CVE-2024-24137

CVE-2024-24137: 学生ファイル管理システム SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24137.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24137/blob/main/CVE-2024-24137.md...

PyShell

PyShell PyShell はマルチプラットフォームの Python WebShell です。このツールは、Web サーバー上でシェルライクなインターフェースを取得し、リモートからアクセスできるようにするのに役立ちます。他の webshell とは異なり、このツールの主な目的は、サーバーサイドで使用するコードを、使用する言語やサーバーのオペレーティングシステムに関係なく、可能な限り少なくすることです。 これにより、Windows と Linux...

b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

android-c-sharp-rat-server

Android C R.A.T Server これは、C R.A.T Server のプラグインシステム用に構築されたプラグインです。 1. このプラグインをインストールするには、AndroidExtension/bin/Debug から AndroidExtension.dll ファイルを /TutServer/bin/Debug/scripts に配置します。 2. 次にサーバーを起動し、Plugins タブを選択します。 3. リストから AndroidExtension.dll を選択し、Execute をクリックします。 4...

BetterAndroRAT

Better Android RAT Dendroid ベースの Android リモートアクセス型トロイの木馬 すべての責任は自己責任です。 研究目的のみに使用してください。 機能 アプリケーションのリモート更新とインストール リモートWebカメラ リモートマイク録音 リモートファイル管理 リモート通話とSMS リモートデバイス制御...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

CVE-2026-29909-MRCMS-vulnerability

CVE-2026-29909：MRCMS V3.1.2 - 未认证目录枚举漏洞 CVE ID CVE-2026-29909 描述 MRCMS V3.1.2 的文件管理模块中存在一个未认证目录枚举漏洞。/admin/file/list.do 端点缺乏认证控制及适当的输入验证，允许远程攻击者在无需任何凭据的情况下枚举服务器上的目录内容。 概念验证（PoC） root@kitploit: GET /admin/file/list.do?path=../../../src/main/resources/ HTTP/1.1 Host: target-server 影响 未经授权访问服务器目录结构...

CVE-2026-86774 Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy

Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Model records without the required models.files permission...

oracleShell

oracleShell oracle データベースコマンド実行 テスト環境-DBA権限： SELECT FROM v$version root@kitploit: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1.0 - Production NLSRTL Version...

CVE-2022-44136-poc

CVE-2022-44136-poc Zenar CMS 9.3 は、ファイル管理モジュールに無制限のファイルアップロード脆弱性があり、認証された攻撃者（最小権限で）が悪意のあるPHPスクリプトを含む任意のファイルをWebサーバーにアップロードできるようになっています。ファイル拡張子の検証が不十分で適切なサニタイズが行われていないため、攻撃者は細工されたペイロード（例：Webシェル）をアップロードし、Webルートからアクセスすることで、ターゲットシステム上で任意のコードを実行できます。...

CVE-2026-73298 Microsoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processes

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...

EUVD-2026-57371

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...

CVE-2026-73298

The CVE-2026-73298 entry concerns the Microsoft Container Migration Solution Accelerator (multi-service AI-driven migration tool) with vulnerability in version 2.1.2 and earlier. The issue is an authenticated IDOR (Insecure Direct Object Reference) that permits reading, writing, and deleting proc...

CVE-2026-73298 Microsoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processes

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...

CVE-2026-19326

CVE-2026-19326 affects Jevon-Zhong Ai-doctor 0.0.1. The vulnerability is in the deleteImage function of ai-doctor-server/src/filemanagement/filemanagement.service.ts, where manipulating the imagePath argument enables path traversal. Local access is required. The project was informed via an issue ...

EUVD-2026-54853

A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. Performing a manipulation of the argument imagePath results in path traversal. The attack must be initiated...

CVE-2026-54416

Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php '.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar', checked against the last 4-5 characters of the...

EUVD-2026-53192

Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php '.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar', checked against the last 4-5 characters of the...

CVE-2026-15958

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

EUVD-2026-51393

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...