CVE-2024-54292

CVE-2024-54292 Appsplate = 2.1.3 - 未认证 SQL 注入 描述 WordPress 的 Appsplate 插件在 2.1.3 及更早版本中存在 SQL 注入漏洞，原因是用户提供的参数未进行充分转义，且现有 SQL 查询缺乏足够的预处理。这使得未经身份验证的攻击者能够向现有查询中追加额外的 SQL 查询，从而可用于提取数据库中的敏感信息。 详细信息 类型 ：插件 Slug ：appsplate 受影响版本 ：2.1.3 CVSS 评分 ：7.5 CVSS 等级 ：高 CVSS 向量...

CVE-2020-8290

CVE-2020-8290 – Elevation of Privilege in Backblaze Summary Name: Elevation of Privilege in Backblaze CVE: CVE-2020-8290 Discoverer: Jason Geffner Vendor: Backblaze Product: Backblaze for Windows and Backblaze for macOS Risk: High Discovery Date: 2020-03-13 Publication Data: 2020-09-09 Fixed...

CVE-2026-72585-PoC

CVE-2026-72585 — Grafana：对 CVE-2026-21724 的修复不完整，允许编辑者角色删除受保护的联系点 产品： Grafana（Grafana Labs）—— 13.2.0 及之前版本 文件： pkg/services/ngalert/provisioning/contactpoints.go CWE： CWE-284 — 访问控制不当 CVSS 3.1： AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N — 6.5（中危） CNA： Turan Security · CVE 记录 相关： CVE-2026-21724（本次被绕过的原始修...

S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 A simple script for exploit RCE for Struts 2 S2-053CVE-2017-12611 Usage root@kitploit: exploit.py Example root@kitploit: $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...

WhoamiAlternatives

Alternatives to whoami Some experiments to retrieve the current username without calling whoami.exe or similar binaries. Method 1: PRTLUSERPROCESSPARAMETERS Get the environment variables from the PEB structure and parse it to find the username. Function NtQueryInformationProcess returns a...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-81551 DESCRIPTION: DataStage on Cloud Pak for Data could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage...

wordpress-shell

wordpress-shell Cheap & Nasty Wordpress Command Execution Shell. Execute Commands as the webserver you are serving wordpress with! Uploaded shell will probably be at /wp-content/plugins/shell/shell.php Install To install the shell, we are assuming you have administrative access to the Wordpress...

LOLBITS

root@kitploit: ██╗ ██████╗ ██╗ ██████╗ ██╗████████╗███████╗ ██║ ██╔═══██╗██║ ██╔══██╗██║╚══██╔══╝██╔════╝ ██║ ██║ ██║██║ ██████╔╝██║ ██║ ███████╗ ██║ ██║ ██║██║ ██╔══██╗██║ ██║ ╚════██║ ███████╗╚██████╔╝███████╗██████╔╝██║ ██║ ███████║ ╚══════╝ ╚═════╝ ╚══════╝╚═════╝ ╚═╝ ╚═╝ ╚══════╝ Table of...

AttackSurfaceManagement

ABOUT: Discover the attack surface and prioritize risks with our continuous Attack Surface Management ASM platform - Sn1per Professional. For more information, go to https://sn1persecurity.com. FEATURES: Attack Surface Discovery Easily discover the attack surface IPs, domain names, open ports, HT...

Searpy

🥀 Searpy 🔧 Batch search tool, can be used for collection and traceability Supports py2 and py3 1. Install root@kitploit: git clone https://github.com/j3ers3/Searpy pip install -r requirements.txt Configure API and account in ./config.py python Searpy -h 2. Help root@kitploit: Searpy Engine Tookit...

Search-That-Hash

➡️ Discord ⬅️ The Fastest Hash Cracking System pip3 install search-that-hash && sth 🤔 Overview Tired of going to every website to crack your hash? Search-That-Hash automates this process in less than 2 seconds. Search-That-Hash searches the most popular hash cracking sites and automatically inputs...

terrier

Terrier Terrier は、OCI イメージとコンテナをスキャンし、特定のファイルがハッシュに基づいて存在するかどうかを識別・検証するためのイメージおよびコンテナ分析ツールです。Terrier の詳細な解説は Heroku ブログ https://blog.heroku.com/terrier-open-source-identifying-analyzing-containers にあります。 インストール バイナリ バイナリからのインストール手順については、リリースページ をご覧ください。 Go 経由 root@kitploit: $ go get...

peirates

Peirates Peiratesとは何か？ Peiratesは、Kubernetesペネトレーションツールであり、攻撃者が権限を昇格し、Kubernetesクラスター内を横断移動（ピボット）することを可能にします。サービスアカウントトークンやシークレットを窃取・収集し、さらなるコード実行を獲得し、クラスターの制御を掌握するための既知の手法を自動化します。 Peiratesはどこで実行するのか？ Peiratesは、Kubernetes上で動作するコンテナ内、またはコンテナ外のKubernetesノード上から実行します。 PeiratesはKubernetesクラスターを攻撃するのか？...

social-analyzer

Social Analyzer - 用于在 +1000 个社交媒体 \ 网站上分析和查找个人资料的 API、CLI 和 Web 应用程序。它包含不同的分析和检测模块，您可以在调查过程中选择使用哪些模块。 检测模块采用了基于不同检测技术的评级机制，产生的评分值从 0 到 100（否-可能-是）。该模块旨在减少误报。 来自此 OSINT 工具的分析和公开提取信息可帮助调查与可疑或恶意活动相关的资料，例如网络霸凌、网络诱骗、网络跟踪和传播虚假信息。 该项目目前被一些资源有限的国家执法机构使用 - 检测数据库与此处共享的不同.. 社交媒体 使创建和分享内容或参与社交网络的网站和应用程序 - 牛津...

scilla

🏴‍☠️ 信息收集工具 🏴‍☠️ - DNS / 子域名 / 端口 / 目录枚举 由 edoardottt 用 💙 编码 在 Twitter 上分享！ 安装 • 快速开始 • 示例 • 更新日志 • 贡献 • 许可证 安装 📡 Homebrew root@kitploit: brew install scilla Snap root@kitploit: sudo snap install scilla Golang root@kitploit: go install -v github.com/edoardottt/scilla/cmd/scilla@latest 从源码构建 你需要 Go...

Seatbelt

Seatbelt Seatbelt is a C project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives. @andrewchiles' HostEnum.ps1 script and @tifkin's Get-HostProfile.ps1 provided inspiration for many of the artifacts to collect...

autoharness

AutoHarness Created by Akshat Parikh What is this tool? AutoHarness is a tool that automatically generates fuzzing harnesses for you. This idea stems from a concurrent problem in fuzzing codebases today: large codebases have thousands of functions and pieces of code that can be embedded fairly de...

hawk

Hawk Documentation and Resources Visit hawkforensics.io for comprehensive documentation including: Detailed installation and permissions guides Step-by-step tutorials and "How to" videos Troubleshooting help Best practices and usage examples What is Hawk? Hawk is a free, open-source PowerShell...

CVE-2026-34048

CVE-2026-34048 Admin-only terminal bootstrap routes checked only for login state, which let a normal team member drive Coolify's realtime terminal backend and execute commands on team servers. Intro I found this issue while reviewing Coolify , an open-source self-hosted PaaS, with a very direct...

wafaray

Enhance your malware detection with WAF + YARA WAFARAY WAFARAY is a LAB deployment based on Debian 11.3.0 stable x64 made and cooked between two main ingredients WAF + YARA to detect malicious files e.g. webshells, virus, malware, binaries typically through web functions upload files. -blue.svg...