169041 matches found
Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)
Concrete CMS = 9.5.0 contains an IDOR caused by insufficient access control in /ccm/frontend/conversations/messagedetail endpoint, letting unauthenticated attackers enumerate conversation messages and attachments. id: CVE-2026-8237 info: name: Concrete CMS = 9.5.0 - Unauthenticated Conversation...
lockc
lockc is open source sofware for providing MAC Mandatory Access Control type of security audit for container workloads. The main reason why lockc exists is that containers do not contain. Containers are not as secure and isolated as VMs. By default, they expose a lot of information about host OS...
CVE-2025-25968
CVE-2025-25968：DDSN Interactive cm3 Acora CMS 10.1.1 版本中的访问控制不当漏洞 DDSN Interactive cm3 Acora CMS 10.1.1 版本存在访问控制不当漏洞。具有编辑者权限的用户可通过强制浏览端点并利用“file”参数，访问敏感信息（如系统管理员凭据）。通过引用特定文件（例如 cm3.xml），攻击者可绕过访问控制，进而导致账户接管和潜在的权限提升。 受影响版本：Acora CMS v10.1.1 由 Crowe India 的 Joby Y Daniel 发现。...
CVE-2020-13277
CVE-2020-13277 CVE-2020-13277 靶场： Gitlab 逻辑漏洞 - 任意用户越权访问私有仓库 0x10 靶场环境 0x20 目录结构 root@kitploit: CVE-2020-13277 ├── README.md ............... 此 README 说明 ├── imgs .................... 辅助 README 说明的图片 ├── gitlab .................. Gitlab 容器的挂载目录 │ ├── Dockerfile .......... Gitlab 的 Docker 构建文件 │ ├─...
CVE-2023-22515
CVE-2023-22515 关于 CVE-2023-22515 的主要信息 受影响产品: Atlassian Confluence Data Center & Confluence Server。 公开日期: 2023年10月4日。 严重程度: Critical（CVSS 10.0）。 漏洞类型: Broken Access Control / Improper Authorization → 允许攻击者远程创建管理员账户 。 漏洞位于 Confluence setup 机制 中。 影响范围: Confluence Data Center & Server 8.0.0 → 8.5.1 ...
EUVD-2026-76739
A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits routes that modify tags attached to stored session records, and the proxy configuration otherwise permits the request...
EUVD-2026-76745
A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...
nomore403
NoMore403 nomore403 是一个命令行工具，用于测试 HTTP 访问控制绕过以及 401、403 及相关响应中的解析器不一致性。 该工具专为实际 Web 安全工作设计：漏洞赏金、渗透测试、安全审查以及访问控制规则的回归测试。它自动化执行一组广泛的请求变异，捕获基线，过滤常见误报，并突出显示最可能表示有意义绕过的响应。 工具功能 给定一个目标 URL，nomore403 会： 1. 发送一个基线请求以捕获被阻止的响应。 2. 可选地自动校准不存在的路径，以了解目标的默认错误行为。 3. 运行一组绕过技术，这些技术会变异请求路径、方法、标头或线路格式。 4...
vault
Vault 请注意 ：我们非常重视Vault的安全性和用户的信任。如果您认为发现了Vault的安全问题，请通过[email protected]联系我们进行负责任的披露 。 网站：developer.hashicorp.com/vault 公告列表：Google Groups 讨论论坛：Discuss 文档：https://developer.hashicorp.com/vault/docs 教程：https://developer.hashicorp.com/vault/tutorials...
CVE-2020-11539
CVE-2020-11539：Tata Sonata 智能手环存在不当访问控制 信息 描述： 已识别出该智能手环没有配对（BLE 安全级别模式 0），空中传输的数据未加密。此外，发送到智能手环的数据没有任何身份验证或签名验证，使得任何攻击者都能控制智能设备的参数。 影响版本： Smart SF Rush - 1.12 研究人员： Sayli Ambure https://twitter.com/sayliambure MITRE CVE 链接： https://vulners.com/cve/CVE-2020-11539 概念验证漏洞利用 描述...
CVE-2018-11759
CVE-2018-11759 Proof of concept Description The Apache Web Server httpd specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported b...
cerbos
¿Qué es Cerbos? Cerbos es una capa de autorización que evoluciona junto con tu producto. Te permite definir reglas de control de acceso potentes y sensibles al contexto para los recursos de tu aplicación mediante políticas YAML simples e intuitivas, gestionadas y desplegadas a través de tu...
CVE-2024-36842-Backdooring-Oncord-Android-Sterio-
CVE-2024-36842 Backdooring-Oncord+ Android-Sterio We have conducted vulnerablity assessment on one of the most selling after marrket car infotainment unit. Creating Persistent Backdoor on Oncord+ android/ios car infotainment unit using malicious script! About Device: Android version : 12 Kernel...
Backdooring-ZMM100-FingerPrint-Devices
Hacking Embedded Devices : root@kitploit: Hardware platform ZMM100 : The fingerprint access control device Made by ZKSoftware. Default User/Password : root:solokey Protocol : Telnet 23. Scripts : pwnit.py : Automated tool for hacking devices. hell : second backdoor. leak-data.sh : third backdoor...
audit_couchdb
Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...
CVE-2022-1442
CVE-2022-1442 WordPress Plugin Metform = 2.1.3 - Improper Access Control Allowing Unauthenticated Sensitive Information Disclosure Description The is vulnerable to sensitive information disclosure due to improper access control in the /core/forms/action.php file which can be exploited by an...
ninjasworkout
Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...
CVE-2023-31595
CVE-2023-31595 IC Realtime ICIP-P2012T 存在通过开放端口导致的访问控制不当漏洞 IC Realtime IP PTZ 球型摄像机 ICIP-P2012 软件版本：2.420 开放的端口（9989）会在请求时返回实时快照，通过脚本可利用此漏洞每隔 x 秒获取实时图像。该漏洞严重危及数据的机密性，并可在侦察阶段（识别人员、密码等）被用于任何威胁。 漏洞利用 - 概念验证（POC） 1- 扫描摄像机的 IP，检查端口 9989 是否开放。 2- 如果端口开放，运行 capture.sh sudo chmod +x capture.sh ./capture....
cve-2022-31813
CVE-2022-31813 Vulnerability Checker Author : Derek Odiorne GitHub : @dodiorne Version : 1.2 Last Updated : May 21, 2025 MITRE ATT &CK Technique: T1190 – Exploit Public-Facing Application 🧠 Description This tool is a black-box vulnerability scanner for detecting CVE-2022-31813 , a path traversal...