Magento Mass Importer <0.7.24 - Remote Auth Bypass

Magento Mass Importer aka MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. id: CVE-2020-5777 info: name: Magento Mass Importer 0.7.24 - Remote Auth Bypass author: dwisiswant0...

Gogs <0.12.6 - Remote Command Execution

Gogs before 0.12.6 is susceptible to remote command execution via the uploading repository file in GitHub repository gogs/gogs. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id...

IBM Langflow - Remote Code Execution

IBM Langflow OSS 1.0.0 through 1.10.0 contains a remote code execution caused by chaining /api/v1/autologin and /api/v1/validate/code endpoints, letting unauthenticated attackers execute arbitrary code remotely, exploit requires no authentication. id: CVE-2026-9198 info: name: IBM Langflow - Remo...

Jenkins Git <=4.11.3 - Missing Authorization

Jenkins Git plugin through 4.11.3 contains a missing authorization check. An attacker can trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit. This can make it possible to obtain sensitive information, modify...

WordPress WP Clone <= 2.4.2 - Database Backup Exposure

Clone WordPress plugin 2.4.3 contains a buffer overflow caused by storing in-progress backup information in publicly accessible buffer files at a static file path, letting attackers access sensitive backup data, exploit requires no special privileges id: CVE-2023-6750 info: name: WordPress WP Clo...

Gogs (Go Git Service) - SQL Injection

Multiple SQL injection vulnerabilities in Gogs aka Go Git Service 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow remote attackers to execute arbitrary SQL commands via the q parameter to 1 api/v1/repos/search, which is not properly handled in models/repo.go, or 2 api/v1/users/search, which is...

AstrBot <= 4.22.1 - Command Injection

AstrBot versions up to and including 4.22.1 contain a command injection vulnerability in the MCP server configuration endpoint. The /api/tools/mcp/add endpoint accepts arbitrary command and args fields that are passed directly to subprocess execution during the connection test, without any...

Gogs (Go Git Service) 0.11.66 - Remote Code Execution

Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go. This is related to session ID handling in the go-macaron/session code for Macaron. id: CVE-2018-18925 info: name: Go...

GitList < 0.6.0 Remote Code Execution

klaussilveira GitList version = 0.6 contains a passing incorrectly sanitized input via the searchTree function that can result in remote code execution. id: CVE-2018-1000533 info: name: GitList 0.6.0 Remote Code Execution author: pikpikcu severity: critical description: klaussilveira GitList...

Magmi 0.7.22 - Cross-Site Scripting

Magmi 0.7.22 contains a cross-site scripting vulnerability due to insufficient filtration of user-supplied data prefix passed to the magmi-git-master/magmi/web/ajaxgettime.php URL. id: CVE-2017-7391 info: name: Magmi 0.7.22 - Cross-Site Scripting author: pikpikcu severity: medium description: Mag...

Gogs <= 0.14.2 - Authenticated RCE via git rebase Argument Injection

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution RCE on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the "Rebase before...

CVE-2024-32002-poc

Script Bash: root@kitploit: !/bin/bash Imposta le opzioni di configurazione di Git git config --global protocol.file.allow always git config --global core.symlinks true Evita messaggi di avviso imposta il ramo predefinito su main git config --global init.defaultBranch main Definisci il percorso d...

CVE-2024-42640

CVE-2024-42640 angular-bug CVE-2024-42640 Exécution de code à distance non authentifiée via la bibliothèque Angular-Base64-Upload pour plus de détails : blog Introduction Les versions de angular-base64-upload antérieures à v0.1.21 sont vulnérables à une exécution de code à distance non authentifi...

FecalFace

Descrizione | Installazione | Sito web | Problemi FecalFace Descrizione Fecal Face è nato dal concetto di "Shit Bucket" dove l'idea è cercare di far marcire i dati che hanno gli uni sugli altri. Nello specifico, riguarda il rilevamento e il riconoscimento dei volti. La motivazione di questo...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

kube-alien

Kube-alien Questo strumento lancia un attacco su un cluster k8s dall'interno. Ciò significa che è già necessario avere un accesso con il permesso di distribuire pod in un cluster per eseguirlo. Dopo aver eseguito il pod kube-alien, tenta di prendere il controllo dei nodi del cluster aggiungendo l...

Log4j-CVE-2021-44228-Remediation

Log4j CVE-2021-44228 निवारण projectdescription दस्तावेज़ देखें » डेमो देखें · बग रिपोर्ट करें · फीचर अनुरोध करें विषय-सूची 1. परियोजना के बारे में निर्माण में प्रयुक्त 2. शुरू करना पूर्वापेक्षाएँ स्थापना 3. उपयोग 4. रोडमैप 5. योगदान 6. लाइसेंस 7. संपर्क 8. आभार परियोजना के बारे में यह PowerShell...

Shockwave-OSS

BountyTricks Condividere consigli e trucchi sul Bug Bounty con la community, inclusi ma non limitati a automazione, one-liner e riflessioni utili Indice 💂‍♂️ Varie Validatore Regex Generatore di omografi Shodan-Scripts Intestazioni HTTP Tipi MIME Proxy inversi Writeup HTTP Request Smuggling...

VulnNodeApp

VulnNodeApp Eine angreifbare Anwendung, die mit node.js, express server und ejs template engine erstellt wurde. Diese Anwendung ist ausschließlich für Bildungszwecke gedacht. Einrichtung Repository klonen root@kitploit: git clone https://github.com/4auvar/VulnNodeApp.git Anwendungseinrichtung:...

agentic-ioc-scanner

agentic-ioc-scanner Scanner IOC per strumenti di coding AI agentici — rileva Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268 e DPRK PromptMink. Un kit di rilevamento per individuare la compromissione degli assistenti di coding AI agentici Claude Code, Gemini CLI, Cursor e delle dipendenze...