SNORDIAN-s-H5PxAPIkatchu-CVE-Report

SNORDIAN's-H5PxAPIkatchu-CVE-Report Divulgation pour CVE-2025-12904 CVE-2025-12904 - Vulnérabilité dans SNORDIAN's H5PxAPIkatchu Ce dépôt divulgue une vulnérabilité découverte dans SNORDIAN's H5PxAPIkatchu = 0.4.16, un plugin WordPress développé par otacke. 🛠 Version affectée Produit : SNORDIAN's...

pgpdump

pgpdump: عارض حزم PGP Kazu Yamamoto [email protected] 16 أغسطس 2010 نظرة عامة pgpdump هي أداة عرض حزم PGP تُظهر تنسيق حزم OpenPGP RFC 4880 وPGP الإصدار 2 RFC 1991. فيما يلي مثال: root@kitploit: % pgpdump test/sig1 Old: Marker Packettag 103 bytes String - ... New: One-Pass Signature Packettag...

CVE-2023-30212

CVE-2023-30212 Окружение Docker и эксплуатация CVE-2023-30212 — это уязвимость безопасности, которая затрагивает версии OURPHP до или равных версии 7.2.0 .Эта уязвимость позволяет осуществлять межсайтовый скриптинг XSS атаки...

CVE-2021-41773-apache

CVE-2021-41773 Apache HTTP 서버 익스플로잇 이 저장소는 CVE-2021-41773으로 식별된 Apache HTTP 서버 경로 탐색 취약점에 대한 Python 기반 개념 증명 익스플로잇을 포함합니다. 이 스크립트는 보안 연구, 방어 테스트 및 취약한 시스템에 대한 공인된 평가를 위해 설계되었습니다. 개요 CVE-2021-41773은 Apache HTTP Server 버전 2.4.49 및 관련 구성에 영향을 미치는 경로 탐색 취약점으로, 서버가 특정 CGI 요청 경로에서 인코딩된 탐색 시퀀스를 부적절하게...

ChaseHQ

Chase H.Q. für den ZX Spectrum auseinandernehmen Reverse Engineering von David Thomas, 2023-2024 Projektstart: März 2023 Dies ist eine laufende Disassemblierung der ZX-Spectrum-Umsetzung von Chase H.Q. durch Ocean Software. Bisher deckt sie nur die 48K-Version und das erste Level des Spiels ab. D...

CVE-2021-33558

CVE-2021-33558 참고: https://www.cvedetails.com/cve/CVE-2021-33558 Shodan dork: product:"Boa Web Server" 0.94.13 페이로드: root@kitploit: /backup.html /preview.html /js/log.js /log.html /email.html /online-users.html /config.js POC:...

CVE-2019-9787

CVE-2019-9787 CSRF PoC Обзор PoC CSRF для CVE-2019-9787 WordPress версии 5.1.1 CVE-2019-9787 Не используйте это, ЗА ИСКЛЮЧЕНИЕМ целей ТЕСТИРОВАНИЯ. Установка root@kitploit: docker-compose up -d Атака 1. Перейдите на http://localhost:8080/wp-admin/install.php и установите WordPress. Вам нужно толь...

CVE-2023-23396

CVE-2023-23396 Ici vous pouvez télécharger l'exploit. Ici vous pouvez lire mon rapport. Ici vous pouvez m'acheter une licorne 🦄 PS Au moment de l'écriture 2023-04-07 la version client de Microsoft Excel est encore vulnérable ici plus d'informations. Partagez le savoir !...

laravel-8.4.2-rce

laravel-8.4.2-rce 環境のセットアップ root@kitploit: git clone https://github.com/laravel/laravel.git cd laravel git checkout e849812 composer install composer require facade/ignition==2.5.1 php artisan serve 使用方法 root@kitploit: python3 exploit.py http://pwnme.me:8000...

CVE-2026-37072

Veno File Manager Project 4.4.9 contains an Incorrect Access Control vulnerability in admin-head-updates.php. An unauthenticated attacker can exploit a Local File Inclusion flaw in the lang GET parameter by sending a crafted POST request to corrupt the configuration file. A subsequent GET request...

CVE-2026-37065

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion via the endpoint /vfm-admin/index.php?section=translations&action=update. The root cause is the unsanitized remove URL parameter, which allows an attacker to specify which file to delete. The vulnerability requires an authen...

apache__dolphinscheduler_CVE-2023-49109_3-2-0

Apache Dolphinscheduler نبذة Apache DolphinScheduler هي منصة حديثة لتنسيق البيانات تتيح تطويرًا مرنًا ومنخفض الكود لسير عمل عالي الأداء. وهي مخصصة للتعامل مع التبعيات المعقدة بين المهام في خطوط معالجة البيانات، وتوفر مجموعة واسعة من أنواع المهام المدمجة جاهزة للاستخدام فورًا فيما يلي أبرز ميزات...

CVE-2022-31629-poc

CVE-2022-31629 पीओसी PHP बग रिपोर्ट कैसे परीक्षण करें इंस्टॉल root@kitploit: git clone https://github.com/SilNex/CVE-2022-31629-poc cd ./CVE-2022-31629-poc docker-compose up -d परीक्षण https://localhost:8110 : v8.1.10 https://localhost:8111 : v8.1.11 Chrome HSTS समस्या thisisunsafe को hsts पृष्ठ ...

HashTag

이름: HashTag: 비밀번호 해시 분석 및 식별 버전: 0.41 날짜: 11/05/2013 저자: Smeege 연락처: [email protected] 설명: HashTag.py는 비밀번호 해시를 분석하고 식별하기 위해 작성된 파이썬 스크립트입니다. 세 가지 주요 인수가 있습니다: 단일 해시 유형 식별-sh, 파일에서 여러 해시 분석 및 식별-f, 하위 디렉터리를 탐색하여 해시가 포함된 파일을 찾아 분석/식별-d입니다. 많은 일반적인 해시 유형이 CPU 및 GPU 크래킹 도구 Hashcat에서 지원됩니다. 추가...

CVE-2025-55182

Next.js CVE-2025-55182 – Scanner Automatico Python Questo repository contiene uno scanner PoC Python completamente automatizzato per CVE-2025-55182 , una vulnerabilità di sicurezza che colpisce Next.js 16.0.6. Lo strumento consente a ricercatori di sicurezza e cacciatori di bug bounty di testare...

CVE-2016-4463

CVE-2016-4463 Uma implementação do exploit CVE-2016-4463. Exploit para Xerces 3.1.3 e anteriores. Eu pretendia enviar isso para o Exploit-DB, mas não tenho um aplicativo de referência adequado para testar isso. O Java OpenSAML deve ser vulnerável, mas levará algum tempo para explorar isso...

CVE-2018-18778-Scanner

CVE-2018-18778-Scanner Scannt anfällige Versionen von minihttpd vor 1.30. ACME minihttpd vor 1.30 ermöglicht es entfernten Benutzern, beliebige Dateien zu lesen. Verwendung python3 CVE-2018-18778-Scanner.py...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Progetto di ricerca educativo. Tutti i test sono stati eseguiti in un laboratorio Docker isolato. Non utilizzare contro sistemi che non possiedi. Riepilogo della vulnerabilità...

CVE-2026-47850 Spring Data REST allows mutation of the version property of immutable aggregates via PUT

Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...

CVE-2026-47850

Spring Data REST does not preserve the persisted @Version property of an aggregate root when handling an HTTP PUT against an immutable target type, allowing mutation of the version field. The issue is rated MEDIUM (CVSS 4.3) with a low integrity impact. Affected versions include 5.1.0 , 5.0.0–5.0...