Test_CVE-2024-6387

CVE-2024-6387 📜 描述 CVE-2024-6387Check 是一款轻量级、高效的工具，旨在识别运行存在漏洞的 OpenSSH 版本的服务器，专门针对最近发现的 regreSSHion 漏洞（CVE-2024-6387）。该脚本支持快速扫描多个 IP 地址、域名和 CIDR 网络范围，以检测潜在漏洞并确保基础设施安全。 🌟 特性 快速扫描 ：快速扫描多个 IP 地址、域名和 CIDR 范围，检测 CVE-2024-6387 漏洞。 横幅获取 ：无需身份验证即可高效获取 SSH 横幅。 多线程 ：使用线程进行并发检查，显著缩短扫描时间。 详细输出...

CVE-2026-8712 Wyoming < 1.10.2 SSRF via uri Query Parameter

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious uri query parameter to the HTTP API. Attackers can pass arbitrary tcp:// or unix:// URIs...

EUVD-2026-69417

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious uri query parameter to the HTTP API. Attackers can pass arbitrary tcp:// or unix:// URIs...

CVE-2026-8712 Wyoming < 1.10.2 SSRF via uri Query Parameter

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious uri query parameter to the HTTP API. Attackers can pass arbitrary tcp:// or unix:// URIs...

CVE-2026-8712

Wyoming before 1.10.2 contains a server-side request forgery (SSRF) vulnerability. Unauthenticated attackers with network access can supply a malicious uri query parameter containing arbitrary tcp:// or unix:// URIs to the HTTP API endpoints /api/info, /api/speech-to-text, and /api/text-to-speech...

CVE-2026-17532

Seraphinite Accelerator 。 单个 URL，无需身份验证： root@kitploit: http://TARGET/?seraphaccelprep=alertdocument.domain" 使用方法 Python（需要 pip install requests）： root@kitploit: usage: seraphaccelxss.py -h --url URL --payload PAYLOAD --timeout TIMEOUT Seraphinite Accelerator WordPress alertdocument.domain...

CVE-2020-5902

CVE-2020-5902 F5 BIG-IP 流量管理用户界面（TMUI）远程代码执行 在 BIG-IP 版本 15.0.0-15.1.0.3、14.1.0-14.1.2.5、13.1.0-13.1.3.3、12.1.0-12.1.5.1 和 11.6.1-11.6.5.1 中，流量管理用户界面（TMUI，也称为配置工具）在未公开页面中存在远程代码执行（RCE）漏洞。 此漏洞允许未经身份验证的攻击者或经过身份验证的用户，通过 BIG-IP 管理端口和/或自 IP 对配置工具进行网络访问，从而执行任意系统命令、创建或删除文件、禁用服务以及/或执行任意 Java...

CVE-2020-14883

CVE-2020-14883 Oracle WebLogic Server の認証済みリモートコード実行 RCE Oracle Fusion Middleware の Oracle WebLogic Server 製品における脆弱性（コンポーネント：Console）。影響を受けるサポート対象バージョンは 10.3.6.0.0、12.1.3.0.0、12.2.1.3.0、12.2.1.4.0、14.1.1.0.0 です。HTTP を介してネットワークアクセスを持つ未認証の攻撃者が容易に悪用可能な脆弱性により、Oracle WebLogic Server...

CVE-2021-21972

CVE-2021-21972 VMware vSphere Client Unauthorized File Upload to Remote Code Execution RCE The vSphere Web Client HTML5 is essentially an administrative interface that enables management of a vSphere installation. The vSphere Client provides an administrator with access to the key functions of...

httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash

A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...

httpd: NULL pointer dereference via specially crafted request

A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 CVSS score: 9.8, a case of authentication bypass that could lead to administrative access in...

CVE-2026-21018-OPC-UA-Authentication-Bypass-via-None-Security-Policy

CVE-2026-21018 – 通过 None 安全策略绕过 OPC UA 身份验证 程序代码（Python opcua-asyncio 模拟） root@kitploit: opcuaserversim.py - OPC UA server accepting None security policy from asyncua import Server import asyncio async def main: server = Server await server.init...

Gitlab-CVE-2021-22205

Unauthenticated RCE on Gitlab version 13.10.3 Unauthenticated RCE exploit for gitlab version 13.10.3 For educational/research purpose only. Use at your own risk Root cause: When uploading image files, Gitlab Workhorse passes any files with the extensions jpg|jpeg|tiff through to ExifTool to remov...

EUVD-2024-55741

A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If exploited, a threat actor could view customer data...

CVE-2024-7952

Rockwell Automation's DataMosaix Private Cloud (versions 7.07 and prior ) is affected by a data exposure vulnerability (CWE-200). Hardcoded links in the source code point to JSON files that are accessible without authentication, allowing an unauthenticated remote attacker to view customer data. T...

CVE-2025-31324

PoC - CVE-2025-31324 [email protected] 针对 SAP NetWeaver Visual Composer 中 CVE-2025-31324 漏洞的测试利用代码，该漏洞允许通过 /developmentserver/metadatauploader 端点在无需身份验证的情况下任意上传文件 。 ⚠️ 此代码仅用于教育目的和授权测试。请勿在生产环境中使用，也不得在未经许可的情况下针对系统使用。 描述 该漏洞允许未经身份验证的远程攻击者向 SAP 服务器上传任意文件，如果上传可执行文件，则可能导致远程代码执行（RCE）。 用法...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882 描述 Oracle Fusion Middleware的Oracle WebLogic Server产品中存在漏洞（组件：控制台）。受影响的支持版本包括10.3.6.0.0、12.1.3.0.0、12.2.1.3.0、12.2.1.4.0和14.1.1.0.0。该漏洞易于利用，未经身份验证的攻击者可通过HTTP网络访问破坏Oracle WebLogic Server。成功利用此漏洞可能导致Oracle WebLogic被接管 差异 对于12.2.1之前的Oracle...

CVE-2018-0296

CVE-2018-0296 测试CVE-2018-0296并从Cisco ASA中提取用户名。 更多技术细节请参考 https://sekurak.pl/opis-bledu-cve-2018-0296-ominiecie-uwierzytelnienia-w-webinterfejsie-cisco-asa/。 帮助菜单 root@kitploit: $ ./CVE-2018-0296 -h 选项: -h, --help 显示帮助信息 -u, --url 目标设备的URL -i Socks代理的IP -p Socks代理的端口 -t, --time 循环之间休眠的秒数 --loop...

WordPress SigmaForms Pro plugin <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field vulnerability

Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field vulnerability discovered by Doan Dinh Van in WordPress Plugin SigmaForms Pro – AI Generated Forms versions = 1.4.11...