CVE-2024-36991

CVE-2024-36991 Уязвимость обхода пути в Splunk Enterprise в версиях Windows ниже 9.2.2, 9.1.5 и 9.0.10, которая позволяет читать конфиденциальные файлы...

CVE-2017-14980_syncbreeze_10.0.28_bof

Эксплойт - CVE-2017-14980 - Sync Breeze Enterprise v10.0.28 Этот репозиторий содержит доказательство концепции эксплойта переполнения буфера BOF для Sync Breeze Enterprise версии 10.0.28, нацеленный на уязвимость, обозначенную как CVE-2017-14980. Описание Уязвимость существует из-за неправильной...

CVE-2019-8978

CVE-2019-8978 Ellucian Banner Web Tailor 및 Banner Enterprise Identity Services에서의 부적절한 인증 CWE-287 작성자: Katie Mulliken [email protected] 감사: Carnegie Mellon University CERT Coordination Center 정보 발견일: 2018년 12월 17일 공급업체: Ellucian Company L.P. 공급업체 홈페이지: https://www.ellucian.com 제품: Banner Web...

attack-stix-data

Данные ATT&CK® STIX MITRE ATT&CK — это глобально доступная база знаний о тактиках и техниках противника, основанная на наблюдениях из реального мира. База знаний ATT&CK используется как основа для разработки конкретных моделей угроз и методологий в частном секторе, в государственном секторе, а...

sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

user.js

This repo and the interative webpage linked below are the only official sources - do not trust any other sites claiming to be Arkenfox 🟪 user.js A user.js is a configuration file that can control Firefox settings - for a more technical breakdown and explanation, you can read more in the wiki 🟩 th...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. id: CVE-2025-27225 info: name: TRUfusion Enterprise = 7.10.4.0 - Admin Conta...

Splunk Enterprise - Local File Inclusion

In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows. id: CVE-2024-36991 info: name: Splunk...

GitLab Enterprise Edition - Server-Side Request Forgery

An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue. id: CVE-2019-6793 info: name: GitLab Enterprise Edition - Server-Side Request Forgery author:...

CyberPower - Missing Authentication

An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. id: CVE-2024-32735 info: name: CyberPower - Missing Authentication author: DhiyaneshDK severity: critical description: | An issue regarding missing authentication for certai...

Tarantella Enterprise <3.11 - Local File Inclusion

Tarantella Enterprise versions prior to 3.11 are susceptible to local file inclusion. id: CVE-2018-19753 info: name: Tarantella Enterprise 3.11 - Local File Inclusion author: 0xAkoko severity: high description: | Tarantella Enterprise versions prior to 3.11 are susceptible to local file inclusion...

CyberPower - SQL Injection

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. id: CVE-2024-32738 info: name: CyberPower - SQL Injection author: DhiyaneshDk severity: high description: | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3...

WSO2 - Cross-Site Scripting

WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...

pritunl

pritunl: корпоративный VPN-сервер Pritunl — это распределённый корпоративный VPN-сервер, построенный на основе протокола OpenVPN. Документацию и дополнительную информацию можно найти на домашней странице pritunl.com Установка из исходного кода root@kitploit: Install MongoDB if running single host...

CVE-2024-36991

CVE-2024-36991 POC для CVE-2024-36991: Этот эксплойт попытается прочитать файл /etc/passwd в Splunk. Обзор Это инструмент для массового сканирования и эксплуатации уязвимости CVE-2024-36991: Path traversal, затрагивающей Splunk Enterprise на Windows версий ниже 9.2.2, 9.1.5 и 9.0.10. Эта уязвимос...

chapcrack

chapcrack MS-CHAPv2 नेटवर्क हैंडशेक को पार्स और डिक्रिप्ट करने के लिए एक उपकरण। 1. सबसे पहले आपको उस MS-CHAPv2 हैंडशेक का नेटवर्क ट्रैफ़िक प्राप्त करना होगा जिसे आप क्रैक करना चाहते हैं। PPTP VPN कनेक्शन के लिए, नेटवर्क कैप्चर प्राप्त करने के लिए tcpdump या wireshark जैसे उपकरण का उपयोग करें। WPA...

CVE-2022-29464

CVE-2022-29464 WSO2 ist eine führende Plattform für verschiedene SOA-Lösungen, die SOA-bezogene Infrastruktur, technische Frameworks und zugehörige Tools, Prozessserver, Anwendungsserver usw. umfasst. Betroffene Versionen 2.2.0 ≤ WSO2 API Manager ≤ 4.0.0 5.2.0 ≤ WSO2 Identity Server ≤ 5.11.0 WSO2...

CVE-2015-8543_for_SLE12SP1

root@kitploit: $cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" root@kitploit: $id uid=1000jeremysp1 gid=100users groups=100users root@kitploit: $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i...

detect-secrets

detect-secrets Informazioni detect-secrets è un modulo giustamente chiamato per sorpresa, sorpresa rilevare segreti all'interno di una base di codice. Tuttavia, a differenza di altri pacchetti simili che si concentrano esclusivamente sulla ricerca di segreti, questo pacchetto è progettato pensand...

Qlik Sense Enterprise - HTTP Request Smuggling

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...