cve-2024-10914-port

CVE-2024-10914를 rust와 python으로 포팅함 왜냐면 그냥 이게 뭐냐 cve-2024-10914는 최근에 발견된, 일부 dlink 라우터에 영향을 미치는 9.8 심각도 점수의 취약점입니다. 해당 라우터들이 이미 지원 종료EOL에 도달했기 때문에, dlink는 "가난하게 살지 말고 그냥 새 라우터를 사라"라는 이유로 이 취약점 패치를 거부하고 있습니다. 어떻게 동작하냐 취약한 기기들은 보통 /cgi-bin/accountmgr.cgi?cmd=cgiuseradd&name= 경로에 HTTP 엔드포인트를 노출합니다...

CVE-2019-5418

CVE-2019-5418 tomnomnom의 burl을 기반으로 한 또 다른 스캐너 root@kitploit: go build go get github.com/fatih/color cat websites.txt | ./CVE-2019-5418...

Bagagwa-Exploit-PS5

Bagagwa exploit, PS5 12.40 -- work in progress Thanks to Clau...

adups-get-super-serial

adups-get-super-serial CVE-2015-2231 概念実証 CVE-2015-2231 'Get Super Serial' のデモに使用していた POC です。この脆弱性を持つ他の ADUPS ファームウェア搭載デバイスでも同様のことが行えるように、公開してほしいと何人かの人に依頼されました。ノートパソコンを整理しているので、失われる前に投稿しておきます。 使用方法 このアプリケーションは、クリック可能なボタンを 1 つ作成するだけで、それをクリックすると system として sh /data/local/tmp/yay/shell.sh...

bpnd-libssh

bpnd-libssh blueintel bpnd-libssh は、CVE-2018-10933 のためのマルチスレッド・リモートスキャナです。 要件 python3 paramiko モジュール インストール 例: root@kitploit: apt-get update apt-get install -y libffi-dev libssl-dev pip3 install paramiko Docker でのインストール Docker コンテナをビルドするには: root@kitploit: ./dockerbuild.sh Docker コンテナを実行するには:...

CVE-2026-91939

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize without allowedclasses restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP object injection through crafted serialized payloads ...

zeek v9.0.0

The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...

cve-2019-6715

cve-2019-6715 TomNomNom에게 99.9%의 코드를 제공한 것에 감사드립니다.... 빌드 root@kitploit: go get github.com/fatih/color go build 사용법 root@kitploit: cat list.txt | ./2019-6715 모든 취약한 URL은 text.log에 기록됩니다. CVE 2019-6715 설명: WordPress용 W3 Total Cache 플러그인 0.9.4 이전 버전의 pub/sns.php는 SubscriptionConfirmation JSON 데이터의...

shiro

CVE-2026-49268 — LDAPインジェクション認証バイパス脆弱性の分析と修復 | ---|--- ブランチ| 1.13-CVE-2026-49268 作者| Jinwoo Hwang https://JinwooHwang.com このブランチ（1.13-CVE-2026-49268）には、Apache Shiro 1.13リリースにおけるLDAPインジェクション認証バイパス脆弱性に対する包括的なセキュリティ修復が含まれています。 NVD公式説明 リモート攻撃者は、DefaultLdapRealmクラスのDistinguished Name（DN）構築にLDAP特殊文字を...

CVE-2022-23648-POC

CVE-2022-23648을 위한 PoC 이것은 @fel1x의 CVE-2022-23648에 대한 개념 증명Proof of Concept입니다. 공개 정보는 여기, CVE 정보는 여기, 그리고 추가 정보와 완화 아이디어가 담긴 블로그는 여기에서 확인할 수 있습니다. Containerfile에 필요한 정보가 있으며, VOLUME의 대상을 변경하여 다양한 경로를 시험해 볼 수 있습니다. 작동하는 것을 보여주는 가장 쉬운 방법은 KinD를 사용하는 것입니다. KinD는 취약한 이미지를 가지고 있습니다. 기본 테스트 절차 노드에...

CVE-2026-60004

CVE-2026-60004 — Gitea Diffpatch Git Hook 远程代码执行（RCE） 裸克隆钩子注入 → post-index-change → 任意命令执行 概述 CVE-2026-60004 是 Gitea 和 Forgejo 自托管 Git 平台中的一个严重级别（CVSS 9.8）预认证 远程代码执行漏洞，影响 1.17 至 1.27.0 版本。 该漏洞利用了 POST /api/v1/repos/owner/repo/diffpatch API 端点中的裸克隆设计缺陷。Gitea 在裸临时克隆 中应用用户提供的补丁——此时仓库根目录就是 $GITDIR...

CVE-2025-48932-Invision-Community-SQLi-Exploit

🔓 CVE-2025-48932 - Invision Community SQLインジェクションエクスプロイト ⚡ 重大な脆弱性の概要 CVE-2025-48932 は、Invision Community バージョン ≤ 4.7.20 で発見された認証を必要としない重大なブラインドSQLインジェクション 脆弱性です。このエクスプロイトにより、リモートの攻撃者は以下を実行できます： 🔍 機密データベース情報の抽出 👤 ユーザー認証情報とパスワードハッシュの窃取 🔑 管理者アカウントの乗っ取り 🎯 アクティブなユーザーセッションのハイジャック 💻...

@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft Affected - Repository: zereight/gitlab-mcp - Affected versions: All versions through commit 74a8c83 - Patched versions: None at time of report Severity High. CVSS v3.1 8.5 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Descripti...

GHSA-2H44-8472-FRJJ @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft Affected - Repository: zereight/gitlab-mcp - Affected versions: All versions through commit 74a8c83 - Patched versions: None at time of report Severity High. CVSS v3.1 8.5 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Descripti...

CVE-2026-91939 Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci Parameter

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize without allowedclasses restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP object injection through crafted serialized payloads ...

CVE-2026-91939 Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci Parameter

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize without allowedclasses restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP object injection through crafted serialized payloads ...

CVE-2026-91939

Cotonti 1.0.0 Comments plugin passes the ci GET parameter directly to unserialize() without an allowed_classes restriction. This allows unauthenticated attackers to inject arbitrary PHP objects via crafted serialized payloads, triggering gadget chains that can lead to database manipulation or rem...

CVE-2026-91939 Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci Parameter

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize without allowedclasses restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP object injection through crafted serialized payloads ...

EUVD-2026-80000

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize without allowedclasses restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP object injection through crafted serialized payloads ...

GHSA-VMP7-252J-CWP7 @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

@zereight/mcp-gitlab exposes its Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a victim's local MCP listener while preserving an attacker-controlled Host and Origin. The server accepts those...