69726 matches found
CVE-2022-0482_exploit
CVE-2022-0482 Vulnerability Exploitation Introduction This document outlines the detailed analysis of CVE-2022-0482, a critical security vulnerability identified in the Easy!Appointments scheduling software. This flaw, related to Incorrect Authorization under CWE-863, allows unauthorized access t...
CVE-2024-9014
This post is a research article published by EQSTLab. CVE-2024-9014 โ CVE-2024-9014 Sensitive Information Exposure PoC โ Description CVE-2024-9014 : pgAdmin4 Sensitive Information Exposure description: pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication...
r4ven
ใใฎGitHubใชใใธใใชใๅฝน็ซใคใจๆใใใใใๆใไปใใใใจใใๆค่จใใ ใใ๏ผ โญ๏ธ โถ๏ธ ๅ็ปใ่ฆใ - ไฝฟใๆน ใใฎใใญใธใงใฏใใฏใใฆใผใถใผใๆ็คบ็ใซ่จฑๅฏใไธใใๅ ดๅใซใๆๆฐใฎWebใใฉใฆใถใใฉใฎใใใซใใฆไฝ็ฝฎๆ ๅ ฑใใซใกใฉใขใฏใปในใIPใขใใฌในใใใใคในๆ ๅ ฑ ใ้ฒๅบใใใๅฏ่ฝๆงใใใใใ็คบใใใใซ่จญ่จใใใใใปใญใฅใชใใฃ็ ็ฉถใใใณๅ็บใใผใซใงใใ ใใฎใใผใซใฏใใใขใณในใใฌใผใทใงใณ็ฎ็ใงๆญฃๅฝใชใณใณใใณใใๅใ่พผใใ ๅถๅพกใใใWebใใผใธใๆไพใใพใใใฆใผใถใผใ่ช็บ็ใซใใฉใฆใถใฎ่จฑๅฏใไธใใใจใใขใใชใฑใผใทใงใณใฏGPSๅบงๆจใIPๆ ๅ ฑใใใใคในใฎ่ฉณ็ดฐใใซใกใฉๅ ฅๅ...
CVE-2026-27944
CVE-2026-27944 - Nginx UI Unauthenticated Backup Download & Decryption https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red A proofโofโconcept PoC exploit for CVEโ2026โ27944, a critical vulnerability in Nginx...
EUVD-2026-78935
This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an...
CVE-2026-21587
This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resource...
CVE-2026-21586
This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an...
sickrageWTF
Sickrage cleartext github credentials CVE-2018-9160 1. About Exploit Title: SickRage Clear-Text Credentials in HTTP Response Date: 2018-04-01 Exploit Author: Sven Fassbender Contact: https://twitter.com/mezdanak Vendor Homepage: https://sickrage.github.io Software Link:...
Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-
Extracting-User-credentials-For-Hathway-Router Via SPI flash-CVE-2024-44815 Vulnerability Description: During the security assessment of the Router firmware, it was observed that router login credentials of both web portal and Wi-Fi access point are stored in plain text in SPI flash memoey...
Kamerka-GUI
Kamerka GUI Kamerka GUI is a Django-based reconnaissance dashboard for discovering, reviewing, and triaging Internet-exposed Industrial Control System, Internet of Things and medical devices. It combines Shodan search data, Google Maps visualization, device screenshots, passive intelligence...
redis-cve-2026-23479-scanner
CVE-2026-23479 Scanner Redis Use-After-Free vulnerability CVE-2026-23479 detection tool. Automatically checks Redis instances for vulnerability, misconfigurations, and exposure risks. Affected Versions...
CVE-2024-28000
CVE-2024-28000 PoC This repository contains tools for exploiting the CVE-2024-28000 vulnerability affecting WordPress sites using the LiteSpeed Cache plugin. The included scripts automate the detection of exposed debug.log files and the exploitation of a privilege escalation vulnerability that...
