shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

CVE-2023-22518

CVE-2023-22518 CVE-2023-22518 부적절한 권한 부여 취약점에 취약한 Confluence 서버를 공격하기 위한 익스플로잇 도구 설치: root@kitploit: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py 사용법: root@kitploit: python3 exploit.py -h usage: exploit.py -h -d DOMAIN -dL DOMAINSLIST -o OUTPUT -to...

CVE-2024-6387

CVE-2024-6387 아래의 한 줄 bash 스크립트로 서버에 CVE-2024-6387이 존재하는지 확인하세요: root@kitploit: curl -fsSL https://dub.sh/cve-2024-6387-CN |bash...

CVE-2024-3094-One-Liner

CVE-2024-3094 单行漏洞检查器 此仓库提供简单而强大的单行脚本，旨在帮助您快速判断服务器是否容易受到 CVE-2024-3094 的攻击，这是在 xz 工具的某些版本中发现的一个关键安全漏洞。此外，我们还提供了一种便捷的方法来扫描您的代码仓库中是否有对 xz 库的引用，这可能表明存在潜在的间接漏洞。 检查服务器漏洞 要确定您的服务器是否容易受到 CVE-2024-3094 的攻击，请在终端执行以下命令： root@kitploit: type dpkg &/dev/null && dpkg -l xz 2/dev/null | awk '/^ii/print $3' | gr...

XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)

XWiki = 17.3.0 contains a server-side template injection caused by improper validation of Apache Velocity template code in the Administration interface HTTP Meta Info field, letting authenticated administrators execute arbitrary template logic. id: CVE-2025-51991 info: name: XWiki = 17.3.0 -...

CVE-2019-1006

CVE-2019-1006 사용법: 터미널에서 "python CVE-2019-1006.py "url""을 입력하세요. 여기서 url은 테스트할 RDG 게이트웨이 서버의 URL입니다. 예시: python CVE-2019-1006.py "https://www.aaa.com/"...

CVE-2024-21182

Oracle WebLogic Server JNDI 脆弱性 教育目的のみ...

Angular-Base64-Upload - Remote Code Execution

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

Explora-o-RCE-n-o-autenticado-JetBrains-TeamCity-CVE-2024-27198-

JetBrains TeamCity CVE-2024-27198 인증되지 않은 RCE 익스플로잇 2024년 2월, JetBrains TeamCity 서버에 영향을 미치는 두 가지 새로운 취약점이 확인되었습니다 CVE-2024-27198 및 CVE-2024-27199...

CVE-2017-12542

CVE-2017-12542 이 스크립트는 HP iLO 서버가 취약한지 확인하고 관리자 사용자를 추가할 수 있습니다...

Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload

Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. id: CVE-2018-9206 info: name: Blueimp jQuery-File-Upload v9.22.0 -...

Detect-CVE-2019-19781

탐지-CVE-2019-19781 자신의 서버에서 $IP 변수를 설정하여 취약한지 감지합니다...

Astra Linux – Vulnerability in libsoup2.4

A use-after-free vulnerability was discovered in libsoup, within the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server...

Astra Linux – Vulnerability in Apache2

Inconsistent interpretation of HTTP requests: The “HTTP Request Smuggling” vulnerability in modproxyajp of the Apache HTTP Server allows an attacker to secretly send requests to the AJP server to which the server forwards requests. This issue affects the Apache HTTP Server version 2.4.53 and...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. The supported versions affected are 5.7.33 and earlier, as well as 8.0.23 and earlier. This easily exploitable vulnerability allows a highly privileged attacker with network access via multiple protocols to compromi...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides an empty password value. This issue affects FreeRDP-based RDP Server implementations. RDP clients are not affected. The...

Astra Linux – Vulnerability in etcd

A cross-site request forgery flaw was discovered in etcd 3.3.1 and earlier. An attacker can create a website that attempts to send a POST request to the etcd server and modify a key. Adding a key is done using a PUT operation, so it seems theoretically safe but PUT operations cannot be performed...

CVE-2026-18697

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:26+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18704

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an...