CVE-2024-9466

CVE-2024-9466 Prueba de Concepto PoC de CVE-2024-9466 Descripción Este script verifica la vulnerabilidad CVE-2024-9466 añadiendo /home/userSpace/devices/debug.txt a una lista de URLs o direcciones IP objetivo. Determina si el objetivo es vulnerable basándose en el código de estado de la respuesta...

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR local on-prem anterior a la versión "4.4.0" es propenso a una vulnerabilidad de divulgación de información a través de las siguientes URL: root@kitploit: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes...

firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...

librepods

!WARNING librepods.org no es un sitio web oficial del proyecto LibrePods. Afirma incorrectamente ser el sitio web oficial del proyecto reclamando derechos de autor y usando el logotipo de LibrePods en el pie de página. Y al mismo tiempo, dicen que el proyecto no está afiliado con el proyecto...

Zeebsploit

¿ESTE PROYECTO SE DETENDRÁ O SE ACTUALIZARÁ?...

Admin-Panel_Finder

Admin Panel Finder Una extensión de Burp Suite que enumera interfaces de administración de infraestructura y aplicaciones. Referencias OWASP: Clasificación : Pruebas de Seguridad en Aplicaciones Web 02-Pruebas de Gestión de Configuración y Despliegue OTG v4 : OWASP OTG-CONFIG-005 WSTG :...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

StaCoAn

StaCoAn 不再维护！ 即将归档。 StaCoAn 是一款跨平台工具，帮助开发者、漏洞赏金猎人和白帽黑客对移动应用执行静态代码分析。 此工具将查找代码中可能包含以下内容的感兴趣的行： 硬编码凭据 API 密钥 API 的 URL 解密密钥 重大编码错误 此工具在创建时非常注重用户界面的易用性和图形化引导。 对于急于尝试的人，请从发布页面下载。 : 请注意，目前仅支持 apk 文件，但 ipa 文件很快也会支持。 可以在此处找到示例报告 这里。 目录 目录 功能特性 掠夺概念 词表 文件类型 响应式设计 限制 快速开始 从发布版本 Docker 从源码 构建可执行文件 Windows...

scscanner_sh

scscanner - 大规模状态码扫描器 scscanner 是一个从列表中读取网站状态码响应的工具。该工具能够仅过滤特定状态码，并将结果保存到文件中。 功能 依赖极少。该工具只需安装 curl 多进程。使用多进程扫描速度更快 过滤状态码。如果你只想从列表中获取特定状态码（例如：200），该工具将帮助你 用法 root@kitploit: ➜ scscannersh git:main ✗ bash scscanner.sh - -t int -o scscanner.sh -h Options: -l File contain lists of domain. -t Adjust...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

CData API Server < 23.4.8844 - Path Traversal

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...

Emlog Pro v2.1.14 - Cross-Site Scripting

Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. id: CVE-2023-41621 info: name: Emlog Pro v2.1.14 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. impact: ...

RevPi Webstatus <= v2.4.5 - Authentication Bypass

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device id: CVE-2025-41646 info: name: RevPi Webstatus = v2.4.5 - Authentication Bypass author: DhiyaneshDK severity: critic...

ESAFENET CDG - Arbitrary File Download

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. id: CVE-2019-9632 info: name: ESAFENET CDG - Arbitrary File Download author: pdteam severity: hi...

Reprise License Manager 14.2 - Cross-Site Scripting

Reprise License Manager 14.2 contains a cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. id: CVE-2021-45422 info: name: Reprise License Manager 14.2 - Cross-Site Scripting author: edoardottt severity: medium description: | Reprise License Manager 14.2...

Joomla! Component User Status - Local File Inclusion

A directory traversal vulnerability in userstatus.php in the User Status comuserstatus component 1.21.16 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1304 info: name: Joomla! Component User Status - Local File...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

WordPress Post Status Notifier Lite <1.10.1 - Cross-Site Scripting

WordPress Post Status Notifier Lite plugin before 1.10.1 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

Rudder Server < 1.3.0-rc.1 - SQL Injection

Rudder-server is part of RudderStack, an open source Customer Data Platform CDP. Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution RCE due to the rudder role in PostgresSQL having superuser permissions by default. Version...