92577 matches found
CVE-2026-88895
CyberPanel before 3.0.5 fails to enforce two-factor authentication (TOTP) on its API endpoints. Attackers who obtain an administrator's password can derive API tokens from that password and perform administrative operations or create authenticated sessions without the second factor. The vulnerabi...
EUVD-2026-75419
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the ADServer plugin's log.php endpoint that fails to escape the label parameter before storage. An unauthenticated attacker can inject malicious HTML through the label parameter,...
CVE-2026-88869
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is affected by a stored cross-site scripting (XSS) vulnerability in the AD_Server plugin 's log.php endpoint. The endpoint fails to escape the label parameter before storage, allowing an unauthenticated attacker to inject malicious HT...
CVE-2025-63420
CVE-2025-63420 在 11.3.757 之前的 CrushFTP11 中，CrushFTP 管理面板（报告 / “Who Created Folder”）存在存储型 HTML 注入漏洞，可在管理会话中持久执行 HTML。 CWE CWE-79 — 网页生成过程中输入的不当中和（跨站脚本） CVSS v3.1 基础评分：4.1（中危） root@kitploit: AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N 已在以下版本中修复 如供应商变更日志（ https://crushftp.com/version11build.html ）所述，11.3.75...
Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013
Reconnaissance and Exploitation: Apache HTTP Server Vulnerabilities - CVE-2021-41773 and CVE-2021-42013 In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal a...
CVE-2020-29607-POC
Pluck CMS 4.7.13 ファイルアップロード RCE エクスプロイト 🚨 教育用リモートコード実行エクスプロイト 🚨 作成者: Ron Jost Hacker5preme 参照: Exploit-DB CVE: CVE-2020-29607 ⚠️ 免責事項: このスクリプトは教育および許可されたテスト目的 にのみ使用してください。自分が所有していない、または明示的なテスト許可がないシステムでは使用しないでください。作成者および貢献者は、このツールの誤用や損害に対して一切の責任を負いません。 🎯 これは何ですか？ これは、Pluck CMS 4.7.13...
CrushFTP-AS2-Bypass-Research-CVE-2025-54309
CrushFTP AS2 Authentication Bypass Research ⚠️ IMPORTANT: This vulnerability has been patched by CrushFTP as of November 2025. This research is published for educational and defensive purposes only. 📝 NOTE: This research is based on vulnerability patterns similar to CVE-2025-54309. The exact CVE...
CVE-2025-14736
CVE-2025-14736 Frontend Admin by DynamiApps - Unauthenticated Privilege Escalation Author: Hyun Chiya Vulnerability Information Field| Value ---|--- CVE ID| CVE-2025-14736 Plugin| Frontend Admin by DynamiApps Affected Versions| B"Extract Nonce acfnonce & Form ID acfform" B -- C"Construct POST...
CVE-2017-12542
CVE-2017-12542 This script checks if an HP iLO server is vulnerable and can add an admin user...
CVE-2024-36985
CVE-2024-36985 所有漏洞利用代码均由gemini生成。 需要Splunk管理员角色。需要启用Splunkarchiver应用程序。 您也可以在搜索中运行以下SPL来触发RCE。 root@kitploit: | copybuckets data=""providers": "pwnprovider": "command.arg.0": "/opt/splunk/etc/apps/splunkarchiver/java-bin/jars/sudobash", "command.arg.1": "-c", "command.arg.2":...
CVE-2025-64027
Product Info Snipe-IT is a free and open-source IT asset management system FOSS built on Laravel. It provides hardware asset tracking, software license management, accessories, and consumables inventory features for IT operations teams. It is actively maintained and updated frequently. Summary A...
Exploit_CVE-2021-24762
exploitcve-2021-24762 This repo shows an exploit to CVE-2021-24762. This is an Blind SQLi exploit that, on default config, greps the admin password. While doing a lab, based on Wordpress with PerfectSurvey plugin, I stucked on a sql vulnerability. The only available PoC I found were based on sqlm...
CVE-2026-78302
Joomla Extension - joomshaper.com - Unauthenticated Stored Cross-Site Scripting XSS via Unescaped Output in Views and Admin Lists in SP Property 4.1.4 - Multiple template files across frontend views and administrator list tables rendered attributes and text values directly into HTML without...
CVE-2026-78302
SP Property (Joomla Extension by joomshaper.com) versions below 4.1.4 are affected by an unauthenticated Stored XSS vulnerability. Multiple template files across frontend views and administrator list tables rendered attributes and text values directly into HTML without contextual escaping , allow...
CVE-2025-2825
CVE-2025-2825/CVE-2025-31161 Introduction This document presents a security analysis of vulnerability CVE-2025-2825 affecting the server component of CrushFTP — a commercial solution for file transfer and storage FTP, SFTP, HTTP/S, S3-like interfaces, etc.. The defect is classified as an...
CVE-2025-56311
CVE-2025-56311: Aviso de seguridad – Vulnerabilidad CSRF en la función de reinicio del router FD602GW-DX-R410 Prueba de concepto y aviso de seguridad para una vulnerabilidad de falsificación de solicitudes entre sitios CSRF en la interfaz de administración del router de fibra FD602GW-DX-R410...
Custom-Nuclei-Templates
自定义 Nuclei 模板 这个 Nuclei 模板集合旨在增强你的安全测试能力。我制作了一些自定义模板，并且随着时间推移可能会添加更多。 简介 Nuclei 是一款功能强大的工具，可用于快速且可自定义的漏洞扫描。此仓库包含我为好玩而制作的一组自定义模板。 安装 克隆此仓库并将模板放到你的 Nuclei 模板目录中： root@kitploit: git clone https://github.com/K3ysTr0K3R/Custom-Nuclei-Templates.git cd custom-nuclei-templates Copy templates to Nuclei...
CVE-2026-5118
CVE-2026-5118 — Divi Form Builder = 5.1.2 — 認証なし権限昇格（ロールインジェクション） 🔥 脆弱性概要 WordPressプラグイン Divi Form Builder バージョン 5.1.2以下 には、認証なし権限昇格 の脆弱性が存在します。この深刻な欠陥により、認証されていない攻撃者 が、Divi Form Builder のフォーム（お問い合わせフォーム、見積フォーム、ニュースレターフォーム、その他DFB対応フォーム）を介して、直接 Administrator アカウントを作成できます。...