4053 matches found
The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.
The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...
CVE-2023-27163
CVE-2023-27163 Request-Baskets v1.2.1 - 服务器端请求伪造（SSRF） request-baskets 版本 v1.2.1 及之前被发现在组件 /api/baskets/name 中存在服务器端请求伪造（SSRF）漏洞。该漏洞允许攻击者通过精心构造的 API 请求访问网络资源和敏感信息。 安装 root@kitploit: git clone https://github.com/0xFTW/CVE-2023-27163 cd CVE-2023-27163 pip3 install -r requirements.txt 用法...
CVE-2022-4896
CVE-2022-4896 CVE-2022-4896 的 PoC 与漏洞利用 “Control de Ciber” 是一款网吧管理软件。在 1.650 之前的版本中存在多个拒绝服务（DoS）漏洞。未经身份验证的远程攻击者可以发送精心构造的请求，导致服务崩溃。 Spooler DoS Spooler 漏洞利用 PNTMedidas DoS PNTMedidas 漏洞利用 Pedir DoS Pedir 漏洞利用 HayDiscoA DoS HayDiscoA 漏洞利用...
CVE-2025-31651-o
CVE-2025-31651 对于一小部分不太可能的重写规则配置，精心构造的请求可能绕过一些重写规则。如果这些重写规则实际执行了安全约束，那么这些约束可能被绕过。 0x01 状态 公开 0x02 PoC Finder 详见 CVE-2025-31651.md...
CVE-2023-3519
CVE-2023-3519 此Nuclei模板用于检查目标Web服务器中是否存在CVE-2023-3519漏洞。 漏洞描述 CVE-2023-3519是一个允许在Citrix Application Delivery Controller（ADC）和Gateway设备上执行未经身份验证的远程代码的漏洞。攻击者可以通过向受影响系统发送特制请求来利用此漏洞。 该模板通过将服务器响应中的"Last-Modified"标头与已知修补版本进行比较来检查是否存在漏洞。 使用方法 使用Nuclei扫描单个目标，请使用以下命令： root@kitploit: nuclei -target -t...
CVE-2022-48474_CVE-2022-48475
CVE-2022-48474 & CVE-2022-48475 针对 CVE-2022-48474 和 CVE-2022-48475 的 PoC 与漏洞利用 "Control de Ciber" 是一款网吧管理软件。在 1.650 之前的版本中存在多个拒绝服务（DoS）漏洞。未经认证的远程攻击者可以发送精心构造的请求，导致服务崩溃。 CVE-2022-48474（版本 DoS） 版本漏洞利用 CVE-2022-48475（打印 bof） 打印漏洞利用...
CVE-2017-7529
CVE-2017-7529 从0.5.6到1.13.2（包含）的Nginx版本存在整数溢出漏洞，位于nginx范围过滤器模块中，可导致通过特制请求泄露潜在敏感信息。 安装 $ git clone https://github.com/Shehzadcyber/CVE-2017-7529.git $ cd CVE-2017-7529 使用 $ python3 CVE-2017-7529.py URL $ python3 CVE-2017-7529.py https://target.com/...
EUVD-2026-75760
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system...
CVE-2023-26984
CVE-2023-26984 漏洞说明： Peppermint v0.2.4 的密码重置功能中存在一个问题，攻击者可以通过特制请求访问工单页面的电子邮件和密码。 攻击向量： 攻击者必须使用用户角色登录并重置密码。然后拦截流量，将 id 更改为管理员角色或其他用户。（如果攻击者创建工单，就可以看到工单页面的电子邮件和密码。）之后，攻击者可以使用管理员账户和新密码登录。 受影响： http://localhost:5001/settings http://localhost:5001/api/v1/users/resetpassword POST...
CVE-2026-86087
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system...
CVE-2026-86087
IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are affected by a vulnerability that allows an authenticated user to send a specially crafted request to write arbitrary files on the system. The CVSS v3.1 score is 4.3 (MEDIUM) with a network attack vector, low complexity, low priv...
CVE-2026-86087 IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system...
CVE-2026-9338
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service...
EUVD-2026-75676
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service...
CVE-2026-9338
IBM WebSphere Application Server versions 9.0 (prior to 9.0.5.29) and 8.5 (prior to 8.5.5.31) are vulnerable to a denial of service triggered by a specially-crafted request that causes excessive resource consumption, potentially reducing service availability. The attack requires no authentication...
CVE-2025-11627
抽出されたnonceを使用して、AJAXハンドラに細工したリクエストを送信します。 root@kitploit: = // 1 find the inline script that contains the AJAX URL const s = ...document.scripts.findsc = sc.textContent.includes'billminozzijserrorcatched'; if !s console.error'Script with ajax URL not found. Is wphead present?'; return; // 2 extrac...
httpd: NULL pointer dereference via specially crafted request
A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...
CVE-2026-23520
CVE-2026-23520 PoC de Ejecución Remota de Comandos RCE en la API MCP 📌 Descripción general Este repositorio contiene un PoC Prueba de Concepto de explotación para una vulnerabilidad de Ejecución Remota de Comandos RCE que afecta a aplicaciones que exponen un endpoint vulnerable de la API MCP...