cve-2026-23744

CVE-2026-23744 – MCPJam Inspector Execução Remota de Código RCE Não Autenticada Descrição Produto : MCPJam Inspector Versões afetadas : ≤ 1.4.2 Versão corrigida : 1.4.3 Tipo : Execução Remota de Código RCE Não Autenticada Vetor de ataque : Rede Autenticação necessária : Não Interação do usuário...

Apache-Solr-Arbitrary-File-Read

Lettura Arbitraria di File in Apache Solr Hit Counter Apache Solr sta per Searching On Lucene with Replication è un motore di ricerca gratuito e open-source basato sulla libreria Apache Lucene. Scritto in Java. Apache Solr dispone di API RESTful XML/HTTP e JSON e di librerie client per molti...

CheckPoint-CVE-Webscanner

CVE Web Check Eine lokale Web-App mit Freigabeprozess zum Scannen und Beheben potenzieller Expositionen im Zusammenhang mit Check Point CVE-2026-50751 und CVE-2026-50752 mithilfe vertrauenswürdiger Check-Point-Management-API-Befehle. Dieses Tool wurde nicht von Check Point erstellt oder unterstüt...

cve-2026-42945-scan

cve-2026-42945-scan Scanner statico per file di configurazione NGINX che rileva il pattern rewrite/set associato a CVE-2026-42945. Lo scanner analizza le configurazioni NGINX con crossplane, percorre i blocchi location, e stampa ogni posizione che appare affetta in questo formato: root@kitploit:...

cve-2021-42013

Apache 2.4.50 - Path-Traversal oder Remote Code Execution CVE-2021-42013.py ist ein Python-Skript, das bei der Suche nach Path-Traversal- oder Remote-Code-Execution-Schwachstellen in Apache 2.4.50 hilft. Eine anfällige Docker-Instanz wird bereitgestellt, um mit CVE-2021-42013 praktisch zu arbeite...

CVE-2024-9014

CVE-2024-9014 - pgAdmin 4 OAuth2-Authentifizierungsumgehung Exploit-Tools Dieses Repository enthält Tools, um die CVE-2024-9014 -Sicherheitslücke in pgAdmin 4 zu prüfen und auszunutzen. Die Sicherheitslücke ermöglicht es einem Angreifer, die OAuth2-Authentifizierung zu umgehen und auf sensible...

sparty

Sparty - Strumento di Audit per Sharepoint/Frontpage ! Autore: Aditya K Sood |[email protected] | 2013 Twitter: @AdityaKSood Realizzato da: SecNiche Security Labs ! Sparty è uno strumento open source scritto in Python per auditare applicazioni web basate su architettura Sharepoint e Frontpage. ...

CVE-2026-81697

opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...

CVE-2026-81094

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

CVE-2025-32463

🚨 PoC: CVE-2025-32463 – Vulnerabilità di Escape da chroot in Sudo Una vulnerabilità critica che interessa le versioni di sudo da 1.9.0 a 1.9.17p1 , consentendo agli utenti di evadere da chroot e ottenere accesso al filesystem root reale. 📌 Descrizione CVE-2025-32463 è una vulnerabilità di...

CVE-2026-59272

Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of every log event. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2025-60787

CVE-2025-60787 — motionEye Authentifizierte RCE Authentifizierte Command-Injection-PoC für CVE-2025-60787. motionEye v0.43.1b4 und frühere Versionen schreiben benutzergesteuerte Kamera-Konfigurationswerte wie imagefilename ohne ausreichende Bereinigung in die Motion-Konfiguration, was die...

CVE-2025-55182

CVE-2025-55182 POC Dieses Repository enthält einen Proof of Concept POC für CVE-2025-55182, der die Schwachstelle und ihre Ausnutzung demonstriert. Schwacher Server root@kitploit: "dependencies": "next": "16.0.6", "react": "19.2.0", "react-dom": "19.2.0" , Schwacher Server 2 root@kitploit:...

CVE-2026-59272

Spring AMQP 's Log4j2 AmqpAppender disables TLS hostname verification by default . Any application using this appender to ship logs to RabbitMQ over TLS, while relying on the documented default, is exposed to man-in-the-middle interception of every log event. The vulnerability is rated MEDIUM (CV...

CVE-2026-59272 Log4j2 AmqpAppender disables TLS hostname verification by default

Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of every log event. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2019-14974

creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:03+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U 2026-08-28 00:00:36+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U...

cve-2019-6260

Ein Test- und Debug-Werkzeug für ASPEED-BMC-AHB-Schnittstellen Warnung VERWENDEN SIE DIESES WERKZEUG NICHT, WENN SIE SEIN VERHALTEN IM KONTEXT IHRER ZIELMASCHINE NICHT VERSTANDEN HABEN. Dieses Werkzeug greift auf Low-Level-Hardware- und Firmware-Schnittstellen Ihrer Maschine zu. Insbesondere...

CVE-2022-33891

CVE-2022-33891 PoC PoC para CVE-2022-33891, com capacidade de definir payloads personalizados. Não vulnerável por padrão -- spark.acls.enable precisa ser TRUE. Uso pretendido A utilização deste script é limitada a pessoal autorizado a executar o payload nos hosts de destino exclusivamente para fi...

CVE-2021-39174-PoC

CVE-2021-39174-PoC Cachet-Konfigurationsleck-Dumper. CVE-2021-39174 PoC...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

Guida all'Escalation dei Privilegi CVE-2025-6018 + CVE-2025-6019 Cinese 📋 Passaggi rapidi per lo sfruttamento Passaggio 1: Preparare l'immagine XFS macchina locale root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash...