Lucene search
+L

549 matches found

Kitploit
Kitploit
โ€ขadded 2026/08/25 11:13 p.m.โ€ข2 views

sj

sj Swagger Jacker sj๋Š” ๋…ธ์ถœ๋œ Swagger/OpenAPI ์ •์˜ ํŒŒ์ผ์„ ๊ฐ์‚ฌํ•˜๊ธฐ ์œ„ํ•ด ์„ค๊ณ„๋œ ๋ช…๋ น์ค„ ๋„๊ตฌ๋กœ, ๊ด€๋ จ API ์—”๋“œํฌ์ธํŠธ์˜ ์•ฝํ•œ ์ธ์ฆ์„ ํ™•์ธํ•ฉ๋‹ˆ๋‹ค. ๋˜ํ•œ ์ˆ˜๋™ ์ทจ์•ฝ์  ํ…Œ์ŠคํŠธ๋ฅผ ์œ„ํ•œ ๋ช…๋ น ํ…œํ”Œ๋ฆฟ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. ์ด ๋„๊ตฌ๋Š” ์ •์˜ ํŒŒ์ผ์—์„œ ๊ฒฝ๋กœ, ๋งค๊ฐœ๋ณ€์ˆ˜ ๋ฐ ํ—ˆ์šฉ๋œ ๋ฉ”์„œ๋“œ๋ฅผ ํŒŒ์‹ฑํ•œ ํ›„, ๋‹ค์„ฏ ๊ฐ€์ง€ ํ•˜์œ„ ๋ช…๋ น ์ค‘ ํ•˜๋‚˜์™€ ํ•จ๊ป˜ ๊ฒฐ๊ณผ๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์ž‘๋™ํ•ฉ๋‹ˆ๋‹ค: automate - ์ผ๋ จ์˜ ์š”์ฒญ์„ ์ƒ์„ฑํ•˜๊ณ  ์‘๋‹ต์˜ ์ƒํƒœ ์ฝ”๋“œ๋ฅผ ๋ถ„์„ํ•ฉ๋‹ˆ๋‹ค. prepare - ์ˆ˜๋™ ํ…Œ์ŠคํŠธ์— ์‚ฌ์šฉํ•  ๋ช…๋ น ๋ชฉ๋ก์„ ์ƒ์„ฑํ•ฉ๋‹ˆ๋‹ค. endpoints...

5.8AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/08/25 9:06 p.m.โ€ข1 views

SwaggerUI-CVE-2018-25031

Exploit Swagger UI - CVE-2018-25031 ะญะบัะฟะปะพะนั‚ Swagger UI - ะะตะฟั€ะฐะฒะธะปัŒะฝะพะต ะฟั€ะตะดัั‚ะฐะฒะปะตะฝะธะต ะฒะฐะถะฝะพะน ะธะฝั„ะพั€ะผะฐั†ะธะธ ะฒ ะฟะพะปัŒะทะพะฒะฐั‚ะตะปัŒัะบะพะผ ะธะฝั‚ะตั€ั„ะตะนัะต UI CVE-2018-25031. ะญั‚ะพั‚ ัะบัะฟะปะพะนั‚ ะฟั€ะพะฒะตั€ัะตั‚, ัƒัะทะฒะธะผ ะปะธ ะธัะฟะพะปัŒะทัƒะตะผั‹ะน Swagger UI ะบ ัะบัะฟะปัƒะฐั‚ะฐั†ะธะธ ัƒัะทะฒะธะผะพัั‚ะธ ะฝะตะฟั€ะฐะฒะธะปัŒะฝะพะณะพ ะฟั€ะตะดัั‚ะฐะฒะปะตะฝะธั ะฒะฐะถะฝะพะน ะธะฝั„ะพั€ะผะฐั†ะธะธ ะฒ...

