CVE-2024-28995

Exploit For CVE-2024-28995 On June 5, 2024, SolarWinds published an advisory for CVE-2024-28995, a high-severity directory traversal vulnerability affecting their file transfer solution Serv-U. The vulnerability was discovered by researcher Hussein Daher of Web Immunify. Using exploit...

CVE-2025-31161

CVE-2025-31161 — это уязвимость критической степени тяжести, позволяющая злоумышленникам контролировать обработку аутентификации пользователей в программном обеспечении CrushFTP для управляемой передачи файлов MFT. Затронутые версии: с 10.0.0 по 10.8.3 и с 11.0.0 по 11.3.0 Краткое описание...

CVE-2020-25613

POC root@kitploit: POST / HTTP/1.1 Host: 127.0.0.1:1080 Content-Type: text/html Content-Length: 129 Connection: keep-alive Transfer-Encoding: 0xb chunked 1 A 0 POST /flag HTTP/1.1 Host: 127.0.0.1:1080 Content-Length: 180 Connection: keep-alive Content-Type: text/html URI:...

CVE-2026-62994

A flaw was found in CoreDNS, a DNS server. A remote attacker can trigger a denial of service by sending a specially crafted AXFR request to a CoreDNS zone. This occurs when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint...

Multi-Stage-Exploitation-and-Detection-Engineering-Analysis-of-CVE-2023-34362-in-MOVEit-Transfer

CVE-2023-34362 Анализ уязвимости MOVEit Transfer Обзор проекта Этот репозиторий содержит академический технический анализ CVE-2023-34362 — критической уязвимости SQL-инъекции, затрагивающей MOVEit Transfer. Проект подготовлен для CYB625 – Этический хакинг и тестирование на проникновение. Важное...

WS_FTP Server - Insecure Deserialization

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WSFTP Server operating system. id: CVE-2023-40044 info: name: WSFTP Server - Insecure...

CVE-2025-55315-repro

CVE-2025-55315-repro 이 저장소는 HTTP 청크 전송 및 개행 구문 분석 동작을 재현하고 테스트하는 작은 ASP.NET Core 콘솔 앱을 포함합니다. 자세한 정보는 CVE-2025-55315를 참조하세요. 내용 Repro/Program.cs - 로컬 Kestrel 서버를 시작하고 두 개의 TCP 기반 테스트를 실행하는 콘솔 앱입니다. 테스트는 TcpClient를 통해 원시 HTTP 바이트를 전송하여 분할 읽기에서 청크 전송 구문 분석 및 잘못된 개행 처리를 테스트합니다. 이 테스트가 실패하면...

EUVD-2026-68291

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

CVE-2026-82588

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

CVE-2026-82588 Open5GS Transfer Endpoint namf-handler.c null pointer dereference

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

CVE-2026-82588

A null pointer dereference vulnerability exists in Open5GS versions up to 2.7.7 , located in the file src/amf/namf-handler.c within the Transfer Endpoint component. The exact processing triggering the issue is described as unknown in the provided documents. The attack can be launched remotely and...

CVE-2026-82588 Open5GS Transfer Endpoint namf-handler.c null pointer dereference

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

Tryhackme_Billing

TryhackmeBilling Billing CTF MachineCVE-2023-30258Exécution de code à distance...

OSCP

OSCP OSCP 학습 가이드 목차 열거 및 정찰 웹 열거 Nikto 스캔: root@kitploit: nikto -h http://10.10.10.1 다양한 도구로 디렉터리 검색: DIRB root@kitploit: dirb http://10.10.10.1 Gobuster root@kitploit: gobuster dir -u http://10.129.155.74:3000 -w /usr/share/wordlists/dirbuster/directory-list-2.3-small.txt -x aspx 웹 애플리케이션 펜테스팅 X...

dns-zone-transfer-test

Test de transfert de zone DNS Automatise les tests de transfert de zone DNS Domain Name System. Trouve automatiquement les serveurs de noms d'un domaine donné, et teste les transferts de zone. En cas de succès, les enregistrements A identifiés sont affichés sur la sortie standard. Utilisation...

PT-2026-83635

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A remote null pointer dereference can occur due to improper processing within the src/amf/namf-handler.c file of the Transfer Endpoint component. A null pointer dereference happens when a program...

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2020.1.11 12.1.11, 2021.0.9 13.0.9, 2021.1.7 13.1.7, 2022.0.7 14.0.7, 2022.1.8 14.1.8, and 2023.0.4 15.0.4, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized...

czds

CZDS Cos'è CZDS? Ogni dominio di primo livello TLD è gestito da un operatore di registro, che gestisce anche un elenco pubblicamente disponibile di domini di secondo livello SLD e i dettagli necessari per risolvere quei nomi di dominio in indirizzi Internet Protocol IP. I dati di zona...

NewPowerDNS

NewPowerDNS O NewPowerDNS é uma versão atualizada do PowerDNS do @domchell. A principal funcionalidade adicionada é o suporte para transferência de arquivos usando registros DNS A. Veja abaixo uma lista completa das modificações feitas: Suporte para transferência via registros DNS A Compressão gz...

CVE-2026-55763

CVE-2026-55763 affects Klever-Go (the Go implementation of the Klever blockchain), prior to version 1.7.19 . In processPercentageRoyaltiesTransfer (core/kapp/accounts/accounts.go), the sender's royalty debit via SubFromBalance is ordered after the split loop and after the royaltiesToPay