network-attacker

Network-Attacker network-attacker V0.1은 Mdk3 비콘 플러딩 및 비인증 공격을 기반으로 한 WiFi 스트레스 테스트 Bash 스크립트 프로그램입니다. 초보자와 전문가 모두가 네트워크에 대해 비콘 플러딩 또는 비인증 공격을 수행할 수 있도록 제작되었습니다. 설치 root@kitploit: sudo apt-get install git sudo git clone https://github.com/TunisianEagles/network-attacker.git cd network-attacker sud...

WS-Attacker

WS-Attacker WS-Attacker è un framework modulare per il penetration testing di servizi web. È sviluppato dalla Cattedra di Sicurezza delle Reti e dei Dati, Ruhr University Bochum https://nds.rub.de/ e dalla Hackmanit GmbH https://hackmanit.de/. L'idea alla base di WS-Attacker è quella di fornire u...

Windows-WinSock-UAF-Mitigation

CVE-2026-68820: Windows WinSock afd.sys UAF-Mitigation Dieses Repository enthält einen konzeptionellen Patch, der die Mitigation für CVE-2026-68820 demonstriert – eine kritische Use-After-Free-Schwachstelle UAF im Windows Ancillary Function Driver für WinSock afd.sys. Die aktive Ausnutzung dieses...

CVE-2026-38765

CVE-2026-38765 Un problema in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 consente a un attaccante locale di elevare i privilegi tramite il driver del kernel pgsecdl.sys...

laravel-filemanager-unrestricted-upload

Laravel FileManager Unrestricted File Upload CVE-2025-56399 CWE-434: Uneingeschränkter Upload von Dateien mit gefährlichem Typ CVSS-Score: 8.5 Hoch 📋 Beschreibung Dieses Tool bietet einen Proof of Concept PoC für CVE-2025-56399 , eine kritische Schwachstelle in alexusmai/laravel-file-manager...

CVE-2026-82477

MITRE SAF Heimdall versions 2.11.6 through 2.13.x are affected by a Server-Side Request Forgery (SSRF) vulnerability in the Tenable proxy endpoint , specifically in apps/backend/src/tenable/tenable.controller.ts. A remote, unauthenticated attacker can leverage this flaw to access internal network...

CVE-2025-65320

CVE-2025-65320 Titolo Archiviazione in chiaro di materiale di licenza sensibile nella memoria di processo in Abacre Restaurant Point of Sale POS Panoramica Esiste una vulnerabilità in Abacre Restaurant Point of Sale POS versioni = 15.0.0.1656 in cui i dati di licenza sensibili vengono memorizzati...

CVE-2025-29306

POC - CVE-2025-29306 FOXCMS /images/index.html Vulnerabilità di Esecuzione di Codice Panoramica Un problema in FoxCMS v.1.2.5 consente a un attaccante remoto di eseguire codice arbitrario tramite la pagina di visualizzazione dei casi nel componente index.html. POC Completo Leggi a riguardo —...

CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below

CVE-2023-34830 - XSS riflesso trovato in i-doit Open v24 e versioni precedenti i-doit Open v24 e versioni precedenti sono vulnerabili a una vulnerabilità di XSS riflesso. Queste vulnerabilità potrebbero consentire a utenti remoti autenticati di iniettare script web o HTML arbitrari. Descrizione d...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

CVE-2023-48795

Scanner de Vulnerabilidade OpenSSH para CVE-2023-48795 Esta ferramenta baseada em Python verifica sistemas em busca de instalações OpenSSH e verifica se são vulneráveis à CVE-2023-48795 , uma vulnerabilidade crítica que afeta versões anteriores ao OpenSSH 9.6. O script fornece um relatório...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Proof-Of-Concept È stata riscontrata una vulnerabilità in pki-core. L'accesso a entità esterne durante l'analisi di documenti XML può portare ad attacchi di tipo XML External Entity XXE. Questa vulnerabilità consente a un attaccante remoto di recuperare potenzialmente il contenuto d...

CVE-2024-22734

CVE-2024-22734 Exploit PoC per CVE-2024-22734 Questa repository contiene il sorgente dell'exploit Proof of Concept PoC per CVE-2024-22734 , una vulnerabilità scoperta da Bryan Smith di Redline Cyber Security. Per informazioni dettagliate sulla vulnerabilità, fare riferimento al nostro post sul...

Shield Security WP Plugin <= 18.5.9 - Local File Inclusion

The Shield Security Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP fil...

Smart s200 Management Platform v.S200 - SQL Injection

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component. id: CVE-2024-27718 info: name: Smart s200 Management Platform v.S200 - SQL Injection author:...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

Canon Devices - Authentication Bypass in Catwalk Server

Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...

Barco/AWIND OEM Presentation Platform - Remote Command Injection

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

Gryphon Tower - Cross-Site Scripting

Gryphon Tower router web interface contains a reflected cross-site scripting vulnerability in the url parameter of the /cgi-bin/luci/siteaccess/ page. An attacker can exploit this issue by tricking a user into following a specially crafted link, granting the attacker JavaScript execution in the...

Hongdian H8922 3.0.5 Devices - Local File Inclusion

Hongdian H8922 3.0.5 devices are vulnerable to local file inclusion. The /logdownload.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ e.g., ../../etc/passwd This can be carried out wi...