477631 matches found
CVE-2019-9787
CVE-2019-9787 CSRF PoC Обзор PoC CSRF для CVE-2019-9787 WordPress версии 5.1.1 CVE-2019-9787 Не используйте это, ЗА ИСКЛЮЧЕНИЕМ целей ТЕСТИРОВАНИЯ. Установка root@kitploit: docker-compose up -d Атака 1. Перейдите на http://localhost:8080/wp-admin/install.php и установите WordPress. Вам нужно толь...
laravel-8.4.2-rce
laravel-8.4.2-rce 環境のセットアップ root@kitploit: git clone https://github.com/laravel/laravel.git cd laravel git checkout e849812 composer install composer require facade/ignition==2.5.1 php artisan serve 使用方法 root@kitploit: python3 exploit.py http://pwnme.me:8000...
CVE-2026-37072
Veno File Manager Project 4.4.9 contains an Incorrect Access Control vulnerability in admin-head-updates.php. An unauthenticated attacker can exploit a Local File Inclusion flaw in the lang GET parameter by sending a crafted POST request to corrupt the configuration file. A subsequent GET request...
CVE-2026-37065
Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion via the endpoint /vfm-admin/index.php?section=translations&action=update. The root cause is the unsanitized remove URL parameter, which allows an attacker to specify which file to delete. The vulnerability requires an authen...
apache__dolphinscheduler_CVE-2023-49109_3-2-0
Apache Dolphinscheduler نبذة Apache DolphinScheduler هي منصة حديثة لتنسيق البيانات تتيح تطويرًا مرنًا ومنخفض الكود لسير عمل عالي الأداء. وهي مخصصة للتعامل مع التبعيات المعقدة بين المهام في خطوط معالجة البيانات، وتوفر مجموعة واسعة من أنواع المهام المدمجة جاهزة للاستخدام فورًا فيما يلي أبرز ميزات...
CVE-2022-31629-poc
CVE-2022-31629 पीओसी PHP बग रिपोर्ट कैसे परीक्षण करें इंस्टॉल root@kitploit: git clone https://github.com/SilNex/CVE-2022-31629-poc cd ./CVE-2022-31629-poc docker-compose up -d परीक्षण https://localhost:8110 : v8.1.10 https://localhost:8111 : v8.1.11 Chrome HSTS समस्या thisisunsafe को hsts पृष्ठ ...
HashTag
이름: HashTag: 비밀번호 해시 분석 및 식별 버전: 0.41 날짜: 11/05/2013 저자: Smeege 연락처: [email protected] 설명: HashTag.py는 비밀번호 해시를 분석하고 식별하기 위해 작성된 파이썬 스크립트입니다. 세 가지 주요 인수가 있습니다: 단일 해시 유형 식별-sh, 파일에서 여러 해시 분석 및 식별-f, 하위 디렉터리를 탐색하여 해시가 포함된 파일을 찾아 분석/식별-d입니다. 많은 일반적인 해시 유형이 CPU 및 GPU 크래킹 도구 Hashcat에서 지원됩니다. 추가...
CVE-2025-55182
Next.js CVE-2025-55182 – Scanner Automatico Python Questo repository contiene uno scanner PoC Python completamente automatizzato per CVE-2025-55182 , una vulnerabilità di sicurezza che colpisce Next.js 16.0.6. Lo strumento consente a ricercatori di sicurezza e cacciatori di bug bounty di testare...
CVE-2016-4463
CVE-2016-4463 Uma implementação do exploit CVE-2016-4463. Exploit para Xerces 3.1.3 e anteriores. Eu pretendia enviar isso para o Exploit-DB, mas não tenho um aplicativo de referência adequado para testar isso. O Java OpenSAML deve ser vulnerável, mas levará algum tempo para explorar isso...
CVE-2018-18778-Scanner
CVE-2018-18778-Scanner Scannt anfällige Versionen von minihttpd vor 1.30. ACME minihttpd vor 1.30 ermöglicht es entfernten Benutzern, beliebige Dateien zu lesen. Verwendung python3 CVE-2018-18778-Scanner.py...
APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Progetto di ricerca educativo. Tutti i test sono stati eseguiti in un laboratorio Docker isolato. Non utilizzare contro sistemi che non possiedi. Riepilogo della vulnerabilità...
CVE-2026-47850 Spring Data REST allows mutation of the version property of immutable aggregates via PUT
Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...
CVE-2026-47850
Spring Data REST does not preserve the persisted @Version property of an aggregate root when handling an HTTP PUT against an immutable target type, allowing mutation of the version field. The issue is rated MEDIUM (CVSS 4.3) with a low integrity impact. Affected versions include 5.1.0 , 5.0.0–5.0...
CVE-2023-42284
Aviso Apenas para fins educacionais! Detalhes Prova de conceito para CVE-2023-42284. Tyk Gateway é vulnerável a injeção SQL. Corrigido na versão 5.0.7. O parâmetro de URL ‘apiversion’ de "https:///api/errors/count/...?res=day&p=...&apiversion=&apiid=..." é vulnerável a injeção SQL cega. Exploraçã...
cups-script-final-project
Cosa fa Strumento di rilevamento in due fasi per CVE-2025-58060, vulnerabilità di bypass dell'autenticazione nel Common UNIX Printing System CUPS. Invece di affidarsi ai soli numeri di versione, lo strumento combina un controllo della versione basato sul banner con una sonda attiva di bypass...
CVE-2023-4596-OpenSSH-Multi-Checker
CVE-2024-6387-OpenSSH-Multi-Checker Das CVE-2024-6387-checker.sh Skript ist ein Werkzeug, das entwickelt wurde, um mehrere Ziele IPs oder Hostnamen gleichzeitig auf die Schwachstelle CVE-2024-6387 zu überprüfen. Dieses Skript führt eine lokale OpenSSH-Versionsprüfung durch, scannt entfernte Serve...
CVE-2020-13768
🐞 CVE-2020-13768: MiniShare 1.4.1 - Overflow del buffer basato su stack Overflow del buffer basato su stack in MiniShare 1.4.1 raggiungibile tramite una singola richiesta HTTP PUT. 📑 Indice Perché esiste questo repository Perché questa vulnerabilità è interessante Contesto e software interessato...
CVE-2022-31298
CVE-2022-31298 Haraj Script 3.7 - XSS Armazenado Autenticado Título do Exploit: Haraj Script 3.7 - XSS Armazenado Autenticado Data: 2022-06-13 CVE: CVE-2022-31298 Autor do Exploit: Abdulaziz Saad @b4zb0z Homepage do Fornecedor: https://angtech.org/ Link do Software:...
juumla
🦁 Juumla 🦁 Juumla Juumla è uno strumento Python creato per identificare la versione di Joomla, scansionare le vulnerabilità e i file sensibili. ⚡ Installazione / Per iniziare Una guida rapida su come installare e usare Juumla. root@kitploit:...