vulnerability-exploitation

Exploitation de vulnérabilités Vulnérabilité d'élévation locale des privilèges - CVE-2019-13272 / Vulnérabilité de contournement de sécurité – CVE-2019-14287 / Google Android - 'Stagefright' Exécution de code à distance - CVE-2015-1538 Absolument, je choisis toujours une vulnérabilité Linux, mais...

yasuo

YASUO @0xsauby Description Yasuo est un script ruby qui recherche les applications web tierces vulnérables. Lors d’une évaluation de sécurité réseau interne, externe, missions redteam, etc., nous rencontrons souvent des applications web tierces vulnérables ou des interfaces web frontales qui nous...

nvd

nvd Быстрая и простая библиотека на Go для получения CVE из каналов NVD Национальной базы данных уязвимостей США. Установка root@kitploit: go get github.com/daehee/nvd Использование Пакет nvd предоставляет клиент Client для получения CVE из официальных каналов NVD: root@kitploit: // nvd client wi...

CVE-2022-22947-exp

CVE-2022-22947-exp Воспроизвел уязвимость CVE-2022-22947, написал эксплойт для ее использования Затем, опираясь на статью одного авторитетного специалиста, написал эксплойт для внедрения в память memory shell. Приведено только для ознакомления...

Ladon

Ladon Large-scale Intranet Penetration Scanner Cobalt Strike Plugin Memory Loading Program Introduction Ladon is a large-scale intranet penetration scanner, domain penetration, and lateral movement tool, featuring PowerShell modules, Cobalt Strike plugins, memory loading, and fileless scanning. I...

cve-2024-24919-checker

cve-2024-24919-checker...

w13scan

W13Scan W13scan is an open-source web vulnerability discovery tool based on Python3. It supports active and passive scanning modes and can run on Windows, Linux, and Mac. HTML template source code: w13scan-report Disclaimer Please comply with local laws before using W13Scan. W13Scan is provided f...

CVE-2019-2725

CVE-2019-2725...

vader

VADER: Человечески оценённый бенчмарк для оценки, обнаружения, объяснения и устранения уязвимостей Официальный GitHub-репозиторий:https://github.com/AfterQuery/vader Датасет на Hugging Face:https://huggingface.co/datasets/AfterQuery/vader VADER — это человечески оценённый бенчмарк , предназначенн...

CVE-2024-57727

CVE-2024-57727 CVE-2024-57727 python poc.py http://target root@kitploit: python poc.py https://192.168.32.130 + https://192.168.32.130 is vulnerable блог: https://rustlang.rs/posts/simple-help/...

Sharp Multifunction Printers - Directory Listing

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. id: CVE-2024-33605 info: name: Sharp Multifunction Printers - Directory Listing author: gy741 severity: hig...

CouchCMS <= 2.0 - Path Disclosure

CouchCMS = 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. id: CVE-2018-7662 info: name: CouchCMS = 2.0 - Path Disclosure author: ritikchaddha severity: medium description: CouchCMS = 2.0 allows...

Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect

Polarisft Intellect Core Banking Software Version 9.7.1 is susceptible to an open redirect issue in the Core and Portal modules via the /IntellectMain.jsp?IntellectSystem= URI. id: CVE-2018-14931 info: name: Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect author: 0xAkoko...

Eaton Intelligent Power Manager 1.6 - Directory Traversal

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. id: CVE-2018-12031 info: name: Eaton Intelligent Power Manager 1.6 - Directory Traversal author: daffainfo...

WordPress Hero Maps Premium <=2.2.1 - Cross-Site Scripting

WordPress Hero Maps Premium plugin 2.2.1 and prior contains an unauthenticated reflected cross-site scripting vulnerability via the views/dashboard/index.php p parameter. id: CVE-2019-19134 info: name: WordPress Hero Maps Premium =2.2.2 or apply the vendor-provided patch to fix the XSS...

WordPress Visualizer <3.3.1 - Cross-Site Scripting

WordPress Visualizer plugin before 3.3.1 contains a stored cross-site scripting vulnerability via /wp-json/visualizer/v1/update-chart WP-JSON API endpoint. An unauthenticated attacker can execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard...

Cisco Small Business 200,300 and 500 Series Switches - Open Redirect

Cisco Small Business 200,300 and 500 Series Switches contain an open redirect vulnerability in the Web UI. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2019-1943 info: name: Cisco Small...

WordPress Ultimate FAQs <= 1.8.24 – Unauthenticated HTML Content Injection

Functions/EWDUFAQImport.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection. id: CVE-2019-17233 info: name: WordPress Ultimate FAQs = 1.8.24 – Unauthenticated HTML Content Injection author: daffainfo severity: medium description: | Functions/EWDUFAQImport.ph...

IceWarp Mail Server <=10.4.4 - Local File Inclusion

IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal. id: CVE-2019-12593 info: name: IceWarp Mail Server =10.4.4 - Local File Inclusion author: pikpikcu severity: high description: | IceWarp Ma...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 contains a cross-site scripting vulnerability via assets/add/account-owner.php Owner name field. id: CVE-2018-19749 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 contains a cross-site scripting...