CVE-2023-2825

CVE-2023-2825 - GitLab CE/EE 16.0.0: Чтение произвольных файлов через обход пути 23 мая 2023 года GitLab выпустил версию 16.0.1, в которой была исправлена критическая уязвимость CVE-2023-2825, затрагивающая Community Edition CE и Enterprise Edition EE версии 16.0.0. Уязвимость позволяет...

CVE-2024-6460

CVE-2024-6460 Grow от Tradedoubler 2.0.22 - Неаутентифицированный LFI Использование root@kitploit: usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Плагин Post Saint = 1.3.1 для WordPress — произвольная загрузка файлов Описание Плагин Post Saint для WordPress версии до 1.3.1 включительно уязвим для произвольной загрузки файлов из-за отсутствия проверки прав доступа и валидации типов файлов. Аутентифицированные злоумышленник...

CVE-2023-47668

CVE-2023-47668 Описание Уязвимость раскрытия конфиденциальной информации неавторизованному субъекту в плагине Membership Plugin – Restrict Content от StellarWP версий Пример результата root@kitploit: Log file content: 2024-12-24 20:47:19 - wprcpdiscounts table upgrade to 202003311 successful...

CVE-2026-24061-setup

Настройка CVE-2026-24061 Этот репозиторий содержит Docker-настройку для CVE-2026-24061. После установки Docker просто выполните следующее: 1. Клонируйте этот репозиторий. 2. Выполните следующую команду: root@kitploit: sudo docker build . --tag telnetd-auth-bypass 3. Когда Docker-образ будет собра...

HFS2.3_poc

HFS2.3poc HFS2.3 인증되지 않은 원격 코드 실행 CVE-2024-23692 python HFS2.3poc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage: HFS2.3poc.py -h -u URL...

Docassemble_poc

Docassemblepoc Уязвимость произвольного чтения файлов в Docassemble CVE-2024-27292 python Docassemblepoc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--'...

CVE-2024-36401

GeoServer уязвимость удаленного выполнения кода без ответа CVE-2024-36401 options: -h, --help показать это справочное сообщение и выйти -u URL, --url URL Целевой URL; Пример: python .py -u http://ip:port -f FILE, --file FILE Целевой список URL; Пример: python .py -f urllist.txt -c CMD, --cmd CMD...

CVE-2025-34085

📂 Simple File List – Неаутентифицированный RCE-эксплойт CVE-2025-34085 ⚠️ Код эксплойта: Mrj Haxcore Полностью рабочий Python-эксплойт для плагина WordPress Simple File List = 4.2.3, уязвимого к неаутентифицированному удалённому выполнению кода RCE из-за небезопасной логики загрузки и...

USN-8773-1: GNU Guix vulnerability

It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local attacker could possibly use this issue to gain elevated privileges...

USN-8773-1 guix vulnerability

It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local attacker could possibly use this issue to gain elevated privileges...

Fake CAPTCHA Scams

New variant of an old scam: Use the framing of a CAPTCHA to get an unsuspecting user to download and run a malicious program...

CVE-2026-40854 Session auth bypass via cookie value in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/loginuser. An attacker can bypass authentication b...

EUVD-2026-80669

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/loginuser. An attacker can bypass authentication b...

CVE-2026-40854 Session auth bypass via cookie value in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/loginuser. An attacker can bypass authentication b...

CVE-2026-40854

CVE-2026-40854 affects the WNC T-Mobile 5G Box IDU router . The vulnerability resides in the portal.cgi component, where the session verification mechanism validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/login_user . Because this check does not properl...

CVE-2026-92357

A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument currentsegment leads to information disclosure. The attack may be initiated remotely. The identifier o...

CVE-2026-92356

A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basicfunctions.ts of the component Update Components. Executing a manipulation can lead to resource consumption. The attack can be launched remotely. The project was informe...

AZL-101576 CVE-2026-90048 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in nicreateattrlist nicreateattrlist allocates a fixed buffer of alalignedrecordsize == recordsize bytes and then walks every attribute of the primary MFT record, writing one ATTRLISTENTRY p...

DEBIAN-CVE-2026-90048

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in nicreateattrlist nicreateattrlist allocates a fixed buffer of alalignedrecordsize == recordsize bytes and then walks every attribute of the primary MFT record, writing one ATTRLISTENTRY p...