CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server 디렉터리 트래버설 Spring Cloud Config 2.1.2 이전의 2.1.x 버전, 2.0.4 이전의 2.0.x 버전, 1.4.6 이전의 1.4.x 버전 및 지원이 종료된 구버전에서는 spring-cloud-config-server 모듈을 통해 애플리케이션이 임의의 구성 파일을 제공할 수 있습니다. 악의적인 사용자 또는 공격자는 특수하게 조작된 URL로 요청을 보내 디렉터리 트래버설 공격을 유발할 수 있습니다. 발견자: Vern...

CVE-2020-23585

CVE-2020-23585 OPTILINK E-PON "MODEL NO: OP-XT71000N" с "HARDWARE VERSION: V2.2" и "FIRMWARE VERSION: OPV3.3.1-191028" Удаленный злоумышленник может провести атаку межсайтовой подделки запроса CSRF на "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028". Уязвимость...

CVE-2023-23752-Docker

CVE-2023-23752 Joomla 무단 접근 취약점 CVE-2023-23752 Dockerized 설치 권장 자동 1. 이 저장소를 클론합니다 git clone https://github.com/karthikuj/CVE-2023-23752-Docker.git 2. 디렉토리로 이동합니다 cd CVE-2023-23752-Docker 3. ./setup.sh 실행 4. 브라우저를 열고 http://localhost:8080/ 로 이동 수동 1. 이 저장소를 클론합니다 git clone...

ActiveMQ-RCE-Exploit

ActiveMQ-Exploit Английский | Китайский упрощенный CVE-2023-46604 ActiveMQ RCE 5.18.3 Exploit — эксплуатация без выхода в сеть Поддерживается запуск на JDK 1.8, автоматическое определение, находится ли версия цели в зоне уязвимости Поддерживается эксплуатация цели без выхода в сеть с помощью...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

WordPress Advanced Access Manager - Path Traversal

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

XWiki Platform - Information Disclosure

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. id: CVE-2025-55747 info: name: XWiki Platform - Information Disclosure author: Redmomn...

Spring Cloud Config Server - Path Traversal

Spring Cloud 3.1.x 3.1.13, 4.1.x 4.1.9, 4.2.x 4.2.3, 4.3.x 4.3.2, and 5.0.x 5.0.2 contain a path traversal caused by profile parameter substitution in Config Server using native file system backend, letting attackers access files outside configured directories, exploit requires crafted request. i...

LiteLLM - Arbitrary File Read

LiteLLM 1.83.0 contains a broken access control vulnerability caused by lack of admin role enforcement on /config/update endpoint, letting authenticated users modify configurations, execute code, read files, and take over accounts. id: CVE-2026-35029 info: name: LiteLLM - Arbitrary File Read...

DataTaker DT80 dEX 1.50.012 - Information Disclosure

DataTaker DT80 dEX 1.50.012 is susceptible to information disclosure. A remote attacker can obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI, thereby possibly accessing sensitive information, modifying data, and/o...

MotionEye Config Info Disclosure

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured. id: CVE-2022-25568 info: name: MotionEye Config Info Disclosure author: DhiyaneshDK severity: high...

Apache Solr - Deserialization of Untrusted Data

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side. id:...

Progress ShareFile Storage Zones Controller - Authentication Bypass

Customer Managed ShareFile Storage Zones Controller SZC contains an authentication bypass Execution After Redirect that allows unauthenticated attackers to access restricted configuration pages. This leads to changing system configuration and potential remote code execution. id: CVE-2026-2699 inf...

EUVD-2026-76742

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. A deployment that copies this example file into active configuration without running the setup routine that regenerates the value...

spybrowse

BrowseSpy Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of the FTP server which receives the files. This code will do the following: 1. Copy itself into the %TMP% directory & name itself ursakta.exe 2. Add a registry entry to...

CVE-2023-24055

CVE-2023-24055 POC и сканер для CVE-2023-24055 Используйте на свой страх и риск! configscanner.py Простой парсер для конфигурационного файла KeePass, работающий под Windows. Инструмент откроет директорию %APPDATA%\Roaming\KeePass\KeePass.config.xml и выведет все триггеры. Триггеры Выполнить...

CVE-2022-23642

PoC для Sourcegraph Gitserver 3.37.0 RCE CVE-2022-23642 Sourcegraph до версии 3.37.0 имеет уязвимость удаленного выполнения кода в сервисе gitserver. Это связано с отсутствием ограничений на выполнение git config, поэтому «core.sshCommand» может быть передан в HTTP-аргументы, которые могут...

raccoon_config

raccoonconfig Tria.ge에서 raccoon 서버 목록을 스캔하고 config를 JSON으로 추출합니다. 원한다면 Raccoon config에서 추출된 후속 악성코드를 Tria.ge로 자동 전송할 수도 있습니다. API 키 필요 리소스: 로고: https://www.deviantart.com/snatti89/art/193-365-Mugshot-588700352...

CVE-2026-90456

CVE-2026-90456 affects a bundled inventory-management component whose example environment-configuration file ships with a fixed, publicly-known administrative password . If a deployment copies this example file into active configuration without running the setup routine that regenerates credentia...

CVE-2026-54248

Doco-CD , a GitOps continuous delivery tool for Docker Compose projects and Swarm stacks, contains an OCI trust-policy bypass prior to version 0.90.1 . A trust-boundary flaw allowed artifact-provided .doco-cd.yml configuration (with oci.verify: false) to override the global OCI_TRUST_POLICY, caus...