165 matches found
CVE-2022-45047
CVE-2022-45047 POC,EXP,chatGPT为我生成 代码 root@kitploit: import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding": "gzip...
Cisco-IOS-XE-CVE-2023-20198
Cisco-IOS-XE-CVE-2023-20198 CVE-2023-20198 のエクスプロイト PoC 脆弱性情報とエクスプロイトの使用方法は smokeintheshell から提供されています 参考文献を参照 エンドポイント、http コンテンツタイプ、ヘッダー管理は、他の既存の PoC から変更され、他のエクスプロイトが失敗する状況でも動作するようになっています。 Description CVE-2023-20198 は、Nginx フィルタリングをバイパスして認証なしで webuiwsmahttp Web エンドポイントに到達するための不適切なパス検証が特徴です。...
CVE-2025-49493
Akamai CloudTest XXE 漏洞利用 CVE-2025-49493 概述 这是一个基于 Python 的漏洞利用程序，针对 CVE-2025-49493 ，该漏洞影响 60 2025.06.02 12988 之前的 Akamai CloudTest 版本。该漏洞允许通过 SOAP 服务端点进行 XML 外部实体 XXE 注入。 漏洞详情 CVE ID ：CVE-2025-49493 漏洞类型 ：XML 外部实体 XXE 注入 严重程度 ：严重 CVSS 9.1 受影响软件 ：Akamai CloudTest 受影响版本 ：60 2025.06.02 12988 之前 攻击向...
EUVD-2026-61618
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Report...
CVE-2026-9152
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session tokens, or any form of identity verification. An unauthenticated network attacker who can reference a target workspace's...
CVE-2026-9152
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session tokens, or any form of identity verification. An unauthenticated network attacker who can reference a target workspace's...
CVE-2026-9152
The CVE-2026-9152 entry concerns Altium 365 SearchService with an unauthenticated legacy SOAP endpoint that exposes search index operations. The root cause is lack of authentication/identity verification, enabling an unauthenticated attacker who knows a workspace identifier to access and manipula...
CVE-2026-39907
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB connections and leak NTLMv2...
CVE-2026-39907 Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB connections and leak NTLMv2...
CVE-2026-39907
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP 1208. The ReadLicense action’s LFName accepts unsanitized file paths, enabling crafted SOAP requests with UNC paths to trigger outbound SMB connections and leak NTLMv2 machi...
EUVD-2021-18884
Malware in sbrugna...
EUVD-2017-6753
Malware in sbrugna...
EUVD-2023-45706
Malicious code in bioql PyPI...
EUVD-2023-48743
Malicious code in bioql PyPI...
EUVD-2023-48746
Malicious code in bioql PyPI...
EUVD-2023-45708
Malicious code in bioql PyPI...
EUVD-2023-45717
Malicious code in bioql PyPI...
EUVD-2023-45720
Malicious code in bioql PyPI...