53638 matches found
CVE-2018-7690
CVE-2018-7690 SSC REST API 中存在不安全的直接对象引用（IDOR）漏洞，允许经过身份验证的用户通过 POST 方法访问本地和 LDAP 用户的任意详细信息，并通过 GET 方法访问其他用户 Fortify 项目的任意详细信息。 Exploit-DB 发布地址：https://www.exploit-db.com/exploits/45989 PacketStorm...
CVE-2018-7691
CVE-2018-7691 SSC REST API 包含不安全的直接对象引用（IDOR）漏洞，允许经过身份验证的用户通过 POST 方法访问本地和 LDAP 用户的任意详细信息，并通过 GET 方法访问其他用户 Fortify 项目的任意详细信息。 Exploit-DB 发布在 https://www.exploit-db.com/exploits/45990 PacketStorm 发布在...
CVE-2017-18019
CVE-2017-18019 En construcción : Por favor, vuelve más tarde...
duplicut
Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order...
CVE-2017-12426
Este repositorio no tiene un README...
Duplicator < 1.4.7.1 - Information Disclosure
The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site. id: CVE-2022-2552 info: name: Duplicator 1.4.7.1 - Information Disclosure author:...
ArgoCD Project API Token Repository Credentials Exposure
Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwords through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. This vulnerability...
shellstack
ShellStack 版本 1.0 ShellStack 是一个基于 PHP 的后门管理工具。对于希望追踪自己入侵的每个网站的“黑客”来说，这款工具非常实用。该工具会生成一个后门文件，你只需将其上传到目标网站，然后将后门 URL 放入工具目录下的 shells.txt 文件中即可。 使用 ShellStack 你可以 导入 PHP Shell 获取服务器详细信息 通过终端从你的系统上传文件 最重要的是，你能高效管理你的后门 使用方法 1. git clone https://github.com/Tuhinshubhra/shellstack 2. cd shellstack 3. ph...
nmap
Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...
CVE-2025-55182
Affect Version 组件| 复现推荐使用版本| 易受攻击版本范围 ---|---|--- Node.js| = 20.9.0| 20.9.0 LTS 及以上 Next.js| 15.0.0| 15.x, 16.xApp Router React Core| 19.0.0 或 19.2.0| 19.0.0 到 19.2.0 RSC Bundler| react-server-dom-webpack| 19.0.0 到 19.2.0 Build and Start 1. 强制安装低版本 root@kitploit: cd cve-2025-55182-target npm...
CVE-2023-1430
Update 2023-06-12: You no longer need the snippet. WPManageNinja patched the vulnerability two hours after public disclosure 93 days after reporting. Update 2024-01-27: The related issue with with everlasting hash values is now fully addressed. Responsible disclosure of unpatched vulnerability...
FakeDataGen
FakeDataGen 是一个完全有效的虚假数据生成器。 该工具帮助您创建具有完全有效数据的虚假账户（西班牙语格式）。在这些信息中，您可以找到最常见的姓名、电子邮件、银行详细信息和其他有用信息。 要求 Python 3 安装 requirements.txt 下载 建议克隆完整仓库或下载压缩文件。 您可以通过运行以下命令来执行此操作： root@kitploit: git clone https://github.com/JoelGMSec/FakeDataGen 用法 root@kitploit: ./FakeDataGen.py -h | | | | | \ | | / | | | ...
CVE-2025-48384
CVE-2025-48384 Este es un archivo README...
CVE-2026-62105
creationtimestamp| type| source ---|---|--- 2026-09-11 18:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvbaarbvd42j 2026-09-11 20:08:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvbemw4pqi22...
hashcatch
hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...
CVE-2026-72709
creationtimestamp| type| source ---|---|--- 2026-09-11 17:18:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eezs3rf76rjy6 2026-09-11 17:30:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvb3rspmhl2b 2026-09-11 18:08:50+00:00| seen|...
CVE-2026-89260
creationtimestamp| type| source ---|---|--- 2026-09-11 17:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvb25lrd622r 2026-09-11 17:06:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dsda2gwjnlejy...
CVE-2026-75642
creationtimestamp| type| source ---|---|--- 2026-09-11 16:22:08+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mvaxy7aqhj2u...
CVE-2026-89010
creationtimestamp| type| source ---|---|--- 2026-09-11 15:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvav34lltf2g 2026-09-11 16:09:05+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvaxarqles2j 2026-09-11 16:49:17+00:00| seen|...