4.3CVSS0.42326EPSS
SaveExploits4
Kitploit
Kitploit
โ€ขadded 2026/08/25 5:00 p.m.โ€ข35 views

apidetector

APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains with unique smart capabilities to detect false-positives. It's particularly useful for security professionals and developers who are engaged in API testing and vulnerability scanning...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/08/25 5:00 p.m.โ€ข1 views

apidetector

APIDetector โ€” ัั‚ะพ ะผะพั‰ะฝั‹ะน ะธ ัั„ั„ะตะบั‚ะธะฒะฝั‹ะน ะธะฝัั‚ั€ัƒะผะตะฝั‚, ะฟั€ะตะดะฝะฐะทะฝะฐั‡ะตะฝะฝั‹ะน ะดะปั ะฟั€ะพะฒะตั€ะบะธ ะพั‚ะบั€ั‹ั‚ั‹ั… ะบะพะฝะตั‡ะฝั‹ั… ั‚ะพั‡ะตะบ Swagger ะฒ ั€ะฐะทะปะธั‡ะฝั‹ั… ะฟะพะดะดะพะผะตะฝะฐั… ั ัƒะฝะธะบะฐะปัŒะฝั‹ะผะธ ะธะฝั‚ะตะปะปะตะบั‚ัƒะฐะปัŒะฝั‹ะผะธ ะฒะพะทะผะพะถะฝะพัั‚ัะผะธ ะดะปั ะพะฑะฝะฐั€ัƒะถะตะฝะธั ะปะพะถะฝั‹ั… ัั€ะฐะฑะฐั‚ั‹ะฒะฐะฝะธะน. ะžะฝ ะพัะพะฑะตะฝะฝะพ ะฟะพะปะตะทะตะฝ ะดะปั ัะฟะตั†ะธะฐะปะธัั‚ะพะฒ ะฟะพ ะฑะตะทะพะฟะฐัะฝะพัั‚ะธ ะธ ั€ะฐะทั€ะฐะฑะพั‚ั‡ะธะบะพะฒ,...

5.2AI score
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/08/25 2:56 p.m.โ€ข108 views

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

5.7AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/08/25 9:20 a.m.โ€ข1 views

VulnerableSpringDataRest

ะฃัะทะฒะธะผะพะต ะฟั€ะธะปะพะถะตะฝะธะต Spring DataRest ะญั‚ะพ ะฝะฐะผะตั€ะตะฝะฝะพ ัƒัะทะฒะธะผะพะต ะฟั€ะธะปะพะถะตะฝะธะต Spring Data REST ะดะปั ั‚ะตัั‚ะธั€ะพะฒะฐะฝะธั ะธ ะดะตะผะพะฝัั‚ั€ะฐั†ะธะธ ัƒัะทะฒะธะผะพัั‚ะธ CVE-2017-8046 ะธ ะฟั€ะพะฑะปะตะผ ั‚ะตัั‚ะธั€ะพะฒะฐะฝะธั ะฒะฝะตะดั€ะตะฝะธั ะบะพะผะฐะฝะด ะธ ัƒะดะฐะปะตะฝะฝะพะณะพ ะฒั‹ะฟะพะปะฝะตะฝะธั ะบะพะดะฐ ั‡ะตั€ะตะท REST API. ะžะฝะพ ะฟะพะดะดะตั€ะถะธะฒะฐะตั‚ Swagger UI ะดะปั ะธัะฟะพะปัŒะทะพะฒะฐะฝะธั ั ะธะฝัั‚ั€ัƒะผะตะฝั‚ะฐะผะธ, ะณะดะต...

9.8CVSS0.7453EPSS
SaveExploits8
Nuclei
Nuclei
โ€ขadded 2026/08/25 6:03 a.m.โ€ข63 views

WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting

WordPress Embed Swagger plugin 1.0.0 and prior contains a reflected cross-site scripting vulnerability due to insufficient escaping/sanitization and validation via the url parameter found in the /swagger-iframe.php file, which allows attackers to inject arbitrary web scripts onto the page. id:...

