1307706 matches found
CVE-2025-54236
Adobe Magento SessionReaper LFI PoC äøäøŖē®åē Python ę¦åæµéŖčÆčę¬ļ¼ēØäŗę¼ē¤ŗå½±åęåę»å»ē Adobe Magento ēę¬ē CVE-2025-54236 SessionReaper ę¼ę“ć ä» éęč²ēØéåęęå®å ØęµčÆć åč½ čŖåØč§čåē®ę URL ēęéęŗ formkey čŖåØę§č”ę件äøä¼ čÆ·ę± éŖčÆå·²äøä¼ ę件 å°ęåäøä¼ äæåå° success.txt å°čÆÆę„äæåå° falsepositive.txt ęÆęčæę„č¶ ę¶äøéčÆ åå½±åēę¬ Magento 2.4.9-alpha2 Magento 2.4.8-p2 Magento 2.4.7-p7...
CVE-2020-0688
python3 CVE-2020-0688.py mail.chinabaiker.com [email protected] password command...
CVE-Lab
CVE-2023-46604 Lab This lab guides on exploiting vulnerabilities of CVE-2023-46604 Acknowledgements Apache ActiveMQ CVE-2023-46604 Environment This lab requires the installation of 2 virtual machines. One Kali Linux machine version 2023.4 and one Ubuntu machine version 22.04.3 LTS. You can downlo...
Issabel-PBX-4.0.0-RCE-Authenticated
Issabel PBX 4.0.0 čæēØ代ē ę§č”ļ¼å·²éŖčÆļ¼- CVE-2024-0986 ęčæ°/ę»ē» Issabel PBX 4.0.0 å č®øå·²ē»å½ēØę·ä½æēØ asteriskcli ę§å¶å°éčæ xmldoc å dump å½ä»¤åå»ŗę件ćčæå č®øéčæ껄ēØ restore.php ę件ļ¼åŗäŗäøä¼ ę件ēåē§°ę§č”čæēØå½ä»¤ć ę¬ PoC čę¬åŗäŗ ę¤ PoC č§é¢ć ä½æēØę¹ę³ root@kitploit: $ python3 IssabelPBXAuthenticatedRCE.py -u -p -t -c ä¾å¦ļ¼ root@kitploit: $ python3...
CVE-2021-44228-white-box
ArtĆculo de revista: https://www.researchgate.net/publication/373214720PengujianKerentananpadaCVE-2021-44228terhadapAncamanRemoteAccessTrojan Tesis: https://1drv.ms/b/s!Al-8jtgY0iBXmz79DKEROaZT5n8a?e=1E6Pkm Log4Shell // n. Entorno de Vulnerabilidad Log4j Este repositorio estĆ” construido...
CVE-2023-6246
å·²åØé»č®¤ē Fedora WS 38 äøęµčÆéčæ...
lvi-lfb-attack-poc
LVI-LFBę§å¶ęµå«ęę»å»ļ¼CVE-2020-0551ļ¼ēPoC ę¬ä»åŗå å«LVI-LFBę§å¶ęµå«ęę»å»PoCēęŗ代ē ć å 容 lvi-cfh-poc - éčæč”唫å ē¼å²åŗå·å°å«ęå¦äøäøŖčæēØēę§å¶ęµ ē½ē®ä¹¦ åęę”件 1. Visual Studio 2015 2. ååØę¼ę“ēIntel CPU ä½č Andrei Vlad LUČAČ Dan Horea LUČAČ éå čµęŗ...
CVE-2022-25765
CVE-2022-25765 PoC for Blind RCE for CVE-2022-25765 åØHTB - Precious MachineäøęµčÆ...
