Lucene search
+L

322 matches found

Kitploit
Kitploit
added 2026/08/25 9:22 p.m.1 views

padding-oracle-attacker

padding-oracle-attacker CLIツールとライブラリで、パディングオラクル攻撃を簡単に実行できます。同時ネットワークリクエストをサポートし、洗練されたUIを備えています。 インストール Node.jsがインストールされていることを確認し、次に以下のコマンドを実行してください。 root@kitploit: $ npm install --global padding-oracle-attacker または root@kitploit: $ yarn global add padding-oracle-attacker CLIの使い方 root@kitploit: 使い...

5.9AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/08/25 9:00 p.m.1 views

CVE-2021-41773

用法 root@kitploit: usage: main.py -h -f FILE -s N --timeout SECONDS optional arguments: -h, --help show this help message and exit -f FILE, --file FILE File containing target URLs one per line -s N, --semaphore N Concurrent requests default: 10 --timeout SECONDS Request timeout in seconds default:...

9.8CVSS8.4AI score0.99992EPSS
SaveExploits163
Kitploit
Kitploit
added 2026/08/25 8:30 a.m.2 views

strutser

strutser Este programa verifica la CVE-2017-5638. Uso root@kitploit: Usage of ./strutser: Usage of ./strutser: -c, --concurrency int Concurrent HTTP requests. default 10 -f, --file string File containing targets -p, --ports intSlice Ports to check. default 80 -t, --timeout int Timeout on HTTP...

10CVSS8.7AI score0.99999EPSS
SaveExploits45
Kitploit
Kitploit
added 2026/08/25 4:30 a.m.1 views

php-app-race-condition

存在漏洞的 PHP 应用(竞态条件) 环境搭建: root@kitploit: docker-compose up 环境验证: 连接测试: http://localhost/test.php 漏洞端点: http://localhost/poc.php 竞态条件利用: root@kitploit: echo http://localhost | nuclei -t race.yml 可以观察到,从余额中提取的金额少于 1280$(10$ 128 个请求),并伴有可变的净收益。...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/24 9:40 p.m.172 views

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/24 2:13 p.m.1 views

CVE-2024-53476

CVE-2024-53476 説明 SimplCommerceはチェックアウトロジックに競合状態の脆弱性が存在し、同時チェックアウトリクエストにより複数のユーザーが在庫以上の商品を購入できる脆弱性です。 検出方法 攻撃者は、在庫が限られている(在庫=1)商品を、2つのアカウントを使用してほぼ同時に購入しようとすることでこの脆弱性を検出できます。両方のアカウントが商品の購入に成功した場合、競合状態の存在が確認されます。これは、カスタムスクリプトやBurp SuiteのTurbo Intruderを使用して同時チェックアウトリクエストを送信することで実行できます。 テスト対象...

5.9CVSS5.5AI score0.00611EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/21 12:00 a.m.10 views

Apache Struts < 7.3.0 Multiple Vulnerabilities (S2-070) (S2-071)

The version of Apache Struts installed on the remote host is 7.2.1. It is, therefore, affected by multiple vulnerabilities in the JSON plugin, as referenced in the S2-070 and S2-071 advisories: - A component of the JSON plugin that holds per-request parsing state could be shared between concurren...

4.3CVSS5.5AI score0.00262EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/19 7:27 p.m.8 views

EUVD-2026-62712

Race condition in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state...

5.5AI score0.00221EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/19 6:17 p.m.7 views

CVE-2026-73541

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

8.3CVSS0.00419EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/19 5:20 p.m.14 views

EUVD-2026-62593

Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service to legitimate payers once it is empty. MPP.Methods.Tempo.FeePayerPolicy enforces its ceilings maxgas,...

8.3CVSS5.5AI score0.00419EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/18 3:01 p.m.5 views

EUVD-2026-60950

goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, ShareHandler reads the share token's DownloadLimit under RLock, releases the lock, serves the file, then re-acquires the lock to increment the counter. Concurrent requests all read the same Downloaded/DownloadLimit snapshot, all...

5.9CVSS8.5AI score0.00246EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/15 11:16 a.m.14 views

CVE-2026-73631

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...

4.3CVSS0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/15 10:38 a.m.57 views

CVE-2026-73632 Apache Struts: Shared serialization state in the JSON plugin

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...

0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/15 10:38 a.m.41 views

CVE-2026-73631 Apache Struts: Shared parsing state in the JSON plugin

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...

0.00262EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.17 views

PT-2026-72883

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...

5.3AI score0.00262EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/14 3:01 p.m.6 views

EUVD-2026-58673

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the configuration and process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to...

7.3CVSS5.6AI score0.00096EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 12:31 a.m.10 views

EUVD-2026-57640

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP header. Under concurrent...

4.2CVSS5.3AI score0.00107EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/12 10:17 p.m.10 views

CVE-2026-7366

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP header. Under concurrent...

4.2CVSS0.00107EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/10 11:17 a.m.10 views

CVE-2026-72584

A time-of-check/time-of-use TOCTOU race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on the account recovery flow, enabling brute-force attacks on 6-digit OTP codes...

7.4CVSS0.00246EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/06 12:16 p.m.12 views

CVE-2026-57818

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issu...

8.1CVSS0.00344EPSS
SaveExploits0References2
Rows per page
Query Builder