CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability

Jenkins es un servidor de automatización de código abierto. Ayuda a automatizar las partes del desarrollo de software relacionadas con la compilación, las pruebas y el despliegue, facilitando la integración continua y la entrega continua. CVE-2024-23897 Vulnerabilidad de lectura arbitraria de...

CVE-2026-92247 synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2026-92247

CVE-2026-92247 affects synaptik-cms up to version 1.3.4.4 . The vulnerability resides in the rename function of admin/file-manager.php within the Admin File Manager component, where manipulation of this function leads to unrestricted upload of files. The attack can be initiated remotely but requi...

EUVD-2026-80091

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2026-92247 synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2026-92247 synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2021-31630

CVE-2021-31630 打HTB的机器时候碰到的cve，exploit-db的exp有些错误于是给出手工利用方式以及exp 脚本使用 命令执行无回回显 root@kitploit: python exp.py -u http://127.0.0.1:8080 -l openplc -p openplc -c "whoami" 手工exp 后台的攻击链如下 创建st项目并编译→在hardware处加入恶意代码，并编译到项目本体中→start项目触发恶意代码 demo.st root@kitploit: PROGRAM prog0 VAR varin : BOOL; varout :...

CVE-2024-28995-SolarWinds-Serv-U

CVE-2024-28995-SolarWinds-Serv-U SolarWinds Serv-U File Server Serv-U es un servidor de archivos multiprotocolo capaz de enviar y recibir archivos desde otros equipos de la red a través de diversos medios. CVE-2024-28995 es una vulnerabilidad de traversal de directorios no autenticada en SolarWin...

CVE-2026-23907

Vulnerabilidad de Path Traversal en Apache PDFBox Resumen de la Vulnerabilidad Descripción El código de ejemplo ExtractEmbeddedFiles de Apache PDFBox no sanitiza los nombres de archivo al extraer archivos incrustados de PDFs. Un atacante puede incrustar archivos con secuencias de path traversal ....

CVE-2023-4357-Chrome-XXE

工具简介 全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP，实现对访客者本地文件窃取。 The world's first single file exploits the CVE-2023-4357 Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors. 文件名| 说明| 利用场景| 为何能单文件/单payload实现漏洞利用？ ---|---|---|--- d.svg| 单文件利用，无需依赖其他文件| 1...

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2024-27815 XNU kernel heap buffer overflow in sbconcatm...

EUVD-2026-80082

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generateindexpasien of the file application/models/appglobaladminmodel.php. Executing a manipulation of the argument cari can lead to sql...

CVE-2026-92221

A SQL injection vulnerability exists in gedelumbung HospitalManagement (up to commit c2d45543789a3887067d3915f69d44cfc2cf76a8), specifically in the function generate_index_pasien within application/models/app_global_admin_model.php. Manipulating the cari argument allows a remote attacker with hig...

CVE-2026-92221 gedelumbung HospitalManagement app_global_admin_model.php generate_index_pasien sql injection

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generateindexpasien of the file application/models/appglobaladminmodel.php. Executing a manipulation of the argument cari can lead to sql...

CVE-2024-23897

CVE-2024-23897 - Jenkins 任意文件读取 利用工具 安装 CVE-2024-23897 需要go 1.21才能完成安装 执行以下命令 root@kitploit: go install github.com/wjlin0/CVE-2024-23897/cmd/CVE-2024-23897@latest 或者 安装完成的二进制文件在release中下载 macOS-arm64 macOS-amd64 linux-amd64 windows-amd64 windows-386 使用 root@kitploit: CVE-2024-23897 -help...

log4noshell

Log4NoShell A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 "Log4Shell". If possible, update your program to use the latest Log4J version, as the vulnerability is fixed as of version 2.17.1. Otherwise, download log4noshell-0.8.1.jar and continue reading. Usage To...

CVE-2021-3560

PolicyKit CVE-2021-3560 Explotación Agente de autenticación Implementación en C de la explotación de CVE-2021-3560, publicaciones sobre esta explotación: https://ricterz.me/posts/2022-04-28-a-new-exploit-method-for-cve-2021-3560-polkit-linux-privilege-escalation.txt...

CVE-2025-5287

描述： 这是一个利用代码，针对WordPress插件上的Unauth SQL注入漏洞（CVE-2025-5287），支持多个URL和多线程。 使用示例： 用法: CVE-2025-5287.py -h --file FILE --fudge FUDGE --timeout TIMEOUT --threads THREADS --proxy PROXY 基于时间的SQL注入检查器（整洁、多线程、支持代理） 可选参数： -h, --help 显示此帮助信息并退出 --file FILE 包含基础URL的文件（例如 http://example.com） --fudge FUDGE...

CVE-2025-0133

Descripción: Es un POC para CVE-2025-0133 que es aplicable solo a configuraciones de firewall PAN-OS con una puerta de enlace o portal GlobalProtect habilitado. Comprueba el problema en múltiples URLs que acepta desde un archivo, con hilos personalizados. También puedes configurar tu timeout y...

nakivo-arbitrary-file-read-poc-CVE-2024-48248

CVE-2024-48248 Prueba de concepto de lectura arbitraria de archivos sin autenticación en NAKIVO Backup and Replication Solution Consulta nuestro artículo de blog para obtener detalles técnicos Detección en acción root@kitploit: python3 watchtowr-vs-nakivo-arbitrary-file-read-poc-CVE-2024-48248.py...