408095 matches found
CVE-2024-46987
CVE-2024-46987 – Camaleon CMS Path Traversal Autenticato / Lettura Arbitraria di File CVE-2024-46987 è una vulnerabilità di path traversal autenticato CWE-22 in Camaleon CMS un sistema di gestione dei contenuti basato su Ruby on Rails. Consente a un utente autenticato anche con privilegi bassi di...
ghidra-nanomips
ghidra-nanomips nanoMIPS module for Ghidra. Setup Build root@kitploit: $ ./gradlew -PGHIDRAINSTALLDIR=/opt/ghidra11.0.3 Install The Gradle build task creates a ZIP file in the dist directory. Install it with File Install Extensions in the main Ghidra project window. Reference Material "MIPS...
CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC
CVE-2020-29607 — Pluck CMS Esecuzione remota di codice autenticata in Pluck CMS precedente alla versione 4.7.13. Il file manager dell'amministratore admin.php?action=files non convalida le estensioni dei file, consentendo il caricamento di file .phar che Apache esegue come PHP. Il caricamento di...
cve-2017-8760
शोषण टूलकिट CVE-2017-8759 - v1.0 शोषण टूलकिट CVE-2017-8759 - v1.0 एक सुविधाजनक पायथन स्क्रिप्ट है जो पेंटेस्टर्स और सुरक्षा शोधकर्ताओं को Microsoft .NET Framework RCE का परीक्षण करने का एक त्वरित और प्रभावी तरीका प्रदान करती है। यह एक दुर्भावनापूर्ण RTF फ़ाइल उत्पन्न कर सकती है और बिना किसी जटिल...
CVE-2024-23692-RCE
TG हमसे जुड़ें https://t.me/WanLiChangChengWanLiChang हमसे जुड़ें और समय-समय पर विभिन्न कमजोरियों के EXP POC प्राप्त करें CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS सर्वर RCE FOFA "HttpFileServer" सावधानियां प्रभाव क्षेत्र HFS2.3 और उससे नीचे के संस्करण उपयोग विधि How To Use ulimit -n...
PenetrationTesting_Notes-
पेनिट्रेशन टेस्टिंग नोट्स PenetrationTestingNotes.ctb खोलने के लिए cherryTree नवीनतम संस्करण का उपयोग करें बेहतर अनुभव के लिए आप मेरी प्राथमिकता सेटिंग्स का उपयोग कर सकते हैं...
cart
CaRT Trasporto Compresso e RC4 Il formato di file CaRT viene utilizzato per archiviare/trasferire malware e i relativi metadati. Neutralizza il malware rendendolo non eseguibile e lo cifra in modo che i software antivirus non possano segnalare il file CaRT come malware. Vantaggi VELOCE: CaRT è...
CVE-2025-62878
CVE-2025-62878: Path Traversal del Local Path Provisioner Panoramica Elemento| Valore ---|--- ID CVE| CVE-2025-62878 ID GHSA| GHSA-jr3w-9vfr-c746 Gravità| Critico CVSS 10.0 CWE| CWE-23 Relative Path Traversal Componente interessato| rancher/local-path-provisioner Versioni interessate| v0.0.27...
CVE-2023-50564
CVE-2023-50564 - Эксплойт для Pluck CMS v4.7.18 Обзор Этот скрипт эксплуатирует аутентифицированную уязвимость произвольной загрузки файлов в Pluck CMS v4.7.18 CVE-2023-50564. Используя эту уязвимость, аутентифицированный злоумышленник может загрузить вредоносный PHP-файл, что позволяет выполнить...
Dirty-Pipe-CVE-2022-0847-POCs
Dirty-Pipe-CVE-2022-0847-POCs Autor: Max Kellermann [email protected] Mitwirkender: Bl4sty https://twitter.com/bl4sty Eine neue Linux-Sicherheitslücke namens 'Dirty Pipe' erlaubt lokalen Benutzern, durch öffentlich verfügbare Exploits Root-Rechte zu erlangen. Heute hat der Sicherheitsforsche...
Check-WP-CVE-2020-35489
Check-WP-CVE-2020-35489 CVE-2020-35489 Die CVE-2020-35489 wurde im WordPress-Plugin Contact Form 7 5.3.1 und älteren Versionen entdeckt. Durch Ausnutzung dieser Sicherheitslücke können Angreifer Dateien beliebigen Typs hochladen und dabei alle Einschränkungen umgehen, die bezüglich der erlaubten...
CVE-2025-56399
CVE-2025-56399 Exploit di Massa CVE-2025-56399 – Esecuzione di codice remoto in laravel-file-manager v3.3.1. Sfrutta una configurazione errata in Laravel File Manager per caricare e verificare una shell PHP tramite upload di file non autenticato. Installazione Scarica il repository root@kitploit:...
CA-Common-Services-privilege-escalation-cve-2016-9795-revisited
Escalade de privilèges CA Common Services CVE-2016-9795 revisitée Description Lors d'un de mes tests d'intrusion, je suis tombé sur le binaire SUID casrvc qui fait partie de la suite CA Common Services. Comme je l'ai découvert, le binaire est vulnérable à une escalade de privilèges locale. En...
Dorkwright
Dorkwright - Strumento per Google Dorking Dorkwright è un potente strumento Python per Google dorking che automatizza l'estrazione di collegamenti a file dai risultati di ricerca Google e, opzionalmente, li scarica. Utilizza Playwright per l'automazione del browser e include gestione CAPTCHA,...
magic-extractor
Magic Extractor Descrizione Magic Extractor è uno strumento di estrazione universale per Windows che identifica un file con diversi rilevatori e lo instrada verso il giusto estrattore incluso. Mira a coprire i formati di compressione principali, gli installatori che si vedono oggi, e una gamma di...
php_filter_chain_generator
مولّد سلسلة فلاتر PHP أداة سطر أوامر لتوليد سلسلة فلاتر PHP؛ احصل على RCE دون رفع ملف إذا كنت تتحكم بالكامل في المعامل المُمرَّر إلى require أو include في PHP! الاستخدام المساعدة root@kitploit: $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain CHAIN...
EUVD-2026-66804
yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File for file system operations without any path sanitization or whitelist validation...
EUVD-2026-66802
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
EUVD-2026-66801
tamguo 1.5.3 is vulnerable to Unrestricted File Upload Leading to Stored XSS. The /uploadFile and /imgUpload endpoints in FileUploadController.java and UEditorController.java have no file type validation. Attackers can upload arbitrary HTML/JavaScript files to the server...