SnipRecover-CLI
SnipRecover CLI Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303 SnipRecover CLI is a minimal, dependency-free command-line utility designed to: Detect PNG files modified by the Windows Snipping Tool vulnerability CVEโ2023โ28303. Restore the original...
CVE-2026-40083
Cacti managers.php ใซใใใ SQL ใคใณใธใงใฏใทใงใณ CVE-2026-40083 ใฎๆฆๅฟตๅฎ่จผใจใฏในใใญใคใใงใใCacti ใฎ managers.php ใซๅญๅจใใ SQL ใคใณใธใงใฏใทใงใณใฎ่ๅผฑๆงใๅฉ็จใใSNMP Manager ๆจฉ้ใๆใค่ช่จผๆธใฟใฆใผใถใผใ MySQL ใใผใฟใใผในๅ จไฝใ่ชญใฟๅใใใฆใผใถใผ่ณๆ ผๆ ๅ ฑใใในใฏใผใใใใทใฅใๅๅพใใใใจใๅฏ่ฝใซใใพใใ ไฝฟ็จๆนๆณ: root@kitploit: Verify injection time-based $ python3 exploit/poc.py --url http://TARGET --user...
CVE-2026-20230-Scanner
CVE-2026-20230 Scanner A Python-based scanner and validation tool for identifying potentially vulnerable Cisco Unified Communications Manager Unified CM deployments affected by CVE-2026-20230. Features Detects Cisco Unified CM instances Checks WebDialer exposure Supports single-target and bulk...
CVE-2023-2916
CVE-2023-2916 CVE-2023-2916 PoC The InfiniteWP Client plugin for WordPress, in versions up to and including 1.11.1, is vulnerable to a Sensitive Information Exposure flaw. This vulnerability allows authenticated attackers with subscriber-level permissions or above to extract sensitive data,...
nox-framework
root@kitploit: โโโโ โโโ โโโโโโโ โโโ โโโ โโโโโ โโโโโโโโโโโโโโโโโโโโ โโโโโโ โโโโโโ โโโ โโโโโโ โโโโโโโโโโโโโ โโโ โโโโโโ โโโ โโโโโโโโโโโโโโโโโโโ โโโ โโโ โโโโโ โโโโโโโ โโโ โโโ Cyber Threat Intelligence Framework OSINT framework for red teaming, digital forensics, and corporate exposure analysis...
EUVD-2026-78653
Vikunja before 2.6.0 continues to expose the raw TOTP shared secret after enrollment through the GET /api/v1/user/settings/totp and /api/v1/user/settings/totp/qrcode endpoints without re-authentication. Attackers with a valid access token can read the secret, import it into their own authenticato...
CVE-2021-38314
CVE-2021-38314 Python Exploit Detail The Gutenberg Template Library & Redux Framework plugin Example PoC - https://youtu.be/n1e4aFmXvOk Links CVE-2021-38314...
bucket-stream
๐จ Bucket Stream ใฏใกใณใใใณในใใใชใใชใใพใใใใฌใใใใผใ ๆดปๅใฎใตใใผใใ็ธ่ซใๅฟ ่ฆใชๅ ดๅใฏใ[email protected] ใพใงใกใผใซใใ้ใใใ ใใใ๐จ Bucket Stream ่ช่จผๅฑ้้ๆงใญใฐใ็ฃ่ฆใใฆ่ๅณๆทฑใAmazon S3ใใฑใใใ่ฆใคใใพใใ ใใฎใใผใซใฏใๆงใ ใช่ช่จผๅฑ้้ๆงใญใฐ๏ผcertstream็ต็ฑ๏ผใใชใในใณใใ่จผๆๆธใฎใใกใคใณๅใฎใใผใใฅใใผใทใงใณใใๅ ฌ้S3ใใฑใใใๆขใใใจใใพใใ ่ฒฌไปปใๆใฃใฆไฝฟ็จใใฆใใ ใใ...