229229 matches found
Pandora Fms < 3.1.1 - Directory Traversal
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via 1 the page parameter to ajax.php or 2 the id parameter to general/pandorahelp.php, and allow remote attackers to include and execute, create, modify, or...
11in1 CMS 1.2.1 - Local File Inclusion (LFI)
Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. dot dot in the class parameter to 1 index.php or 2 admin/index.php. id: CVE-2012-0996 info: name: 11in1 CMS 1.2.1 - Local File Inclusion LFI author: daffainfo...
Rails File Content Disclosure
Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...
kkFileView 4.1.0 - Cross-Site Scripting
kkFileView 4.1.0 is susceptible to cross-site scripting via the url parameter at /controller/OnlinePreviewController.java. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...
web_exploit_detector
Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...
web_exploit_detector
Web Exploit Detector はじめに Web Exploit Detector は、ウェブホスティング環境における感染の可能性、悪意のあるコード、および不審なファイルを検出するための Node.js アプリケーション（および NPM モジュール）です。このアプリケーションは、1 つ以上のウェブサイトをホストするウェブサーバー上で実行することを目的としています。アプリケーションを実行すると、感染している可能性のあるファイルのリストが、感染の説明や関連するオンラインリソースへの参照とともに生成されます。 バージョン 1.1.0...
Exploit_Development
Pruebas de concepto para mis CVEs CVE-2022-3436 - Online Student Clearance System v1.0 - CVE-2022-3436.py...
exploits
漏洞利用 我的个人漏洞利用收藏，涵盖 n-day、CTF、0day、内核、浏览器以及大量酷炫内容 :D...
CVE-2020-0418
CVE-2020-0418 Android Studio project to generate the APKs used for the exploit. To generate version 1 of the APK, just leave the indicated lines commented in AndroidManifest.xml To generate version 2 of the APK, just uncomment them Demo at https://www.youtube.com/watch?v=3qPJoiuWhD0...
cve-2018-9207
CVE-2018-9207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9207 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9207...
CyberPanel-RCE
CyberPanel-RCE 针对 CyberPanel RCE 的漏洞利用工具，适用于 v2.3.6 版本 更多信息可参见我的博客：https://dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce...
Strapi-CVE-2019-1881
Strapi-CVE-2019-1881 por Kynda 1. pip install requests 2. python3 exploit.py :...
CVE-2024-2389
Progress Kemp Flowmon CVE-2024-2389 描述 该仓库包含一个 Python 脚本，用于利用 Flowmon 中的漏洞，从而在目标系统上获得反弹 shell。该漏洞利用 service.pdfs/confluence 端点中的缺陷，在服务器上执行任意命令，最终建立反弹 shell 连接。 使用方法 1. 将仓库克隆到本地计算机： root@kitploit: https://github.com/adhikara13/CVE-2024-2389.git 2. 进入克隆的目录： root@kitploit: cd CVE-2024-2389 3. 运行...
CVE-2023-28252-
CVE-2023-28252- CVE-2023-28252 漏洞利用检测 监控目录中文件的创建，漏洞利用程序在硬编码路径下留下的用于利用的文件：文件夹 "C:\Users\Public"、"C:\Users\Public.container"、"C:\Users\Public\MyLog.blf" 和 "C:\Users\Public\p"。...
CVE-2020-17057
I wrote this exp based on this blog（https://blogs.360.cn/post/CVE-2020-17057%20detail%20and%20exploit.html），But I ended up with only palette objects with dangling data pointer. Because of type isolation, I can't get arbitrary R/W primitives by using palettes or bitmap objects，If you have a way to...
libmsm_cameraconfig_exploit
原始代码由 @tewilove 编写 http://pastebin.com/8BPCDc4i...
CVE-2020-1472
CVE-2020-1472 Packaged py files used in reproducing CVE-2020-1472 The examples path contains the directory where the exp files are located; the rest are import packages, just ignore them Corresponding blog post: https://www.svenbeast.com/post/fu-xian-cve-2020-1472-netlogon-te-quan-ti-sheng-lou-do...
CVE-2023-38831-winrar-exploit
CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory,...
blind-ssrf-chains
Introducción ¿Qué es Server Side Request Forgery SSRF? Server Side Request Forgery ocurre cuando puedes obligar a un servidor a realizar solicitudes arbitrarias en tu nombre. Como las solicitudes las realiza el servidor, es posible acceder a recursos internos debido a la posición del servidor en ...