019-1006 用法： 在终端中输入 "python CVE-2019-1006.py "url""，其中 url 是要测试的 RDG Gateway 服务器的 URL。 示例： python CVE-2019-1006.py "https://www.aaa.com/"...

CVE-2024-21182

Уязвимость JNDI в Oracle WebLogic Server Только в образовательных целях...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

Detect-CVE-2019-19781

Detect-CVE-2019-19781 Imposta la variabile $IP sul tuo server per rilevare se è vulnerabile...

Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload

Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. id: CVE-2018-9206 info: name: Blueimp jQuery-File-Upload v9.22.0 -...

CVE-2017-12542

CVE-2017-12542 Dieses Skript prüft, ob ein HP-iLO-Server anfällig ist, und kann einen Admin-Benutzer hinzufügen...

Explora-o-RCE-n-o-autenticado-JetBrains-TeamCity-CVE-2024-27198-

Nicht-authentifizierte-RCE-Ausnutzung-JetBrains-TeamCity-CVE-2024-27198- Im Februar 2024 wurden zwei neue Schwachstellen identifiziert, die den JetBrains TeamCity Server betreffen CVE-2024-27198 und CVE-2024-27199...

CVE-2026-18697

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:26+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-65658

CVE-2026-65658 involves a deserialization vulnerability in Microsoft Office SharePoint that can allow an authorized attacker to execute arbitrary code over the network. The published description identifies deserialization of untrusted data as the root cause, with the CVSS 3.1 base score of 8.8 (H...

CVE-2026-63516

Deserialization of untrusted data in Microsoft Office SharePoint is the root cause of CVE-2026-63516, leading to spoofing over a network by an authorized attacker. Affected component: SharePoint Server (Microsoft Office SharePoint). CVE notes that exploitation is possible through network access w...

EUVD-2026-54953

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component addattachmentfrompublicurl. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a local approach. The proje...

CVE-2026-9030 Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6

A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely manage concurrent systool operations. By sending crafted systool instructions through the asynchronous request path,...

CVE-2026-59679

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...