CVE-2025-30208

🔥 CVE-2025-30208 Vite Arbitrary File Read Vulnerability Scanner Advanced vulnerability scanner for CVE-2025-30208 with enterprise-grade features Professional penetration testing tool for Vite Arbitrary File Read vulnerability detection 🚀 Quick Start • 📋 Features • 🔧 Usage • 📊 Examples • 🛡️ Securit...

CVE-2026-86342

Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality. The preview performed correlation lookups against attributes from events without applying the requesting user's ACL, allowing restricted event correlations and associated event information ...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472...

CVE-2022-24716

CVE-2022-24716 Icinga Web 2 is a software application that monitors computer systems and networks. It has a web interface that allows users to view and manage system resources. However, there is a vulnerability in Icinga Web 2 that allows unauthenticated users to access files on the system that a...

CVE-2025-44203

CVE-2025-44203: HotelDruid 3.0.0 / 3.0.7 Divulgación de información sensible y DoS Resumen HotelDruid 3.0.0 y 3.0.7 contienen una condición de carrera en el endpoint de configuración creadb.php, accesible antes de que la instalación haya terminado. Tiene dos impactos, y ambos provienen de la mism...

CVE-2021-41773

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 Info A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document...

CVE-2020-11579

CVE-2020-11579 简介 PHPKB 9.0 企业版（MySQL 数据库） 存在一个通过恶意 MySQL 服务器触发的未认证任意文件读取漏洞。 远程攻击者只需发送单个 HTTP GET 请求，即可在远程受害主机上以 Web 服务器权限（例如 www-data）读取任意文件。 阅读更多：https://shielder.it/blog/mysql-and-cve-2020-11579-exploitation 说明 该脚本也可以以 server-only mode（仅服务端模式）运行，并提供一个独立的 MySQL 服务器，可用于类似的漏洞利用。 用法 root@kitploit:...

CVE-2026-86342

MISP versions ≤ 2.5.45 contain improper authorization checks in the freetext feed preview functionality. Correlation lookups queried attributes from events without applying the requesting user's ACL, exposing restricted event correlations and associated information to users lacking access. The sa...

CVE-2024-38041

CVE-2024-38041 Kernel pointers copied to output user mode buffer with ioctl 0x22A014 in the appid.sys driver...

CVE-2024-10354

源代码 汽油泵管理软件免费下载 | SourceCodester 描述 sourcecodester 汽油泵管理软件 v1.0 中存在 SQL 注入漏洞，该漏洞被评为高危，影响 admin\print.php 文件中的未知功能，使用参数 id 构造恶意 SQL 语句以获取敏感信息，从而造成危害。 漏洞分析 admin\print.php 此处，用户输入 $POST'id' 被直接拼接到 SQL 查询语句中，显然容易受到 SQL 注入攻击。 漏洞复现 root@kitploit: POST /admin/print.php HTTP/1.1 Host: 10.151.167.168:667...

CVE-2017-8295

CVE-2017-8295 Wordpress has a password reset feature that contains a vulnerability which might in some cases allow attackers to get hold of the password reset link without previous authentication. Such attack could lead to an attacker gaining unauthorised access to a victim's WordPress account...

CVE-2021-38314

CVE-2021-38314 Python Exploit 详情 Gutenberg Template Library & Redux Framework 插件 PoC 示例 - https://youtu.be/n1e4aFmXvOk 链接 CVE-2021-38314...

CVE-2024-32370

CVE-2024-32370 Vulnerability Description Issue An issue in HSC Cybersecurity HSC Mailinspector version 5.2.17-3 has been identified, allowing a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component. Vulnerable Component...

SXDork

SXDork v1.0 SXDork is a powerful tool that utilizes the technique of google dorking to search for specific information on the internet. Google dorking is a method of using advanced search operators and keywords to uncover sensitive information that is publicly available on the internet. SXDork...

WordPress-Exploit-CVE-2024-1071

WordPress CVE 2024-1071 SQL Exploit This exploit, which runs on WordPress versions 2.1.3 to 2.8.2, allows unauthenticated attackers to add additional SQL queries to existing queries that can be used to pull sensitive information from the database. Dork: body="/wp-content/plugins/ultimate-member" ...

WebKit-CVE-2016-4622

WebKit CVE-2016-4622 Analysis: Deep Dive into the Slice ValueOf Fastpath Vulnerability Comprehensive analysis and exploitation of the WebKit JavaScript Core vulnerability that enables memory disclosure through Array.slice manipulation Table of Contents Executive Summary Vulnerability Overview...

CVE-2024-28995-Nuclei-Template

CVE-2024-28995 Nuclei テンプレート Serv-U バージョン 15.4.2 以下におけるディレクトリトラバーサル脆弱性をチェックし、/etc/passwd などの機密ファイルを読み取ることができるかを確認します。 テンプレートの詳細 root@kitploit: id: CVE-2024-28995 info: name: Serv-U Directory Traversal Vulnerability author: Hüseyin TINTAŞ severity: high description: Checks for directory traversal...

CVE-2018-14847

WinboxExploit これは、クリティカルなWinBoxの脆弱性（CVE-2018-14847）の概念実証であり、プレーンテキストのパスワードの任意のファイル読み取りを可能にします。 ブログ記事 https://n0p.me/winbox-bug-dissection/ 必要条件 Python 3+ このスクリプトはPython 2.x以下では動作しません。 使用方法 このスクリプトは、コマンドラインでシンプルな引数を使って簡単に使用できます。 WinBox TCP/IP 脆弱性を悪用してパスワードを読み取ります。 root@kitploit: python3...

CVE-2024-24919

CVE-2024-24919 Exploit Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID : CVE-2024-24919 Severity : Critical Table of Contents Vulnerability-detail...

CVE-2006-2842

徽章 许可证 MIT 安装 使用 npm 安装 cve-2006-2842 root@kitploit: npm install cve-2006-2842 -g 用法 单个 URL 示例 root@kitploit: cve-2006-2842 -u http://example.com 用法 URL 列表示例 root@kitploit: cve-2006-2842 -l urls.txt -o out.txt 屏幕截图 帮助菜单 获取所有项目 root@kitploit: 👋 Hey karthithehacker .-----------------------------. |...