HTB-Devvortex-CVE-2023-2375-PoC

Joomla! CVE-2023-23752 - PoC di divulgazione di informazioni non autenticata Descrizione Questo repository contiene un exploit Proof of Concept PoC per CVE-2023-23752, una vulnerabilità in Joomla! che consente la divulgazione di informazioni non autenticata. Questa vulnerabilità può esporre...

CVE-2025-4603

eMagicOne Store Manager for WooCommerce = 1.2.5 - Eliminazione non autenticata di file arbitrari Il plugin eMagicOne Store Manager for WooCommerce espone un endpoint di protocollo di gestione remota ?connector=bridge che consente operazioni di eliminazione di file sul server. Il meccanismo di...

CVE-2025-5058

eMagicOne Store Manager for WooCommerce = 1.2.5 - Caricamento Arbitrario di File Non Autenticato tramite l'attività setimage Il plugin eMagicOne Store Manager for WooCommerce espone un endpoint di protocollo di gestione remota ?connector=bridge che consente il caricamento di file sul server. Il...

CVE-2021-46363

CVE-2021-46363: Iniezione di Formula in Magnolia CMS Un problema nella funzione Export di Magnolia v6.2.3 e versioni precedenti consente agli attaccanti di eseguire attacchi di Iniezione di Formula tramite file CSV/XLS appositamente modificati. Queste formule possono comportare l'esecuzione di...

CVE-2017-8225

CVE-2017-8225 Installa Python3 root@kitploit: apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Installazione: root@kitploit: git clone https://github.com/kienquoc102/CVE-2017-8225.git Codice Exploit: root@kitploit: cd CVE-2017-8225 python3...

Fortinet-CVE-2022-40684

Fortinet-CVE-2022-40684 Introdução da Ferramenta Ferramenta de exploração rápida para CVE-2022-40684, código de iniciante, se tiver problemas, sinta-se à vontade para abrir issues. Modo de Usar main -t http://127.0.0.1 -u admin -f path-of-ssh-key.pub Aviso de Isenção de Responsabilidade Esta...

aziot-cctv-cve-2025-50777

aziot-cctv-cve-2025-50777 CVE-2025-50777: Root-Zugriff und Offenlegung von Klartext-Anmeldeinformationen in der AZIOT Smart CCTV Zusammenfassung Eine lokale Zugriffskontroll-Schwachstelle CVE-2025-50777 wurde in der Firmware der AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera...

CVE-2023-30765

CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Delta Electronics Infrasuite Device Master Privilegieneskalation Bug-Credit: Piotr Bazydlo @chudypb Links: https://www.zerodayinitiative.com/advisories/ZDI-23-905/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01 Verwendung root@kitploit:...

CVE-2026-36436-Public-Reference-Pack

CVE-2026-36436-Public-Reference-Pack Riepilogo Una vulnerabilità in Trisolutions BRPerfX versione 1.4.4.0 espone le credenziali LDAP in chiaro all'interno dell'interfaccia di configurazione amministrativa. Un amministratore autenticato può ispezionare il codice lato client utilizzando gli strumen...

CVE-2024-54820

Vulnerabilità: SQL Injection non autenticata - Dump di credenziali in chiaro Autore : Javier Carabantes Software interessato : XOne Web Monitor Software : https://xone.es/ Versione interessata : 02.10.2024.530 framework 1.0.4.9 Descrizione È stata scoperta una vulnerabilità di SQL injection non...

cve-2013-4660_PoC

Doceker bulid Esegui la build in un ambiente Docker vulnerabile docker build -f cve-2013-4660 -t cve-2013-4660 . Per dimostrare come le informazioni sensibili all'interno del server vengano divulgate quando l'attacco ha successo, esegui il container iniettando un database fittizio, una password d...

GLPI < 10.0.17 - Pre-Auth SQL Injection

A pre-authentication SQL injection vulnerability exists in the Inventory feature of GLPI. The vulnerability is caused by insufficient sanitization of user input in the handleAgent function when processing XML requests. The issue occurs because SimpleXMLElement objects can bypass the...

Ivanti Endpoint Manager - Authentication Bypass

Ivanti Endpoint Manager 2024 SU5 contains an authentication bypass caused by improper access control, letting remote unauthenticated attackers leak stored credential data, exploit requires no special privileges. id: CVE-2026-1603 info: name: Ivanti Endpoint Manager - Authentication Bypass author:...

Squid Proxy - HTTP Authentication Credentials Disclosure

Squid versions prior to 7.2 fail to redact HTTP authentication credentials in error page responses. The Authorization header value is embedded in plain text inside the mailto: diagnostic block when Squid generates an error page e.g. ERRDNSFAIL. id: CVE-2025-62168 info: name: Squid Proxy - HTTP...

EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

Intelbras WIN 300/WRN 342 - Credentials Disclosure

Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code. id: CVE-2021-3017 info: name: Intelbras WIN 300/WRN 342 - Credentials Disclosure author: pikpikcu severity: high description:...

GitLab CE/EE - Hard-Coded Credentials

GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...

SolarView Compact 6.00 - Local File Inclusion

SolarView Compact 6.00 is vulnerable to local file inclusion which could allow attackers to access sensitive files. id: CVE-2022-29298 info: name: SolarView Compact 6.00 - Local File Inclusion author: ritikchaddha severity: high description: SolarView Compact 6.00 is vulnerable to local file...

Atlassian Questions For Confluence - Hardcoded Credentials

Atlassian Questions For Confluence contains a hardcoded credentials vulnerability. When installing versions 2.7.34, 2.7.35, and 3.0.2, a Confluence user account is created in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attack...

Apache Flink 1.5.1 - Local File Inclusion

Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER. id: CVE-2020-17518 info: name: Apache Flink 1.5.1 - Local File Inclusion author: pdteam severit...