strelka-ui

Releases | Pull Requests | Issues !Pull...

CVE-2024-28987

CVE-2024-28987 Explotación de Prueba de Concepto para CVE-2024-28987: Vulnerabilidad de Credenciales Codificadas en SolarWinds Web Help Desk Resumen Extrae hasta 25 tickets más recientes limitación de la API Recupera los detalles completos de cada ticket Analiza los IDs de los tickets para estima...

CVE-2024-42327

PoC for CVE-2024-42327 / ZBX-25623 A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the...

CVE-2019-14537

YOURLS: CVE-2019-14537 PoC When you get a valid timestamp you will be able to make requests to the api. http://domain.com/yourls-api.php?signature=0e1&action=db-stats&timestamp=VALIDTIMESTAMP Usage root@kitploit: usage: main.py -h --vhost VHOST --threads THREADS --path PATH --port PORT ip...

CVE-2025-24016

Wazuh Ejecución Remota de Código RCE - PoC Resumen de la Vulnerabilidad Este repositorio demuestra la vulnerabilidad de ejecución remota de código RCE en el servidor Wazuh, introducida por una deserialización insegura en el paquete wazuh-manager. La vulnerabilidad permite a atacantes remotos con...

Wazuh - Unsafe Deserialization Remote Code Execution

A critical Remote Code Execution RCE vulnerability exists in Wazuh server versions = 4.4.0 and = 4.4.0 and 4.9.1. The vulnerability occurs due to unsafe deserialization in the wazuh-manager package, specifically in the DistributedAPI where parameters are serialized as JSON and deserialized using...

MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI. The FastAPI permission middleware only enforces authentication on /gateway/...

Wipro Holmes Orchestrator 20.4.1 - Information Disclosure

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...

CVE-2023-35078

CVE-2023-35078 Exploit Tool root@kitploit: ██████╗ ███╗ ██╗███████╗███████╗ ██████╗ ██╔═████╗████╗ ██║██╔════╝██╔════╝██╔════╝ ██║██╔██║██╔██╗ ██║███████╗█████╗ ██║ ████╔╝██║██║╚██╗██║╚════██║██╔══╝ ██║ ╚██████╔╝██║ ╚████║███████║███████╗╚██████╗ ╚═════╝ ╚═╝ ╚═══╝╚══════╝╚══════╝ ╚═════╝ +...

CVE-2026-51954

Producto: Webasyst Framework Versión afectada: ≤ 4.0.3 Gravedad: Alta CVSS 3.1: 8.0 Descripción Webasyst Framework hasta la versión 4.0.3 contiene una falla en la implementación de OAuth 2.0 que permite a un atacante remoto no autenticado interceptar las credenciales de autorización emitidas...

CVE-2023-35078

CVE-2023-35078 dorks de Shodan Puedes usar los siguientes dorks de Shodan para encontrar objetivos públicos. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs Puedes usar lo siguiente para transformar datos de la API de Shodan a un formato adecuado para el script de verificación:...

CVE-2025-13315

🛡️ CVE-2025-13315 - Critical Authentication Bypass in Twonky Server 8.5.2 -e63939?style=for-the-badge An unauthenticated attacker can bypass API authentication, leak admin credentials from logs, and achieve full administrator access. 📋 Overview CVE-2025-13315 is a critical access control flaw in...

CVE-2025-49132-PoC

Guía para usar el script que explota la Path Traversal de Pterodactyl en locale.json Requisitos Servidor Redis expuesto URL del panel Guía 1. Obtén acceso al archivo de configuración del servidor, que contiene la APPKEY y la contraseña de la base de datos Redis + IP 2. Usa forgecookie para genera...

CVE-2023-35078-Exploit-POC

PoC del exploit CVE-2023-35078 La vulnerabilidad de acceso remoto no autenticado a la API CVE-2023-35078 ha sido descubierta en Ivanti Endpoint Manager Mobile EPMM, anteriormente conocido como MobileIron Core. Esta vulnerabilidad afecta a todas las versiones compatibles: versión 11.4, lanzamiento...

CVE-2023-42442

CVE-2023-42442 CVE-2023-42442 JumpServer Session Recording Arbitrary Download Vulnerability Vulnerability Description CVE-2023-42442 is a combination vulnerability involving two bugs in Jumpserver 1. Unauthorized API access leading to session information disclosure 2. Directory permission bypass...

CVE-2026-35616-check

CVE-2026-35616 Vulnerability Assessment Tool Safely detect whether a FortiClient EMS server is vulnerable to CVE-2026-35616 without causing any disruption. See the full write-up on the Bishop Fox blog. Description CVE-2026-35616 is a pre-authentication API bypass in FortiClient EMS 7.4.5 and 7.4....

keyguard

keyguard Scan codebases, GCP projects, and CI pipelines for exposed Google API credentials — before they get exploited. The problem: Google retroactively enabled Gemini API access on existing API keys Maps, Places, etc. that were designed to be public and embedded in client-side code. When someon...

CVE-2026-92466

zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including use...

CVE-2026-92466 microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking

zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including use...

CVE-2026-92466

CVE-2026-92466 affects zlt2000 microservices-platform through version 6.0.0 . The root cause is the configuration flag zlt.security.auth.urlPermission.enable defaulting to false , which disables all URL-level permission checks after a user has authenticated. As a result, any authenticated user wi...