CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware

CVE-2023-33105: DoS عابر في مضيف WLAN والبرامج الثابتة نظرة عامة يحتوي هذا المستودع على كود الاستغلال لـ CVE-2023-33105، وهي ثغرة أمنية تم اكتشافها في أجهزة Qualcomm. يستغل الكود إطارات المصادقة لتنفيذ هجوم حجب الخدمة DoS على نقطة وصول AP مستهدفة عن طريق إرسال عدد كبير من إطارات المصادقة المفتوحة...

CVE-2017-14263

HoneywellNVRvul CVE-2017-14263 xfuturesec Co., Ltd Primeiro, obtenha o SessionID para um usuário convidado. Podemos encontrar o SessionID em qualquer requisição HTTP. Por exemplo: POST https://192.168.1.104/RPC2 HTTP/1.1 Accept: text/javascript, text/html, application/xml, text/xml...

CVE-2018-14847

CVE-2018-14847 Erstelle einen globalen Proxy basierend auf RouterOS via CVE-2018-14847 Wie man es verwendet Vorbereitung root@kitploit: pip3 install paramiko ipcalc optparse hashlib Verwendung für IP-Liste root@kitploit: python3 loop.py -f list.txt für einzelne IP root@kitploit: python3 loop.py i...

CVE-2025-6934

CVE-2025-6934 – WordPress Opal Estate Pro का शोषण 📖 विवरण इस रिपॉजिटरी में CVE-2025-6934 के लिए Proof of Concept PoC exploit शामिल है, जो WordPress प्लगइन: Opal Estate Pro = 1.7.5 में एक गंभीर भेद्यता है, जो बिना प्रमाणीकरण के व्यवस्थापक खाता बनाने की अनुमति देती है। ⚠️ अस्वीकरण : यह उपकरण केवल...

CVE-2022-31813

Avvia il campo di tiro docker compose up --build Accesso normale root@kitploit: GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

CVE-2023-23752

CVE-2023-23752 - Riproduzione della vulnerabilità di accesso non autorizzato a Joomla Utilizzo dello script Installa le librerie python pip install -r requirements.txt Verifica della vulnerabilità python3 CVE-2022-26134check.py -u url -c whoami Scansione batch python3 CVE-2023-23752.py -f...

CVE-2026-12561

CVE-2026-12561 affects the tagDiv Composer WordPress plugin in all versions up to and including 5.4.5 . The vulnerability is a Stored Cross-Site Scripting flaw in the vc_raw_html::render() method. The method base64-decodes shortcode content and concatenates the result directly into page HTML with...

CVE-2026-12561 tagDiv Composer <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vcrawhtml shortcode in all versions up to and including 5.4.5. This is due to insufficient input sanitization and output escaping in the vcrawhtml::render method, which base64-decodes shortcode content...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 Un Proof of Concept per il Bypass di Autenticazione di Fortinet FortiOS Vedi il nostro post sul blog per i dettagli tecnici Rilevamento in azione root@kitploit: python CVE-2024-55591-PoC.py --host 192.168.1.5 --port 443 --command "get system status" --user watchTowr --ssl / | | |\ ...

watchTowr-vs-Check-Point-CVE-2026-50751

CVE-2026-50751 Un Generatore di Artefatti di Rilevamento per il bypass dell'autenticazione tramite certificato IKEv1 di Check Point Remote Access VPN. https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e Vedi il nostro post sul blog per i dettagli tecnici. Rilevamento i...

CVE-2026-48907

CVE-2026-48907 CVE-2026-48907 est une vulnérabilité critique de contrôle d'accès inadéquat dans l'extension JCE Editor pour Joomla. Elle permet à des attaquants non authentifiés de créer de nouveaux profils d'éditeur, ce qui peut finalement conduire à un téléchargement arbitraire de fichiers PHP ...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099 - Vulnerabilidade de Injeção SQL no Online-Nurse-Hiring-System v1.0 Autor do Exploit: ugurkarakoc Página do Fornecedor https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Link do Software https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Visão Geral O...

CVE-2026-36436-Public-Reference-Pack

CVE-2026-36436-Public-Reference-Pack Resumo Uma vulnerabilidade no Trisolutions BRPerfX versão 1.4.4.0 expõe credenciais LDAP em texto simples na interface de configuração administrativa. Um administrador autenticado pode inspecionar o código do lado do cliente usando ferramentas padrão de...

-CVE-2021-4034

Отчет об эксплуатации CVE-2021-4034 PwnKit Официальное резюме оценки безопасности Контролируемые доказательства эксплуатации CVE-2021-4034 с документированным воздействием и рекомендациями по устранению. Метаданные отчета Поле| Значение ---|--- CVE ID| CVE-2021-4034 Название уязвимости| PwnKit...

CVE-2020-25867

CVE-2020-25867 : Bypass della chiave di condivisione di SoPlanning Informazioni Versione vulnerabile : 1.46.01 Versione corretta : 1.47 e successive CVE : CVE-2020-25867 Cronologia 26/06/2020 : Questo report di vulnerabilità è stato inviato al venditore 21/07/2020 : La vulnerabilità è stata...

CVE-2025-49132-PoC

Guia para usar o script que explora o Path Traversal do Pterodactyl no locale.json Requisitos Servidor Redis exposto URL do painel Guia 1. Obtenha acesso ao arquivo de configuração do servidor, que contém APPKEY e a senha + IP do banco de dados Redis 2. Use forgecookie para gerar um cookie...

CVE-2022-42176

PCSecure V5.0.8.xw - L'uso di credenziali hard-coded nei file di configurazione porta all'accesso al pannello di amministrazione Sommario Fornitore: PCTechSoft SAS Prodotto: PCSecure Versionei interessatae: 5.0.8.xw Nome in codice: PapiQuieroPollo00 Vulnerabilità Tipo: Uso di credenziali hard-cod...

cve-2024-38819

CVE-2024-38819 01. File-Traversal und Webflux Überblick 1 File-Traversal und WebFlux Überblick File-Traversal Pfad-Traversal, Path Traversal Schwachstelle ist eine Schwachstelle, die es Angreifern ermöglicht, Dateisystemberechtigungen in Webanwendungen zu umgehen und auf beliebige Dateien...

CVE-2024-25169-Mezzanine-v6.0.0

Producto: Mezzanine CMS Versão: v6.0.0 Data encontrada: 10.01.2024. Data reportada: 10.01.2024. Tipo de vulnerabilidade: Controle de Acesso Incorreto. ID CVE: CVE-2024-25169 Descrição: Um problema no Mezzanine v6.0.0 permite que atacantes contornem mecanismos de controle de acesso no painel de...

keycloak__keycloak_CVE-2022-4361_21-1-1

Keycloak Keycloak è una soluzione Open Source di Identity and Access Management per applicazioni e servizi moderni. Questo repository contiene il codice sorgente per il server Keycloak, gli adapter Java e l'adapter JavaScript. Aiuto e Documentazione Documentazione Lista di posta utenti - Lista di...