6.1CVSS5.9AI score0.03865EPSS
SaveExploits2References5
Nuclei
Nuclei
โ€ขadded 2026/08/25 6:03 a.m.โ€ข40 views

WordPress API Bearer Auth <20190907 - Cross-Site Scripting

WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting vulnerability. The server parameter is not correctly filtered in swagger-config.yaml.php. id: CVE-2019-16332 info: name: WordPress API Bearer Auth 20190907 - Cross-Site Scripting author: daffainfo severity: medium...

6.1CVSS5.8AI score0.05672EPSS
SaveExploits2References5
Nuclei
Nuclei
โ€ขadded 2026/08/25 6:03 a.m.โ€ข169 views

Fastify Swagger-UI - Information Disclosure

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...

5.3CVSS5.6AI score0.0229EPSS
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/08/25 5:03 a.m.โ€ข2 views

swagger-ui

์†Œ๊ฐœ: Swagger UI์˜ ์—ญํ•  Swagger UI ๋Š” OpenAPI์ด์ „ ๋ช…์นญ Swagger ๋ช…์„ธ๋ฅผ ๋Œ€ํ™”ํ˜• ์›น ์ธํ„ฐํŽ˜์ด์Šค๋กœ ๋ Œ๋”๋งํ•˜๋Š” ๋„๋ฆฌ ์‚ฌ์šฉ๋˜๋Š” ๋ผ์ด๋ธŒ๋Ÿฌ๋ฆฌ์ž…๋‹ˆ๋‹ค. ์ด๋ฅผ ํ†ตํ•ด ๊ฐœ๋ฐœ์ž์™€ ํ†ตํ•ฉ์ž๋Š” ๋ฐฑ์—”๋“œ ๊ตฌํ˜„ ์—†์ด๋„ API๋ฅผ ํƒ์ƒ‰ํ•˜๊ณ  ํ…Œ์ŠคํŠธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. CVEโ€‘2018โ€‘25031 ์ƒ์„ธ ์ •๋ณด ๊ทผ๋ณธ ์›์ธ: ์›๊ฒฉ ๋ช…์„ธ ๋กœ๋”ฉ ์ด ์ทจ์•ฝ์ ์€ Swagger UI ํด๋ผ์ด์–ธํŠธ๊ฐ€ ์›๊ฒฉ ์„ค์ • ๋˜๋Š” ๋ช…์„ธ ํŒŒ์ผ์„ ๋กœ๋“œํ•˜๋Š” ๋ฐ ์‚ฌ์šฉํ•˜๋Š” URL ์ฟผ๋ฆฌ ๋งค๊ฐœ๋ณ€์ˆ˜์˜ ์œ ํšจ์„ฑ ๊ฒ€์‚ฌ๊ฐ€ ๋ถˆ์ถฉ๋ถ„ํ•˜์—ฌ ๋ฐœ์ƒํ•ฉ๋‹ˆ๋‹ค. ๊ด€๋ จ๋œ ์ผ๋ฐ˜์ ์ธ ๋งค๊ฐœ๋ณ€์ˆ˜๋Š” ๋‹ค์Œ๊ณผ ๊ฐ™์Šต๋‹ˆ๋‹ค...

4.3CVSS6.3AI score0.42326EPSS
SaveExploits4
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:37 a.m.โ€ข2 views