CVE-2023-23397-Patch
CVE-2023-23397 Windows Update 蔄äø ēØäŗ Windows 10 å 11 ē CVE-2023-23397 PowerShell 蔄äøčę¬ ę¤čę¬ēę¬å č®øęØę£ę„č®¾å¤ęÆå¦å·²å®č£ éåƹęę°å¾®č½Æę¼ę“ēęčæęØé蔄äøćå¦ęä½æēØ PowerShell å½ä»¤ Get-Hotfix ęŖę¾å°å®å Øę“ę°ļ¼å®å°äøč½½ęę°ē Windows ę“ę°å¹¶éé»å®č£ ļ¼ę ééåÆćä½ä»å»ŗč®®ęØę ¹ę®éč¦éę°åÆåØč®”ē®ęŗć åƹäŗ大å¤ę°äŗŗę„čÆ“ļ¼å®č£ Windows ę“ę°åŗč½č§£å³ę¤é®é¢ćē±äŗ VPN é®é¢ęēØę·ęŖčæę„čę ę³č®æé®åęå”åØēč®¾å¤åÆä»ę¤čę¬äøåēć äøåøäæä½ć...
sudo_digest_toctou_poc_CVE-2015-8239
sudoers DigestSpec TOCTOU POC åē Alyssa Milburnļ¼https://twitter.com/noopwafelļ¼åē° sudo äø DigestSpec č®¾ē½®ååØäøäøŖ TOCTOU ē«ęę”件ę¼ę“ćDigestSpec č®¾ē½®åÆēØäŗå č®øēØę·éčæ sudo ę§č”ęäøŖäŗčæå¶ę件ļ¼åęęÆčÆ„ę件ēååøå¼äøé¢č®¾å¼å¹é ćę“å¤å ³äŗę¤åč½ēäæ”ęÆčÆ·åč§ man sudoers 并ęē“¢ DigestSpecļ¼å ³äŗ Alyssa åē°ēę¼ę“čƦę ļ¼čÆ·åč§...
mitigate-folina
mitigate-folina ē¼č§£āFolinaāé¶ę„ę¼ę“ļ¼CVE-2022-30190ļ¼åāSearchāå©ę¢¦ļ¼ē®åęŖåé CVEļ¼ ę¤čę¬å°å¤ä»½å¹¶å é¤åå½±åēę³Øåč”Ø锹ļ¼å¦å¾®č½Æå»ŗč®®ļ¼ļ¼ä»„ē¼č§£CVE-2022-30190ć å¦ęä½æēØ"-revert"åę°ļ¼čę¬å°éę°åÆ¼å „čÆ„é®ć čæåÆåØå¾®č½Æååø蔄äøę¶ä½æēØć čę¬åæ 锻仄ē®”ēåęNT-AUTHORITY\SYSTEMčŗ«ä»½čæč”ļ¼åÆéčæGPPä½äøŗåÆåØčę¬ęč®”åä»»å”éØē½²ļ¼ć...
CVE-2020-1472-EXP
Ladonć¢ćøć„ć¼ć« CVE-2020-1472ćØćÆć¹ććć¤ć ä½æēØę³: http://k8gege.org/Ladon/cve-2020-1472.html...
CVE-2023-0386
å®č£ root@kitploit: make all ä½æēØę¹ę³ ęå¼äø¤äøŖē»ē«Æļ¼åØē¬¬äøäøŖē»ē«Æäøč¾å „ root@kitploit: ./fuse ./ovlcap/lower ./gc åØē¬¬äŗäøŖē»ē«Æäøč¾å „ root@kitploit: ./exp...
cve-2020-11023-scanner
š„ CVE-2020-11023 ę«ęåØļ¼åØXSSäøŗę¶å·²ęä¹ååē°å¹¶å¾ęå®ļ¼š„ ä½ ęÆå¦č¢«ę½ä¼åØ JavaScript 代ē äøē č·Øē«čę¬ļ¼XSSļ¼ę¼ę“ ēå¹½ēµęå°ę°ļ¼ę åæ CVE-2020-11023 č®©ä½ ē Web åŗēØēØåŗę“é²åØę»å»ä¹äøļ¼å«ęļ¼CVE-2020-11023 ę«ęåØ å°å©ä½ åē°å¹¶å¾ęé£äŗē¦äŗŗēę¼ę“ļ¼ čæę¬¾åæ«é äøåÆé ēéęåę å·„å ·ęØåØę«ę JavaScript ę件åē½é”µļ¼åÆ»ę¾ XSS ę¼ę“ēåÆēčæ¹č±”ļ¼å°¤å ¶ęÆäø CVE-2020-11023 ēøå ³ēé£äŗćå®éē¹å ³ę³Ø jQuery 3.5.0 ä¹åēēę¬ļ¼å äøŗčæäŗēę¬å·²ē„ęåę»å»ć å č“£å£°ęļ¼ čÆ·č®°ä½ļ¼ę¤å·„å ·ä» ę§č”éę...
