kiterunner

Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...

CVE-2026-35616-detector.py

CVE-2026-35616 - FortiClient EMS 취약점 탐지기 설명 이 도구는 FortiClient EMS 서버가 CVE-2026-35616 에 취약한지 탐지합니다. 이는 7.4.5부터 7.4.6까지 의 버전에 영향을 미치는 심각한 부적절한 접근 제어 취약점입니다. CVSS 점수: 9.1 치명적 CWE: CWE-284 부적절한 접근 제어 상태: 실제 환경에서 활발히 악용 중 citation:3citation:7 이 취약점은 인증되지 않은 공격자 가 보호된 API 엔드포인트에 접근하고 잠재적으로 서버에서 임의의 명령을...

CodeChecker <= 6.24.1 - Authentication Bypass

Authentication bypass occurs when the API URL ends with Authentication, Configuration or ServerInfo. This bypass allows superuser access to all API endpoints other than Authentication. These endpoints include the ability to add, edit, and remove products, among others. id: CVE-2024-10081 info:...

NestJS DevTools Integration - Remote Code Execution

Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...

WordPress AI Engine Plugin - Token Exposure

Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...

Frigate < 0.13.0 Beta 3 - Cross-Site Scripting

Frigate is an open source network video recorder. Before version 0.13.0 Beta 3, there is a reflected cross-site scripting vulnerability in any API endpoints reliant on the / base path as values provided for the path are not sanitized. Exploiting this vulnerability requires the attacker to both kn...

CVE-2023-23752

CVE-2023-23752 — Joomla! ⚠️ 免责声明： 此工具仅供教育目的和授权渗透测试使用。仅可针对您拥有或已获得明确书面许可的系统进行测试。未经授权的使用是非法的。 目录 概述 漏洞详情 工作原理 要求 安装 用法 示例 缓解措施 鸣谢 参考 概述 Joomla! 是使用最广泛的开源内容管理系统（CMS）之一。版本 4.0.0 至 4.2.7 暴露了两个没有适当访问控制的 API 端点，允许未授权 的攻击者获取敏感信息：已注册的用户帐户，以及在易受攻击的配置中，网站的数据库凭据。 该漏洞由 NSFOCUS 天机实验室的 Zewei Zhang 发现并向 Joomla!...

CVE-2023-23752-poc

Уязвимые версии 4.0.0 = 4.2.8 Joomla 3 и более ранние версии не подвержены этой уязвимости http://127.0.0.1/Joomla/api/index.php/v1/config/application?public=true Этот API используется для получения наиболее важной конфигурационной информации сайта, включая учетные данные базы данных...

CVE-2022-36804

CVE-2022-36804 Atlassian Bitbucket Server 和 Data Center 命令注入漏洞 CVE-2022-36804 在受影响的 Atlassian Bitbucket Server 和 Data Center 版本中，多个 API 端点存在命令注入漏洞，攻击者若能访问公共仓库或拥有私有 Bitbucket 仓库的读取权限，可通过发送恶意 HTTP 请求执行任意代码。 漏洞目标搭建 root@kitploit: docker pull atlassian/bitbucket-server:7.2.5-ubuntu-jdk11 docker run -...

CVE-2026-35616

CVE-2026-35616 — FortiClient EMS 사전 인증 우회 FortiClient Endpoint Management Server 인증 우회CVE-2026-35616에 대한 개념 증명PoC 이 스크립트는 FortiClient EMS의 인증 우회 취약점을 악용하여 보호된 API 엔드포인트에 대한 인증되지 않은 접근을 허용합니다. 영향을 받는 버전 FortiClient EMS 7.4.5, 7.4.6 패치된 버전 FortiClient EMS 7.4.7 요구 사항 root@kitploit: pip install...

py3webfuzz

Py3webFuzz ';-- Python Web Fuzzing module Library Python3 Module Compatible Author Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz Contributors Nathan Hamiel @nathanhamiel DESCRIPTION Based on pywebfuzz, Py3webfuzz is a Python3 module to assist in the identification of...

py3webfuzz

Py3webFuzz ';-- Библиотека модулей для веб-фаззинга на Python Совместимо с Python3 Автор Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz Участники проекта Nathan Hamiel @nathanhamiel ОПИСАНИЕ Основанный на pywebfuzz, Py3webfuzz — это модуль Python3 для помощи в выявлении...

halo-cors-csrf-CVE-2026-67921

CVE-2026-67921: Halo CMS CORS 오설정 + CSRF 보호 우회 결합 공격 요약 Halo CMS 2.25.4 이하 버전에는 두 가지 보안 오설정으로 인한 심각한 결합 공격 취약점이 존재합니다: 1. CORS 오설정 : CORS 정책이 credentials: true와 함께 모든 오리진을 허용합니다. 2. CSRF 보호 우회 : 모든 API 엔드포인트/api/, /apis/가 CSRF 보호에서 제외됩니다. 이 두 가지가 결합되면, 공격자는 CORS가 강제하도록 설계된 Same-Origin Policy 보호를...

rewerse-engineering

rewerse engineering Dieses Repository zielt darauf ab, alle öffentlich zugänglichen nicht authentifizierten API-Endpunkte der Rewe-App zu implementieren, mit denen aktuelle Rabatte, Produkte, Rezepte und Rückrufe abgefragt werden können. Aktuell unterstützte APK-Version: 5.15.2 Stand: 12.07.26...

cve-2022-36804

CVE-2022-36804：Atlassian Bitbucket Server 中的预认证 RCE 在 Atlassian Bitbucket Server 和 Data Center 的多个 API 端点中发现了一个严重命令注入漏洞。该漏洞影响所有版本低于 、、、、、 和 的 Bitbucket Server 和 Data Center。 CVE-2022-36804 实验环境 构建 Docker root@kitploit: docker build -t bitbucket . 运行 Docker...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 एक प्रमाणीकरण बाईपास है जिसके परिणामस्वरूप Joomla! सर्वरों पर सूचना रिसाव होता है। हालांकि NVD द्वारा इसे CVSSv3 5.3 मध्यम गंभीरता के रूप में रेट किया गया है, यह कमजोरी सही परिस्थितियों में एक हमलावर को कोड निष्पादन प्राप्त करने की अनुमति दे सकती है। यह संभवतः हमलावर...

CVE-2026-62249

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...

Atlassian-Bitbucket-CVE-2022-36804

Atlassian-Bitbucket-Server-CVE-2022-36804 Una vulnerabilità critica di command injection è stata trovata in più endpoint API di Atlassian Bitbucket Server e Data Center. Questa vulnerabilità interessa tutte le versioni di Bitbucket Server e Data Center rilasciate prima delle versioni , , , , , e...

CVE-2025-7775-vulnerable-lab

CVE-2025-7775 Verwundbares Labor Dieses Repository bietet ein verwundbares Setup zum Testen des nuclei-Templates für CVE-2025-7775. Ausführen root@kitploit: docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app Schwachstellentests 1. Remote-Befehlsausführung RCE...

API-s-for-OSINT

API per OSINT root@kitploit: Questa è una raccolta di API utili per automatizzare vari compiti in OSINT. Istruzioni per principianti assoluti: Automazione OSINT: utilizzo di funzioni personalizzate per lavorare con richieste API in Google Sheets Grazie per avermi seguito! https://cybdetective.com...