CVE-2026-84675

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...

CVE-2024-37081

VMware vCenter - CVE-2024-37081 Proof of Concept Descripción Este repositorio contiene una prueba de concepto PoC para la vulnerabilidad CVE-2024-37081 en VMware vCenter. La vulnerabilidad se debe a una mala configuración en el archivo /etc/sudoers que permite la preservación de variables...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

CVE-2014-6271

CVE-2014-6271 توجد ثغرة أمنية تُعرف باسم "ShellShock" في GNU Bash حتى الإصدار 4.3 بسبب طريقة معالجتها للسلاسل النصية اللاحقة في قيم متغيرات البيئة بعد تعريفات الدوال. تتيح هذه الثغرة للمهاجمين عن بُعد تنفيذ تعليمات برمجية عشوائية من خلال صياغة البيئة في حالات معينة، بما في ذلك عندما يتم تعيين...

CVE-2021-41277

CVE-2021-41277 Uso 1. mostrar información de ayuda root@kitploit: /CVE-2021-41277 ❯ go run main.go -h Usage of main: -f string File containing list of targets to verfity -o string File to write output to optional -s Show VulnInfo output -t int Number of concurrent goroutines for resolving default...

CVE-2026-84694

Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers...

patched-bash-4.3

patched-bash-4.3 patched-bash-4.3 para CVE-2014-6271 Esto es simplemente bash 4.3, descargado del sitio web de GNU y parcheado con los parches disponibles el 26/9/2014, incluidos los cambios de funcionalidad de pkgsrc que desactivan por completo la absurda "ejecución de funciones en variables de...

libssh: libssh: information disclosure via ProxyCommand %r username expansion

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior...

OwnCloud - Phpinfo Configuration

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

CVE-2021-4034

CVE-2021- Se encontró una vulnerabilidad de escalada de privilegios local en la utilidad pkexec de polkit. La aplicación pkexec es una herramienta setuid diseñada para permitir que usuarios no privilegiados ejecuten comandos como usuarios privilegiados según políticas predefinidas. La versión...

CVE-2023-28432

CVE-2023-28432 Plantillas de nuclei para CVE-2023-28432 Descripción Minio es un framework de almacenamiento de objetos Multi-Cloud. En un despliegue en clúster, a partir de RELEASE.2019-12-17T23-16-33Z y antes de RELEASE.2023-03-20T20-16-18Z, MinIO devuelve todas las variables de entorno, incluid...

CVE-2024-6678

CVE-2024-6678 - GitLab: Disparo Arbitrario de Usuario en Pipeline Schedule PoC para CVE-2024-6678 Descripción de la vulnerabilidad GitLab permite a los usuarios ejecutar manualmente las programaciones de pipelines de CI/CD Pipeline Schedules mediante el botón «Play». La vulnerabilidad consiste en...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

shellshock-cve-lab

Laboratorio Shellshock CVE-2014-6271 Este repositorio contiene un pequeño laboratorio CGI para CVE-2014-6271. Compila GNU bash 4.2, sirve un script CGI a través de un servidor estilo RFC-3875 en Python, y mapea las cabeceras de las peticiones en variables de entorno CGI. Sentinel reprodujo este...

CVE-2023-28432

MinIO 漏洞利用 CVE-2023-28432 描述 此 Python3 脚本旨在利用 CVE-2023-28432，该漏洞可能影响某些 MinIO 服务器配置。脚本向指定主机名发送 POST 请求，尝试获取敏感环境变量，例如 MINIOROOTPASSWORD 和 MINIOUPDATEMINISIGNPUBKEY。 需求 Python 3 requests 库 安装 运行脚本前，请确保系统中已安装 Python 3。你可以使用 pip 安装所需的 Python 包： root@kitploit: pip3 install requests 用法 脚本接受主机名作为必需参数，并支持...

CVE-2009-5147

CVE-2009-5147 e CVE-2015-7551 PoC per eseguirlo: root@kitploit: make foo export FOO=./foo.so ruby -v foo.rb con versioni diverse di ruby si dovrebbero ottenere risultati diversi: root@kitploit: vpereira@kimura:/poc rvm use 2.1.7 vpereira@kimura:/poc ruby -v foo.rb ruby 2.1.7p400 2015-08-18 revisi...

GHSA-JQVF-J3WW-R8C7 PowSyBl Core has Command Injection in LocalCommandExecutor-s

Impact Description Both AbstractLocalCommandExecutor OS-dependent implementations are subject to CWE-78 OS Command Injection, with a secondary CWE-88 Argument Injection concern via environment variables. The local command executor build command strings via concatenation and executes them through...

CVE-2025-30156

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...

Uncontrolled Search Path Element

Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Uncontrolled Search Path Element through the bundled xmllint tool in the underlying dependency. An attacker can potentially influence the search path used for external libraries ...

Security Bulletin: Langflow is affected by weaknesses in secret handling and sensitive configuration access

Summary Langflow includes features for secret protection, environment access, and runtime configuration of workflow components. Weaknesses in cryptographic key handling, exposure of process environment values, and insufficient restriction of sensitive runtime configuration fields could allow...