CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit

CVE-2019-5096 Use After Free DoS エクスプロイト root@kitploit: python TriggerDOS.py ip 脆弱性分析 https://github.com/embedthis/goahead.git GoAhead GitHubリンク git diff のパッチ 重要なコード解析 コード内でupload.c:370 を特定すると、以下の処理の前に root@kitploit: wp-currentFile=0 次のコードが実行される root@kitploit: typedef struct WebsUpload char...

CVE-2026-93306

IBM Power System firmware is affected by a vulnerability in the ASMI web interface (CWE-125: Out-of-bounds Read). An unauthenticated attacker on the management network can send a malformed HTTPS request , causing the web server to crash with possible memory corruption and generate an error log. W...

CVE-2026-93306 This Power System update is being released to address

IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a malformed HTTPS request to ASMI,...

EUVD-2026-87107

IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a malformed HTTPS request to ASMI,...

CVE-2024-54820

脆弱性: 認証不要のSQLインジェクション - 認証情報の平文ダンプ 著者 : Javier Carabantes 影響を受けるソフトウェア : XOne Web Monitor ソフトウェア : https://xone.es/ 影響を受けるバージョン : 02.10.2024.530 framework 1.0.4.9 説明 XOne Web Monitor バージョン 02.10.2024.530 framework 1.0.4.9...

CVE-2023-48842

CVE-2023-48842 ソース: D-Link Go-RT-AC750 revAv101b03 に、hedwig.cgi の service パラメータを介したコマンドインジェクションの脆弱性が発見されました。 https://drive.google.com/file/d/1y5omf2SAhNmcPqDxCSRTvJVAWwPcH/view ちょっとしたアップグレード: スクリプトを強化し、ステロイド級にパワーアップしました。このスクリプトは ip:port のリスト（ポートが指定されていない場合は ip のみ）を受け付け、マルチスレッドを使用し（Tren 効果...

strelka-ui

Releases | Pull Requests | Issues !Pull...

CVE-2020-28653

CVE-2020-28653 バージョン: 2016 - 2020 パッチ適用前 使用方法: root@kitploit: python exploit.py http://vuln-web.com...

Yasso

Yasso 강력한 내부 네트워크 침투 보조 도구 세트 - Yasso를 바람처럼 사용하세요. rdp, ssh, redis, postgres, mongodb, mssql, mysql, winrm 등 서비스 무차별 대입, 빠른 포트 스캔, 강력한 웹 핑거프린트 식별, 다양한 내장 서비스의 원클릭 익스플로잇ssh 완전 대화형 로그인, mssql 권한 상승, redis 원클릭 익스플로잇, mysql 데이터베이스 쿼리, winrm 횡적 활용, 여러 서비스 활용 시 socks5 프록시 실행 지원 포함 새 버전 기능 기존 방식에서 스캔 및...

CVE-2025-31161

CrushFTP CVE-2025-31161 エクスプロイトツール 🔓 脆弱なCrushFTPバージョンにおけるCVE-2025-31161脆弱性の高度な検出およびエクスプロイトツール。 CVE-2025-31161 は、CrushFTP Webインターフェースにおける重大な認証バイパス脆弱性です。HTTP Authorization ヘッダーを操作することで、認証されていない攻撃者が正しいパスワードを提供せずに任意の有効なユーザー名で完全なアクセスを得ることができます。 影響を受けるバージョン CrushFTP 9.3.8 CrushFTP 9.3.9 CrushFTP 9.3.10...

CVE-2021-31166

CVE-2021-31166 作った理由 私は最近、CVE-2021-31166 のエクスプロイトを作成しました。これは CVE-2021-31166 と CVE-2021-31166 を利用します。ペネトレーションテスターは https://github.com/mauricelambert/CVE-2021-31166 を使うべきですが、SOC チームは適切に修正するために特定の脆弱性を把握する必要があるため、このエクスプロイトを作成しました。 説明 脆弱な IIS Web サーバーを攻撃するための、純粋な Python、PowerShell、Ruby...

dirsearch

DirSearch 이 소프트웨어는 Mauro Soria가 작성한 원본 dirsearch 도구의 Go 구현체입니다. DirSearch는 제가 Go로 작성한 첫 번째 도구로, 주로 Go의 동시성 모델, 채널 등을 가지고 놀고 실험하기 위해 만든 것입니다 : 목적 DirSearch는 입력 URL-url 매개변수과 워드리스트-wordlist 매개변수를 받아서, 워드리스트의 각 줄을 경로와 파일로 사용하여 동시에 HEAD 요청을 수행하고, 웹 서버의 폴더와 파일을 브루트포스하게 됩니다. 사용자 정의 파일 확장자-ext, 기본값 php와...

altair

ALTAIR - 모듈식 웹 취약점 스캐너 Copyleft by Simone Margaritelli [email protected] http://www.evilsocket.net - http://www.backbox.org 사용법: altair options -u 예제: altair --filter=lfi,rfi --url=http://www.somesite.com altair --filter=sqli --load-modules=sqlmap --url=http://www.somesite.com 옵션: -h, --help...

CVE-2026-93647 Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address

An unauthenticated calendar sender can place active markup in a COUNTER message's RFC From address. Selecting the message in Zimbra Classic triggers stored XSS, allowing the attacker to access mailbox data and act as the victim...

CVE-2026-93647

The Zimbra Collaboration Suite Classic Web Client is vulnerable to a stored Cross-Site Scripting (XSS) flaw. An unauthenticated calendar sender can inject active markup into the RFC From address of a COUNTER message . When a user selects this message within Zimbra Classic, the XSS is triggered, p...

oss-oopssec-store

OSS - OopsSec Store Security training for the apps you actually ship. 36 challenges across web, API, authentication, business logic, cryptography, supply chain, AI agents and MCP. Break a deliberately vulnerable e-commerce app built on Next.js, React, TypeScript and Prisma. Find the bugs. Exploit...

CVE-2026-93642 Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation

An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Modern recipient clicks Accept Share, allowing the attacker to access mailbox data and act as the victim...

CVE-2026-93642

The Zimbra Collaboration Suite Modern Web Client is vulnerable to Stored Cross-Site Scripting (XSS) due to a flaw where an unauthenticated sender can forge a share notification. When a signed-in Zimbra Modern recipient clicks the Accept Share button, the XSS is triggered. This allows an attacker ...

CVE-2026-93641

The Zimbra Collaboration Suite Classic Web Client is vulnerable to Stored Cross-Site Scripting (XSS) . An unauthenticated sender can forge a share notification that, when clicked by a signed-in recipient, executes malicious scripts. This allows an attacker to access mailbox data and act as the vi...

CVE-2026-93641 Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation

An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Classic recipient clicks Accept Share, allowing the attacker to access mailbox data and act as the victim...