SpringFramework_CVE-2022-22965_RCE
SpringFrameworkCVE-2022-22965RCE SpringFramework čæēØ代ē ę§č”ę¼ę“CVE-2022-22965 ę¼ę“å¤ē°ēÆå¢ root@kitploit: docker pull vulfocus/spring-core-rce-2022-03-29 docker run -d -p 8090:8080 --name springrce -it vulfocus/spring-core-rce-2022-03-29 åwebshell ę³Øęļ¼éŖčÆęµčÆę¶ShellåŖč½åäøꬔļ¼ å©ēØčę¬ root@kitploit: python...
Kubernetes-1.12.3-all-auto-install
Kubernetes-1.12.3-all-auto-install 锹ē®ä»ē» äøŖäŗŗę“ēēCentos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 ę CVE-2018-1002105 ę¼ę“ēmaster,nodečē¹å ØčŖåØåæ«éäøé®å®č£ éØē½²ę件ļ¼éēØäŗęµčÆēÆå¢ļ¼ēäŗ§ēÆå¢ēåæ«éå®č£ éØē½² åčęę”£ https://kubernetes.io/docs/setup/independent/create-cluster-kubeadm/ masterčē¹å®č£ åå¤å·„ä½ 1. é ē½®å„½centosēē½ē»ēÆå¢ļ¼ä½æå ¶åÆčæę„äŗčē½ļ¼ēØäŗäøč½½å®č£ ę件 2...
m33tfinder
M33tfinder ęÆäøäøŖēØäŗę£ęµ Cisco Meeting Server ęå”åØäøę“»åØä¼č®® ID čå“ēå·„å ·ć M33tbreak ęÆäøäøŖēØäŗéåƹ Cisco Meeting Server ęå”åØäøēä¼č®®ęµčÆå¼±åÆē ēå·„å ·ćPins.txt å å«ä¾å¦ 4 ä½ę°åēåÆē ć čæäŗå·„å ·ęØåØę£ę„ęå”åØęÆå¦å®¹ęåå° https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-meeting-server CVE-2018-15446 ēę»å»ļ¼ä» ēØäŗęč²åęµčÆē®ēć...
PIL-RCE-Ghostscript-CVE-2018-16509
éčæ Ghostscript CVE-2018-16509 å®ē° Python PIL/Pillow čæēØ Shell å½ä»¤ę§č” ēµęę„ęŗäŗ https://github.com/ysrc/PIL-RCE-By-GhostButtļ¼PIL/Pillow RCE via CVE-2017-8291ļ¼ćčæäøŖ Docker ēÆå¢ä½æēØēęÆč¾ę°ēę¬ē Ghostscript v9.23 åč¾ę°ēę¼ę“å©ēØ CVE-2018-16509ć Ghostscript ęÆäøå„åŗäŗ Adobe Systems PostScript å Portable Document Format PDF...
Zoho_CVE-2022-23779
ZohoCVE-2022-23779 Vulnerabilidad de divulgaciĆ³n del nombre de host interno Exploit de prueba de concepto Paso 1: curl -ILk https://IP:port/themes Paso 2: Lee la respuesta de redirecciĆ³n HTTP y analiza el encabezado de respuesta HTTP Location. PoC SĆguenos Plataforma Vulnmachines YouTube Twitter...
cve-2021-44228-log4j-test
cve-2021-44228-log4j-test Prueba 1. Servidor LDAP y servidor de descarga del archivo malicioso 1.1 EjecuciĆ³n de docker-compose docker-compose.yml root@kitploit: version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han"...