128868 matches found
proxynotshell-IOC-Checker
proxynotshell-IOC-Checker 用于检查 CVE-2022-41040 和 CVE-2022-41082 的 IOC（入侵指标）的 Powershell 脚本，基于社区研究和 Microsoft： GTESC The Sec Master Double Puslar Microsoft Security Resource Center Microsoft Security Blog 随着更多信息的公开，该脚本可能会更新，以包含更多的 IOC。 ⬇️ 下载 root@kitploit: git clone...
Windows ML CLI: CORS misconfig enables localhost RCE
Case Description: MSRC Notes: Attachments: 1 files attached 1 mp4 Summary: The vulnerability lies in the 'serve/cliapi.py' component of the 'winml-cli' project, which exposes all winml CLI commands over HTTP without authentication. Although it binds to localhost by default, it sets 'alloworigins'...
GHSA-96P9-RH4F-92CF Windows ML CLI: CORS misconfig enables localhost RCE
Case Description: MSRC Notes: Attachments: 1 files attached 1 mp4 Summary: The vulnerability lies in the 'serve/cliapi.py' component of the 'winml-cli' project, which exposes all winml CLI commands over HTTP without authentication. Although it binds to localhost by default, it sets 'alloworigins'...
CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-
CVE-2026-6666 – Ataque de deserialización NSKeyedUnarchiver en el servicio XPC simulación macOS/iOS Código del programa simulación en Python root@kitploit: !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess,...
linux-privilege-escalation
Linux 权限提升 Bash 脚本，用于检查并利用 Linux 漏洞 CVE-2022-0847（“Dirty Pipe”） 关于此 PoC 此脚本允许易受攻击系统上的非特权用户执行以下操作： 修改/覆盖 只读 文件，如 /etc/passwd。 获取一个提权后的 shell 本仓库包含 2 个利用脚本： 利用脚本 1： 将 root 密码替换为 “piped”，并将原始 /etc/passwd 文件备份到 /tmp/passwd.bak。然后，该利用脚本提供一个提权后的 root shell，并在退出 shell 时恢复原始 passwd 文件。 利用脚本 2： 向以 root...
CVE-2026-86081 n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8NBLOCKFILEPATTERNS regular expression. The pattern ^./.git/.$ allowed catastrophic backtracking and ran...
CVE-2026-86081
n8n , an open-source workflow automation platform, is vulnerable to Regular Expression Denial of Service (ReDoS) in its Git node clone operation. Prior to versions 1.123.76 , 2.37.7 , and 2.38.2 , the default N8N_BLOCK_FILE_PATTERNS regex (^(./).git(/.)$) permitted catastrophic backtracking when ...
CVE-2026-86081 n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8NBLOCKFILEPATTERNS regular expression. The pattern ^./.git/.$ allowed catastrophic backtracking and ran...
CVE-2026-86081 n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8NBLOCKFILEPATTERNS regular expression. The pattern ^./.git/.$ allowed catastrophic backtracking and ran...
CVE-2024-10958-WPPA-Exploit
WordPress WP Photo Album Plus 任意短代码执行 CVE-2024-10958 WordPress WP Photo Album Plus 插件中存在未经身份验证的任意短代码执行漏洞的 PoC 代码。 详情 受影响版本： = 8.8.08.007 CVSS 分数： 7.3（高） 漏洞类型： 任意短代码执行 漏洞描述 WP Photo Album Plus 插件由于在 getshortcodedrenderedfenodelay AJAX action 中存在验证缺失，允许未经身份验证的用户执行任意短代码。 参考资料 Wordfence Threat Intel...
cve-2026-45033-class
Claude Code — git 裸仓库 / core.fsmonitor 守卫绕过（PoC） 针对 “恶意裸 git 仓库 →core.fsmonitor → 代码执行” 漏洞类（参见 GitHub Copilot CLI 中的 CVE-2026-45033）的概念验证，已在 Claude Code 上复现，并绕过了 Claude Code 额外添加的 bash 权限守卫（Copilot 没有该守卫）。 结果：当 agent 在文件被放置在守卫之后的仓库中运行 git 命令时，可在 Claude Code 的沙箱内执行代码 。Payload 为惰性（将时间戳写入...
CVE-2026-86995
CVE-2026-86995 affects n8n , an open-source workflow automation platform. The Git node validated the repository parameter for fetch/pull operations, but its setUpstream function wrote a branch..remote value into the repository configuration without validation. A subsequent fetch or pull then reso...
CVE-2026-86995 n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote a branch..remote value into repository configuration without validating it. A later fetch or pull resolved the remote...
CVE-2026-86995 n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote a branch..remote value into repository configuration without validating it. A later fetch or pull resolved the remote...
CVE-2026-86995 n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote a branch..remote value into repository configuration without validating it. A later fetch or pull resolved the remote...
CVE-2023-35078
CVE-2023-35078-Poc-Exploit 该工具使用 Golang 语言构建，用于利用 CVE-2023-35078 漏洞。 使用该工具非常简单，在终端中运行以下命令： root@kitploit: λ git clone https://github.com/LazyySec/CVE-2023-35078.git λ cd CVE-2023-35078 λ CVE-2023-35078 git:main go build cve-2023-35078.go λ CVE-2023-35078 ./cve-2023-35078 --help Usage of...
CVE-2024-49019-rayng
利用 CVE-2024-49019：证书服务器权限提升 概述 CVE-2024-49019 是 Active Directory 证书服务 AD CS 中的一个漏洞，允许攻击者通过滥用基于证书的身份验证来提升权限。本指南演示如何使用 Certipy 利用此漏洞。 凭据表 虚拟机| 用户名| 密码 ---|---|--- Windows Server 2022| Administrator| !@windowsadmintest101 Windows Server 2022| testuser| $Vulnerable139 Kali-VM| vagrant| vagrant...
CVE-2022-26923-rayng
利用 CVE-2022-26923：证书颁发机构权限提升 概述 CVE-2022-26923 是 Active Directory 证书服务 AD CS 中的一个漏洞，攻击者可利用该漏洞滥用基于证书的身份验证来提升权限。本指南概述了使用 Impacket 和 Certipy 利用此漏洞的步骤。 凭据表 虚拟机| 用户名| 密码 ---|---|--- Windows Server| Administrator| !@windowsadmintest101 Windows Server| testuser| $Vulnerable139 Kali-Linux VM| vagrant|...
CVE-2026-17583
cve-id 捐赠 通过 PayPal 或扫描下方二维码支持本项目的维护。 ⚡ 简单用法 仅在安全且经授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 经授权的渗透测试环境 示例设置： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows...
