CVE-2026-24061-setup

Configuración de CVE-2026-24061 Este repositorio contiene la configuración de Docker para CVE-2026-24061. Una vez que hayas instalado Docker, solo tienes que hacer lo siguiente: 1. Clona este repositorio. 2. Ejecuta el siguiente comando: root@kitploit: sudo docker build . --tag telnetd-auth-bypas...

CVE-2023-6275

CVE-2023-6275 - Cross-Site Scripting Reflejado en la Plataforma TOTVS Fluig 1.6.X - 1.8.1 La plataforma TOTVS Fluig, en sus versiones desde 1.6.1.X hasta 1.8.1, es vulnerable a Cross-Site Scripting en los parámetros 'redirectUrl' y 'user' dentro del módulo 'mobileredir'. Fluig es la plataforma de...

CVE-2011-2523

Vsftpd 2.3.4 后门漏洞 漏洞 当黑客在 USER 参数中输入包含 : 的字符串时，后门会在 6200 端口打开...

CVE-2011-2523

vsftpd 2.3.4 后门利用 FTP 服务器: vsftpd 受影响版本: 2.3.4 CVE: CVE-2011-2523 漏洞描述: 当用户在 FTP USER 参数中输入包含 : 的字符串时，会打开 6200 端口的后门 注意: 该远程代码执行无需身份验证...

CVE-2025-0133-exploit

Escaneo de CVE-2025-0133 Un script escrito en Python para comprobar la existencia de una vulnerabilidad de Cross-Site Scripting reflejado CVE-2025-0133 que se presenta en Palo Alto. El archivo getconfig.esp se detecta y se prueba para XSS usando el script proporcionado. Uso: root@kitploit:...

CVE-2026-24061

CVE-2026-24061 Pasos de reproducción Construir la imagen root@kitploit: docker build -t telnetd-bypass . Iniciar el contenedor root@kitploit: docker run -it --rm \ --name telnetd-vuln \ --privileged \ -p 23:23 \ telnetd-bypass Enviar el payload root@kitploit: USER='-f root' telnet -a 127.0.0.1 23...

CVE-2026-6182-SQLI-auth

Bypass de Autenticación por Inyección SQL - Sistema de Gestión de Contenidos Simple en PHP Descripción Existe una vulnerabilidad de Inyección SQL en la página de inicio de sesión de administrador de Simple Content Management System PHP. El parámetro user no se sanea antes de pasarse a la consulta...

FLUIG-Vulnerabilidade-CVE-2023-6275

FLUIG-Vulnerabilidade-CVE-2023-6275 Nov 24, 2023 — A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1. It has been rated as problematic. https://nvd.nist.gov/vuln/detail/CVE-2023-6275 CVE-2023-6275 - Reflected Cross-Site Scripting in TOTVS Fluig Plataform 1.6.X - 1.8.1 The...

CVE-2025-0133

CVE-2025-0133 Palo Alto PAN-OS 在 GlobalProtect 网关和门户的 getconfig.esp 处理程序中存在反射型 XSS 漏洞。user 查询参数未进行编码即反射到 Captive Portal 页面；攻击者诱使已认证的 GlobalProtect 用户点击精心构造的链接，即可在企业 VPN 门户的信任上下文中执行 JavaScript，从而大幅提升钓鱼活动的效力。 于 2025 年 5 月披露。已在 PAN-SA-2025-0005 中修复。由 XBOW（Anthropic 自主漏洞猎捕代理）发现。本工具包是对最初为 CVE-2020-358...

CVE-2024-1512

CVE-2024-1512 Prueba de Concepto Resumen de la Vulnerabilidad CVE-2024-1512 expone una vulnerabilidad crítica en el plugin MasterStudy LMS de WordPress, específicamente en la implementación de la ruta REST /lms/stm-lms/order/items. El problema surge por la falta de escape adecuado del parámetro...

CVE-2026-85513

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...

CVE-2026-85513 StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...

EUVD-2026-71087

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...

CVE-2026-85513 StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...

CVE-2026-43621

Simple Machines Forum (SMF) through 2.1.7 contains an authorization state-confusion vulnerability in the profile loader (Profile::load()). By supplying multiple values for the user parameter, an authenticated low-privileged user can exploit a mismatch between Profile::$member and User::$me->is...

CVE-2026-43621 Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load()

Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...

CVE-2026-78171 itsourcecode Sales and Inventory System processlogin.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

EUVD-2026-42506

The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the updateuser function accepting a user ID parameter from form submissions without verifying that the authenticated user has permission to edit that specific...

CVE-2026-14655

A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a manipulation of the argument User can lead to cross site scripting. The attack may be performed from remote. The exploit ha...

PT-2026-53162

Name of the Vulnerable Software and Affected Versions JoomCCK affected versions not specified Description A front-end controller task in the JoomCCK extension for Joomla is susceptible to SQL injection. This occurs because the application constructs two SQL statements by directly concatenating a...