kong-pwn

kong-pwn Usa la KongAPI esposta per agire come un proxy e ottenere URL di metadata o URL interni. CVE-2020-11710 - Non è una vulnerabilità, è una errata configurazione. Come usarlo root@kitploit: usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are require...

magnolia-rce

Exploit-Titel: Magnolia DX Core 6.3.8 - Befehlsinjektion Datum: 05/16/2025 Exploit-Autor: tmrswrr Version: 6.3.8 Hersteller-Homepage: https://docs.magnolia-cms.com/home/ Produkt: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8/ 1. Als Administrator...

CVE-2024-54363

CVE-2024-54363 Wp NssUser Register successful, just Check this: Login...

cve-2024-0012-poc

cve-2024-0012-poc CVE-2024-0012 è una vulnerabilità di bypass dell'autenticazione nel software PAN-OS di Palo Alto Networks. Questa vulnerabilità consente a un attaccante non autenticato di accedere all'interfaccia web di amministrazione tramite la rete, ottenendo i privilegi di amministratore di...

sqlmate

sqlmate Ci sono alcune funzionalità che pensiamo SQLMap dovrebbe avere. Come trovare il pannello di amministrazione del target, un miglior cracking degli hash, ecc. Se la pensi allo stesso modo, SQLMate fa per te. Cosa fa? Fornisci un dork di SQL injection tramite l'opzione --dork e troverà siti...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

EUVD-2026-63794

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

CVE-2026-76156

Datiphy Data Management Center v8.3.0 through v8.5.1 has an OS command injection flaw (CWE-78) in its API endpoint, allowing authenticated administrators to execute arbitrary OS commands as root. No patch version or workaround is mentioned in the provided documents. Exploitation details are not p...

f609-brute

f609-brute f609-brute é uma ferramenta simples de força bruta para roteadores ZTE F609 da Telkom Indonesia. Como a Telkom Indonesia implementa TR-069 nos modems ZTE F609, eles atualizam rotineiramente a senha de administrador. f609-brute é executado no Python 2.7. Uso usage: python f609.py Exempl...

EUVD-2026-63759

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...

EUVD-2025-210758

The Library Corporation LS2 Admin v5.7 to v5.8.0 was discovered to contain an information disclosure vulnerability...

PT-2026-79398

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

PT-2026-79310

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

PT-2026-79293

The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field Values in all versions up to, and including, 2.0.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

Linux Distros Unpatched Vulnerability : CVE-2026-77648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from t...

PT-2026-79399

Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain...

Oracle Business Intelligence Enterprise Edition (OAS 26.01) (August 2026 CSPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 26.01.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API...

Oracle Business Intelligence Enterprise Edition (OAS 8.2) (August 2026 CSPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 8.2.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API...

DEBIAN-CVE-2026-77648

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...