CVE-2019-15043

CVE-2019-15043 POC 説明 GrafanaサーバーがCVE-2019-15043に対して脆弱かどうかを確認するための概念実証スキャンです。Grafanaサーバーのバージョン番号を確認し、スナップショットAPIが認証なしのリクエストを許可しているかどうかを確認します。 CVE-2019-15043 CVE-2019-15043は、GrafanaのスナップショットAPIに見つかったサービス拒否（DoS）脆弱性です。この脆弱性はバージョン5.4.5および6.3.4で修正されました。 必要条件 必要なのはrequestsライブラリのみです。 pip3 install reques...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

CVE-2022-46169

CVE-2022-46169 修正版エクスプロイト CVE-2022-46169 元は https://www.exploit-db.com/exploits/51166...

rsyslog-librelp-CVE-2018-1000140-fixed

このリポジトリには README がありません。...

CVE-2023-38120

エクスプロイト： これは、SmartRG ルーターで見つけたバグ（CVE-2023-38120）のPoCです。メーカーによってすでに修正されています。...

sniffles

Sniffles--IDS 및 정규 표현식 평가를 위한 패킷 캡처 생성기 Sniffles는 고정 패턴이나 정규 표현식을 사용하여 의심스러운 행동을 탐지하는 IDS를 테스트하기 위한 패킷 캡처를 생성하는 도구입니다. Sniffles는 매우 간단하게 작동합니다. 정규 표현식 또는 규칙 집합을 가져와 무작위로 하나의 정규 표현식 또는 규칙을 선택합니다. 그런 다음 해당 규칙 또는 정규 표현식을 기반으로 콘텐츠를 생성합니다. 고정 문자열의 경우 문자열을 데이터에 직접 추가하는 것을 의미합니다오프셋 또는 Snort 규칙의 다른 옵션과 함...

Atom CMS v2.0 - SQL Injection

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. id: CVE-2022-24223 info: name: Atom CMS v2.0 - SQL Injection author: theamanrawat severity: critical description: | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

Chuanhu Chat - Directory Traversal

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the webassets folder. However, the outdated version of gradio it employs is susceptible to pa...

QNAP Music Station < 5.4.0 - Authentication Bypass

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later id:...

XWiki DeleteApplication - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and 17.0.0-rc-1 through 17.4.1 of both XWiki Platform Flamingo Skin Resources and XWiki Platform Web Templates are vulnerable to a reflected XSS attack...

Vite Dev Server - Directory Traversal

Vite is a modern frontend build tool. In Vite prior to versions 6.4.3, 6.3.4, and 5.4.23, a directory traversal vulnerability affects the Vite development server. When the Vite dev server is launched with the --host or server.host option, an unauthenticated attacker can craft a request with a pat...

OpenCMS - Cross-Site Scripting

OpenCMS below 10.5.1 is vulnerable to Cross-Site Scripting vulnerability. id: CVE-2023-42343 info: name: OpenCMS - Cross-Site Scripting author: DhiyaneshDK severity: medium description: | OpenCMS below 10.5.1 is vulnerable to Cross-Site Scripting vulnerability. impact: | Unauthenticated attackers...

Sonatype Nexus Repository Manager 3 - Local File Inclusion

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. id: CVE-2024-4956 info: name: Sonatype Nexus Repository Manager 3 - Local File Inclusion author: ritikchaddha severity: high description: | Path Traversal in Sonatype...

Symfony HttpFoundation - Access Control Bypass via PATH_INFO

Symfony HttpFoundation component = 2.0.0 and prior to versions 5.4.50, 6.4.29, and 7.3.7 contains an access control bypass vulnerability. The Request class improperly interprets some PATHINFO values, producing URL paths without a leading /. This allows bypassing access control rules that are buil...

LearnPress <= 4.2.5.7 - SQL Injection

The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 4.2.5.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

LocalAI - Partial Local File Read

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery SSRF and partial Local File Inclusion LFI. The endpoint supports both https-// and file-// schemes, where the latter can lead to LFI. However, the output is limited due to the...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

CVE-2022-24637

CVE-2022-24637 CVE-2022-24637 用の修正済みエクスプロイト 元の xplt: https://www.exploit-db.com/exploits/51026...

EUVD-2026-91833

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

CVE-2026-94591

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and are identical across every installation...