CVE-2024-3094-XZ-Backdoor-Detector

विवरण xz के अपस्ट्रीम टारबॉल में दुर्भावनापूर्ण कोड पाया गया, जो संस्करण 5.6.0 से शुरू हुआ। जटिल अस्पष्टीकरणों की एक श्रृंखला के माध्यम से, liblzma बिल्ड प्रक्रिया स्रोत कोड में मौजूद एक प्रच्छन्न परीक्षण फ़ाइल से एक पूर्व-निर्मित ऑब्जेक्ट फ़ाइल निकालती है, जिसका उपयोग liblzma कोड में विशिष्ट...

CVE-2024-51324

CVE-2024-51324 — BYOVD: BdApiUtil64.sys · بحث رسالة الماجستير -orange إحضار برنامج تشغيل ضعيف خاص بك BYOVD — مضاد الفيروسات بايدوBdApiUtil64.sys ثلاث بدائيات نواة غير موثقة: إنهاء العمليات، حذف الملفات العشوائي، وحذف الملفات قيد الاستخدام مع تجاوز SectionObjectPointer المتأثر: مضاد الفيروسات بايد...

CVE-2022-29464

WSO2 RCE CVE-2022-29464 exploit e writeup. Dettagli CVE-2022-29464 è una grave vulnerabilità in WSO2. La vulnerabilità è un caricamento arbitrario di file non autorizzato e senza restrizioni che consente a utenti non autorizzati di caricare file JSP dannosi sui server WSO2 e ottenere l'esecuzione...

CVE-2024-43044-jenkins

Введение Это эксплойт для CVE-2024-43044 — произвольное чтение файлов, которое позволяет агенту получать файлы с контроллера. Эксплойт использует уязвимость для чтения файлов с целью подделки remember-me cookie для учётной записи администратора и получения доступа к скриптовому движку Jenkins...

CVE-2024-28995

CVE-2024-28995 PoC SolarWinds Serv-U एक डायरेक्टरी ट्रांसवर्सल कमजोरी के लिए संवेदनशील था जो होस्ट मशीन पर संवेदनशील फाइलों को पढ़ने की अनुमति देता। क्वेरीज़ Shodan: product:"Rhinosoft Serv-U httpd" "Serv-U FTP Server" Fofa: app="SolarWinds-Serv-U-FTP" संदर्भ...

CVE-2026-79655

A path traversal flaw in the sos clean utility (part of the sos package) allows a local attacker to perform arbitrary file creation or overwrite . The root cause is improper validation of symlink and hardlink targets during tar archive extraction. A specially crafted tar archive can cause files t...

EUVD-2026-65492

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655 Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2024-7399-POC

CVE-2024-7399 Exploit pour CVE-2024-7399. Plus de détails disponibles ici : https://davidxbors.github.io/0xpages/posts/cve-2024-7399/. Utilisation : root@kitploit: python3 CVE-2024-7399.py https://localhost:7002/ --check python3 CVE-2024-7399.py https://localhost:7002/ --execute python3...

exploit-CVE-2023-27564

Exploit para CVE-2023-27564 Esta vulnerabilidade permite leitura anónima de ficheiros no n8n. root@kitploit: import requests url = "https://example.com/rest/data/filesystem:..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd:.svg" response = requests.geturl printresponse.statuscode...

CVE-2021-29447

CVE-2021-29447 - Exploit della vulnerabilità XXE di WordPress Descrizione Questo repository contiene un exploit per CVE-2021-29447, una vulnerabilità XXE XML External Entity presente in WordPress 5.7.0 e versioni precedenti. La vulnerabilità risiede nella libreria multimediale che elabora file WA...

CVE-2023-47246-EXP

Dettagli della vulnerabilità 1. fofa: root@kitploit: body="sysaid-logo-dark-green.png" || title="SysAid Help Desk Software" || body="Help Desk software by SysAid" 2. Versioni interessate: SysAid Server23.3.36 Riproduzione della vulnerabilità 1. Esegui lo script: root@kitploit: git clone...

CVE-2026-48099

A flaw was found in WsgiDAV, a WebDAV server. A remote attacker could exploit this vulnerability by sending a specially crafted WebDAV request path containing encoded parent-directory segments. This could allow the attacker to escape the configured filesystem share root, potentially leading to...

CVE-2025-2539

POC - CVE-2025-2539 File Away Disclaimer : Questa Proof of Concept POC è realizzata solo per scopi educativi e di test etici. L'utilizzo di questo strumento per attaccare target senza previo consenso reciproco è illegale. È responsabilità dell'utente finale rispettare tutte le leggi locali, stata...

Umbrella

Umbrella Dropper Copyright 2017 Umbrella Scritto da: Alisson Moretto - 4w4k3 Umbrella è un file dropper dedicato ai pentest, scarica file sul sistema di destinazione e li esegue senza una doppia esecuzione dell'exe, solo di embed. Per compromettere nuovamente lo stesso target, devi eliminare...

cve-2025-32434-poc

CVE-2025-32434 Descrizione Dettagli tecnici Il punto di ingresso della vulnerabilità è load in torch/serialization.py quando la protezione weightsonly è abilitata: il caricamento di un file tar chiamerebbe queste funzioni in catena: 1. load: torch/serialization.py:1117 2. loadlegacy:...

CVE-2026-57863

Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended extraction directory by supplying crafted ZIP archives with ../ sequences to the unzip endpoint. Attackers can exploit...

Tomcat-CVE-2017-12615

Vulnerabilità di scrittura arbitraria di file in Tomcat tramite metodo PUT CVE-2017-12615 中文版本Chinese version Versione Tomcat: 8.5.19 Configurazione dell'ambiente root@kitploit: docker-compose build docker-compose up -d Dopo aver eseguito con successo i comandi sopra, vedrai la pagina di esempio ...

Ruby-On-Rails-Path-Traversal-Vulnerability-CVE-2018-3760-

Vulnerabilità di Path Traversal in Ruby On Rails CVE-2018-3760 Versione cinese Ruby On Rails è un noto framework di sviluppo Web in Ruby, che utilizza Sprockets come server di file statici in ambiente di sviluppo. Sprockets è una libreria Ruby che compila e distribuisce file di risorse statiche...