lockc

lockc is open source sofware for providing MAC Mandatory Access Control type of security audit for container workloads. The main reason why lockc exists is that containers do not contain. Containers are not as secure and isolated as VMs. By default, they expose a lot of information about host OS...

CVE-2025-25968

CVE-2025-25968: Improper Access Control vulnerability in DDSN Interactive cm3 Acora CMS version 10.1.1 DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator...

CVE-2020-13277

CVE-2020-13277 CVE-2020-13277 Lab: GitLab Logic Vulnerability - Unauthorized User Access to Private Repositories 0x10 Lab Environment 0x20 Directory Structure root@kitploit: CVE-2020-13277 ├── README.md ............... This README file ├── imgs .................... Images for README ├── gitlab...

CVE-2023-22515

CVE-2023-22515 Key Information about CVE-2023-22515 Affected Product: Atlassian Confluence Data Center & Confluence Server. Disclosure Date: 04/10/2023. Severity: Critical CVSS 10.0. Vulnerability Type: Broken Access Control / Improper Authorization → allows an attacker to remotely create an admi...

EUVD-2026-76739

A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits routes that modify tags attached to stored session records, and the proxy configuration otherwise permits the request...

EUVD-2026-76745

A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...

vault

Vault 请注意 ：我们非常重视Vault的安全性和用户的信任。如果您认为发现了Vault的安全问题，请通过[email protected]联系我们进行负责任的披露 。 网站：developer.hashicorp.com/vault 公告列表：Google Groups 讨论论坛：Discuss 文档：https://developer.hashicorp.com/vault/docs 教程：https://developer.hashicorp.com/vault/tutorials...

CVE-2020-11539

CVE-2020-11539: Improper Access Control in Tata Sonata Smartband Information Description: It has been identified that the smart band has no pairing mode 0 BLE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't hav...

CVE-2018-11759

CVE-2018-11759 Proof of concept Description The Apache Web Server httpd specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported b...

CVE-2024-36842-Backdooring-Oncord-Android-Sterio-

CVE-2024-36842 Backdooring-Oncord+ Android-Sterio We have conducted vulnerablity assessment on one of the most selling after marrket car infotainment unit. Creating Persistent Backdoor on Oncord+ android/ios car infotainment unit using malicious script! About Device: Android version : 12 Kernel...

Backdooring-ZMM100-FingerPrint-Devices

Hacking Embedded Devices : root@kitploit: Hardware platform ZMM100 : The fingerprint access control device Made by ZKSoftware. Default User/Password : root:solokey Protocol : Telnet 23. Scripts : pwnit.py : Automated tool for hacking devices. hell : second backdoor. leak-data.sh : third backdoor...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

CVE-2022-1442

CVE-2022-1442 WordPress Plugin Metform = 2.1.3 - Improper Access Control Allowing Unauthenticated Sensitive Information Disclosure Description The is vulnerable to sensitive information disclosure due to improper access control in the /core/forms/action.php file which can be exploited by an...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

CVE-2023-31595

CVE-2023-31595 IC Realtime ICIP-P2012T 存在通过开放端口导致的访问控制不当漏洞 IC Realtime IP PTZ 球型摄像机 ICIP-P2012 软件版本：2.420 开放的端口（9989）会在请求时返回实时快照，通过脚本可利用此漏洞每隔 x 秒获取实时图像。该漏洞严重危及数据的机密性，并可在侦察阶段（识别人员、密码等）被用于任何威胁。 漏洞利用 - 概念验证（POC） 1- 扫描摄像机的 IP，检查端口 9989 是否开放。 2- 如果端口开放，运行 capture.sh sudo chmod +x capture.sh ./capture....

cve-2022-31813

CVE-2022-31813 Vulnerability Checker Author : Derek Odiorne GitHub : @dodiorne Version : 1.2 Last Updated : May 21, 2025 MITRE ATT &CK Technique: T1190 – Exploit Public-Facing Application 🧠 Description This tool is a black-box vulnerability scanner for detecting CVE-2022-31813 , a path traversal...

CVE-2020-14064

Icewarp Email Server 12.3.0.1 incorrectaccesscontrol https://nvd.nist.gov/vuln/detail/CVE-2020-14064...

adminer_CVE-2021-43008

CVE-2021-43008 — Adminer Vulnerability Arbitrary file reading via a malicious MySQL server 1. What is Adminer? Adminer is a web tool PHP for easily administering MySQL, PostgreSQL, SQLite or SQL Server databases. It is commonly deployed as a lightweight alternative to phpMyAdmin. Affected...

confluence-cve-2023-22515

confluence-cve-2023-22515 Confluence Broken Access Control : CVE-2023-22515...

CVE-2022-0492

CVE-2022-0492 容器逃逸分析 toc 漏洞简介 漏洞编号: CVE-2022-0492 漏洞产品: linux kernel - cgroup 影响版本: linux kernel 5.17-rc3 漏洞危害: 当容器没有开启额外安全措施时，获得容器内root 权限即可逃逸到宿主机 环境搭建 在存在漏洞版本的内核的linux中使用docker 即可。 root@kitploit: 关闭所有安全防护启动docker docker run --rm -it -h cve --name cve --security-opt="seccomp=unconfined"...