CVE-2024-22369

CVE-2024-22369 致谢 本 PoC 基于华为开源管理中心陈子阳构建的复现程序 该复现程序经调整和清理后用于创建此 PoC，并增加了一些自动化功能。 环境准备 我们需要一个 Mysql 实例 docker run --name some-mysql -p 3306:3306 -e MYSQLROOTPASSWORD=my-secret-pw -e MYSQLDATABASE=db -d mysql 现在我们需要创建所需的表： 你有两个文件：employee.sql 和 employeecompleted.sql 运行以下命令： docker run -it --rm mysql...

CVE-2020-26217

Description XStream can be used for Remote Code Execution Influence Xstream com.thoughtworks.xstream xstream 1.4.13 How to use root@kitploit: 0 text/plain 0 -1 1...

CVE-2017-12615

CVE-2017-12615 Usage: CVE-2017-12615.py http://targetip:port When ops retardedly enable put method in web.xml on Apache Tomcat 7.0.0 - 7.0.79 this EXP should be working...

echteeteepee

HTTP/1 反同步漏洞测试工具 本仓库包含用于检测 HTTP/1 请求走私（反同步）漏洞的防御性安全工具，其基础是 PortSwigger 的 James Kettle 所进行的开创性研究。 研究致谢 本作品直接受以下研究启发，并实现了其中的技术： 《HTTP/1 Must Die》 作者：James Kettle（PortSwigger 研究团队） 原始研究：https://portswigger.net/research/http1-must-die 研究员：James Kettle @albinowax 公司：PortSwigger Web Security...

WebminRCE-EXP-CVE-2019-15107-

CVE-2019-15107: Exploit Modules Available for Remote Code Execution Vulnerability in Webmin 1. Vulnerability Description Webmin is a powerful web-based system administration tool, widely used on Unix systems. Due to a command injection vulnerability in the old parameter during the processing of...

CVE-2025-8723

⚡️ Cloudflare Image Resizing 描述: 该插件的 REST API 端点未对用户进行身份验证，并且在 hookrestpredispatch 方法中不当处理输入。此缺陷使攻击者能够通过构造恶意请求注入并执行任意 PHP 代码，无需登录即可利用。 🛠 本利用工具的特性 专业、模块化、可扩展的 Python 脚本 自动检测 插件漏洞（通过解析 readme.txt 文件） 多种绕过技术 ，适用于 WAF 和严格环境： 最简和高级标头集合（随机化 User-Agent、Referer、Origin、X-Forwarded-For 等） 重复尝试并轮换标头...

PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-

CVE-2019-11043 1. Descripción de la vulnerabilidad Cuando Nginx maneja fastcgisplitpathinfo con solicitudes que contienen %0a, debido al salto de línea \n, PATHINFO se vuelve vacío. Y php-fpm tiene un defecto lógico al manejar PATHINFO vacío. Un atacante puede provocar una ejecución remota de...

CVE-2024-37742

CVE-2024-37742: Clipboard Exploit in SEB ≤ 3.5.0 Windows This repository contains a proof-of-concept PoC for exploiting CVE-2024-37742, a vulnerability in Safe Exam Browser SEB ≤ 3.5.0 on Windows. The vulnerability allows an attacker to share clipboard data between the SEB kiosk mode and the...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "Si se explota, la vulnerabilidad de seguimiento de enlaces podría permitir a atacantes remotos que hayan obtenido acceso d...

gpasskey

======== gpasskey .. image:: https://gitlab.com/renich/gpasskey/-/raw/master/assets/banner.svg :width: 100% :align: center :alt: gpasskey banner | .. image:: https://gitlab.com/renich/gpasskey/badges/master/pipeline.svg :target: https://gitlab.com/renich/gpasskey/-/commits/master :alt: pipeline...

EPScalate

EPScalate An elevation of privilege vulnerability in QuickHeal's Seqrite Enterprise Endpoint Security Solution EPS. The vulnerability has been assigned a CVE ID of CVE-2023-31497. https://user-images.githubusercontent.com/39941993/230790056-87157751-b96c-49a6-81df-bf3126acfbd6.mp4 Vendor and...

FREAK-Attack-CVE-2015-0204-Testing-Script

FREAK Attack CVE 20150204 Testing Script Basic BASH Script to Automate OpenSSL based testing for FREAK Attack CVE-2015-0204 as advised by Akamai. It is a Free Software and does not need other's server to run. Your server must score A+ to SSL Labs test under normal situation, should listed as HSTS...

CVE-2017-14263

HoneywellNVRvul CVE-2017-14263 xfuturesec Co., Ltd Primero, obtén el SessionID para un usuario invitado. Podemos encontrar el SessionID en cualquier petición http. Por ejemplo: POST https://192.168.1.104/RPC2 HTTP/1.1 Accept: text/javascript, text/html, application/xml, text/xml X-Requested-With:...

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional...

awesome-list — Updated!

Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...

SUSE CVE-2026-72135

In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable The TPM character devices expose a sequential command/response interface, but their open handlers leave FMODEPREAD and FMODEPWRITE enabled. After a command leaves a response pendin...

schrodingers-toctou

El TOCTOU de Schrödinger "...la definición de 'compilador sensato' se vuelve cada vez más flexible." El binario que ejecutas no es el programa que escribiste. El optimizador del compilador reescribe tu código fuente de maneras que nunca ves — y algunos de esos cambios pueden convertir silenciosa ...

USN-8704-1 cpio vulnerabilities

It was discovered that cpio incorrectly sanitized hard-link targets when extracting tar archives in copy-in mode. If a user or automated system were tricked into extracting a specially crafted tar archive, an attacker could possibly use this issue to create hard links to files outside the...

USN-8704-1: GNU cpio vulnerabilities

It was discovered that cpio incorrectly sanitized hard-link targets when extracting tar archives in copy-in mode. If a user or automated system were tricked into extracting a specially crafted tar archive, an attacker could possibly use this issue to create hard links to files outside the...

clawk v0.4.0

Give a coding agent its own disposable Linux machine, not yours. -lightgrey Install · Quickstart · Why a VM? · How it works · Compared to · FAQ · Docs A coding agent is only useful when you let it actually do things: install packages, run the code it writes, start servers, use the network. On you...