CVE-2025-8191

CVE-2025-8191 โ€“ XSS-ะธะฝัŠะตะบั†ะธั ะฒ Swagger UI ะžะฟะธัะฐะฝะธะต: ะญั‚ะพั‚ ั€ะตะฟะพะทะธั‚ะพั€ะธะน ัะพะดะตั€ะถะธั‚ Proofโ€‘ofโ€‘Concept PoC ัะบัะฟะปะพะนั‚ ะดะปั CVEโ€‘2025โ€‘8191 โ€” ัƒัะทะฒะธะผะพัั‚ะธ, ะพะฑะฝะฐั€ัƒะถะตะฝะฝะพะน ะฒ Swagger UI. ะฃัะทะฒะธะผะพัั‚ัŒ ะฟะพะทะฒะพะปัะตั‚ ะฒะฝะตะดั€ะตะฝะธะต ะผะตะถัะฐะนั‚ะพะฒะพะณะพ ัะบั€ะธะฟั‚ะธะฝะณะฐ XSS ะฒ ะฟะพะปะต ยซdescriptionยป, ั‡ั‚ะพ ะฟั€ะธะฒะพะดะธั‚ ะบ ัƒะดะฐะปะตะฝะฝะพะผัƒ ะฒั‹ะฟะพะปะฝะตะฝะธัŽ ัะบั€ะธะฟั‚ะพะฒ ะฒ...

5.4CVSS4.3AI score0.01684EPSS
SaveExploits3
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:32 a.m.โ€ข1 views

test-xss-swagger-CVE-2019-1749

์ด ์ €์žฅ์†Œ์—๋Š” README๊ฐ€ ์—†์Šต๋‹ˆ๋‹ค...

7.4CVSS7.3AI score0.00605EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:28 a.m.โ€ข2 views

CVE-2018-25031

Swagger UI์—์„œ์˜ ํฌ๋กœ์Šค ์‚ฌ์ดํŠธ ์Šคํฌ๋ฆฝํŒ… PoC: CVE-2018-25031 Python Selenium ํ™œ์šฉ ์ด ์ €์žฅ์†Œ์—๋Š” Selenium ๋ผ์ด๋ธŒ๋Ÿฌ๋ฆฌ๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ Swagger UI์˜ ํฌ๋กœ์Šค ์‚ฌ์ดํŠธ ์Šคํฌ๋ฆฝํŒ…XSS ์ทจ์•ฝ์ ์— ๋Œ€ํ•œ ๊ฐœ๋… ์ฆ๋ช…PoC์„ ๋ณด์—ฌ์ฃผ๋Š” Python ์Šคํฌ๋ฆฝํŠธ๊ฐ€ ํฌํ•จ๋˜์–ด ์žˆ์Šต๋‹ˆ๋‹ค. ์ด PoC์˜ ๋ชฉ์ ์€ ์•…์„ฑ ํŽ˜์ด๋กœ๋“œ๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ Swagger UI๋ฅผ ํ†ตํ•ด ํ•ด๋‹น ์ทจ์•ฝ์ ์— ์ทจ์•ฝํ•œ ์‚ฌ์ดํŠธ๋ฅผ ์‹๋ณ„ํ•˜๋Š” ๊ฒƒ์ž…๋‹ˆ๋‹ค. Swagger UI์˜ ํฌ๋กœ์Šค ์‚ฌ์ดํŠธ ์Šคํฌ๋ฆฝํŒ…XSS ์ทจ์•ฝ์  Swagger UI๋Š” ์‚ฌ์šฉ์ž ์นœํ™”์ ์ธ ์ธํ„ฐํŽ˜์ด์Šค๋ฅผ...

4.3CVSS6.1AI score0.42326EPSS
SaveExploits4
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:22 a.m.โ€ข1 views

Swagger-HTML-Injection-CVE-2025-8191

https://example.com/swagger/swagger.html?configURL=https://raw.githubusercontent.com/mayank-s16/Swagger-HTML-Injection-CVE-2025-8191/refs/heads/main/test.json...

5.4CVSS4.5AI score0.01684EPSS
SaveExploits3References1
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:22 a.m.โ€ข2 views

CVE-2018-25031

CVE-2018-25031 CVE-2018-25031 ใฎใ‚จใ‚ฏใ‚นใƒ—ใƒญใ‚คใƒˆใƒ†ใ‚นใƒˆ Swagger UI 4.1.3 ใ‚ˆใ‚Šๅ‰ใฎใƒใƒผใ‚ธใƒงใƒณใงใฏใ€ใƒชใƒขใƒผใƒˆๆ”ปๆ’ƒ่€…ใŒใชใ‚Šใ™ใพใ—ๆ”ปๆ’ƒใ‚’ๅฎŸ่กŒใงใใ‚‹ๅฏ่ƒฝๆ€งใŒใ‚ใ‚Šใพใ™ใ€‚่ขซๅฎณ่€…ใซ็ดฐๅทฅใ•ใ‚ŒใŸ URL ใ‚’้–‹ใใ‚ˆใ†่ช˜ๅฐŽใ™ใ‚‹ใ“ใจใงใ€ๆ”ปๆ’ƒ่€…ใฏใ“ใฎ่„†ๅผฑๆ€งใ‚’ๆ‚ช็”จใ—ใฆใƒชใƒขใƒผใƒˆใฎ OpenAPI ๅฎš็พฉใ‚’่กจ็คบใ•ใ›ใ‚‹ใ“ใจใŒใงใใพใ™ใ€‚ ไฝฟ็”จๆ–นๆณ• ใƒ‰ใ‚ญใƒฅใƒกใƒณใƒˆใ‚จใƒณใƒ‰ใƒใ‚คใƒณใƒˆใ‚’่ฆ‹ใคใ‘ใ€ใƒ‘ใƒฉใƒกใƒผใ‚ฟ "configUrl" ใซ test.json ใ‚’ๆŒ‡ๅฎšใ™ใ‚‹ใ‹ใ€"url" ใซ test.yaml ใ‚’ๆŒ‡ๅฎšใ—ใพใ™ใ€‚ root@kitploit:...

4.3CVSS5.6AI score0.42326EPSS
SaveExploits4
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:17 a.m.โ€ข3 views

CVE-2018-25031

CVE-2018-25031 ์„ค๋ช…: Swagger UI 4.1.3 ์ด์ „ ๋ฒ„์ „์—์„œ๋Š” ์›๊ฒฉ ๊ณต๊ฒฉ์ž๊ฐ€ ์Šคํ‘ธํ•‘ ๊ณต๊ฒฉ์„ ์ˆ˜ํ–‰ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๊ณต๊ฒฉ์ž๋Š” ํ”ผํ•ด์ž๊ฐ€ ์กฐ์ž‘๋œ URL์„ ์—ด๋„๋ก ์œ ๋„ํ•จ์œผ๋กœ์จ ์ด ์ทจ์•ฝ์ ์„ ์•…์šฉํ•˜์—ฌ ์›๊ฒฉ OpenAPI ์ •์˜๋ฅผ ํ‘œ์‹œํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๊ณต๊ฒฉ ์ „ ์Šคํฌ๋ฆฐ์ƒท: PoC: root@kitploit: /index.html?configUrl=https://raw.githubusercontent.com/afine-com/CVE-2018-25031/main/poc.json...

4.3CVSS6.3AI score0.42326EPSS
SaveExploits4
Kitploit
Kitploit
โ€ขadded 2026/08/25 2:32 a.m.โ€ข420 views

kiterunner

Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xxโ€™s upon a partial path, it is no longer effective for modern web applications,...

5.6AI score
SaveExploits0References4
CVE
CVE
โ€ขadded 2026/08/24 12:10 p.m.โ€ข13 views

CVE-2026-21759

HCL Hive is affected by an information exposure vulnerability in which Swagger API documentation was publicly accessible to unauthenticated users. No sensitive data (credentials, PII) was discovered, but the exposure increases the overall attack surface by revealing API structure to potential att...

4.3CVSS5.2AI score0.00222EPSS
SaveExploits0References1
EUVD
EUVD
โ€ขadded 2026/08/24 12:10 p.m.โ€ข7 views

EUVD-2026-64837

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

4.3CVSS5.3AI score0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
โ€ขadded 2026/08/24 12:10 p.m.โ€ข28 views

CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

4.3CVSS0.00222EPSS
SaveExploits0References1
Rows per page
Query Builder