CVE-2026-73678-PoC

CVE-2026-73678 — MindsDB Minds Platform 未认证 RCE（CVSS 10.0） CVSS 10.0（严重） · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck 摘要 Minds Platform（mindsdb/mindshub 的开源后端，先前为 mindsdb/minds-platform）暴露了 POST /api/v1/responses/（一个兼容 OpenAI 的 Responses API，端口 26866 ），完全没有认证 。没有任何认证中间件——没有 Bearer...

n8n-vulnerability-detection

n8n 漏洞检测 用于检测 n8n 漏洞的自动化 Nuclei 模板。 由@rxerium 创建 概述 适用于 n8n 工作流自动化的自动化 CVE 检测模板，每日监控并基于 GitHub Advisories、ProjectDiscovery 和 NVD 生成模板。 统计 ：3 个 CVE（2023 年）+ 10 个 CVE（2025 年）= 13 个模板 使用方法 root@kitploit: Scan a single target nuclei -t 2025/CVE-2025-58360.yaml -u https://target.com Scan with all...

CVE-2022-36162

CVE-2022-36162 建议描述 pdftoroff hovacui 1.1.0 受影响：命令执行。影响为：执行任意代码（本地）。组件为：hovacui.c，第1574行。攻击向量为：要利用此漏洞，只需更改 HOME 环境变量，将某个命令设置为 postsave，打开一个 PDF 文件并保存即可。发现 hovacui 中存在一个漏洞，可允许任意命令执行。第1574行：1574 systemcommand；环境变量 HOME 被信任，攻击者可伪造它。然后攻击者可以在配置文件中以 postsave 形式输入任意命令，剩下要做的就是打开一个 PDF...

BruteRatel-DetectionTools

BruteRatel-DetectionTools 一个用于解码 Brute Ratel C4 badger 的工具和规则集合 所有工具和规则均基于 PaloAlto 在其报告 https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ 中识别的样本 Yara 规则 该 Yara 规则已针对 Unit42 报告中包含的样本以及由该规则识别出的其他样本进行了测试 root@kitploit: ❯ yara rule.yar BruteRatel ./hacker.exe BruteRatel ./badgerx64.exe...

CVE-2023-23752

Joomla Unauthenticated Information Disclosure Exploit CVE-2023-23752 Exploit Description This repository contains an exploit for a vulnerability named "Joomla Unauthenticated Information Disclosure" CVE-2023-23752. Please note that this is merely a proof-of-concept script created for educational...

CVE-2026-94003

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function getcsspathfromuri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2026-94105

NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller that allows unauthenticated attackers to disable password recovery by supplying an invalid code parameter. Attackers can send a GET request with a missing or incorrect code to...

CVE-2026-94003

A stack-based buffer overflow in the function get_css_path_from_uri within /cgi-bin/mbox-config of the Comfast CF-N1-S Web Management Interface (version 2.6.0.1) allows an unauthenticated remote attacker to trigger the overflow, leading to high impact on confidentiality, integrity, and availabili...

CVE-2026-94105

NivoCart through 2.4.0 contains a destructive configuration write vulnerability in its admin password reset controller (reset.php). An unauthenticated attacker can send a GET request with a missing or incorrect code parameter , which rewrites the config_password setting to 0, effectively disablin...

CVE-2026-94105 NivoCart through 2.4.0 Destructive Configuration Write via the Password Reset Controller

NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller that allows unauthenticated attackers to disable password recovery by supplying an invalid code parameter. Attackers can send a GET request with a missing or incorrect code to...

CVE-2026-94105 NivoCart through 2.4.0 Destructive Configuration Write via the Password Reset Controller

NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller that allows unauthenticated attackers to disable password recovery by supplying an invalid code parameter. Attackers can send a GET request with a missing or incorrect code to...

passwordcheck

用于 rclone 配置文件的 passwordcheck 在 https://github.com/rclone/rclone/issues/4783 中发现了一个安全问题，该问题意味着由 "rclone config" 生成的密码可能不安全。 此程序会检查你的 rclone 配置文件中是否存在这些密码。 安装 从此处下载适用于你的操作系统和架构的相关 zip 文件： https://github.com/rclone/passwordcheck/releases 解压 zip 压缩包 - 在 Linux/macOS 上使用 unzip archive.zip - 在 Windows...

IngressNightterror

IngressNightterror CVE-2025-1974 Overview This repository is my research on IngressNightmare vulnerability. It includes a vulnerable Ingress deploy files, exploit itself and shared object payload. CVE The list of CVE indexes: CVE-2025-1974 - Root vulnerability CVE-2025-24514 - auth-url annotation...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP Cameras Authentication Bypass...

CVE-2023-23752

CVE-2023-23752 Joomla! 未授权访问漏洞 POC：/api/index.php/v1/config/application?public=true 漏洞分析 https://xz.aliyun.com/t/12175...

CVE-2026-3288

CVE-2026-3288：通过 rewrite-target 注解对 ingress-nginx 进行配置注入 关键词： CVE-2026-3288、ingress-nginx 漏洞、Kubernetes 安全、nginx 配置注入、rewrite-target 注解、RCE、Secret 泄露、CWE-20、CAPEC-176、ingress-nginx CVE 2026、Kubernetes 集群沦陷 目录 概述 漏洞详情 技术分析 受影响版本 修复建议 检测方法 CVSS 指标 时间线 参考资料 联系方式 概述 在 ingress-nginx...

CVE-2026-31309

CVE-2026-31309: Improper Access Control in Mysterium Node before v1.36.0 Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node...

CVE-2023-31852

CVE-2023-31852 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/wireless/config has reflected XSS via the iface parameter. The methods of exploitation would involve sending a specially crafted request to the...

CVE-2021-36749

CVE-2021-36749 Apache Druid Arbitrary File Read Affected versions: version = 0.21.1 Either of the following two methods can be used Command Line Method root@kitploit: curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST -d...

spring-cloud__spring-cloud-config_CVE-2020-5410_2-1-8-RELEASE

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-config/tree/master.svg?style=svg"CircleCI",...