CVE-2024-51378

CVE-2024-51378 취약점 분석 CVE-2024-51378, 취약한 호스트를 찾기 위한 스크립트, Python 및 nuclei를 사용한 단일 스레드 및 다중 스레드 모드에서의 익스플로잇 사용. 스크립트 사용은 테스트 호스트에서 교육 목적으로만 허용됩니다. 1-CVE-2024-51378.pdf - 작업 결과에 대한 텍스트 설명이 포함된 주요 파일 2-exploit - 작업 2부에 대한 파일 51378use.py – 단일 스레드 모드에서 익스플로잇을 적용하는 파일로, 사용자가 시작 시 지정된 URL로 명령 시퀀스를 보낼 수...

ipsw v3.1.716

ipsw iOS/macOS Research Swiss Army Knife What is ipsw 🤔 ipsw is a comprehensive command-line research framework for iOS and macOS. It provides an extensive toolkit for security researchers, reverse engineers, jailbreak developers, and iOS enthusiasts to download, parse, and analyze Apple firmware...

Log4Pot

Log4Pot Log4Shell 취약점CVE-2021-44228을 위한 허니팟입니다. 라이선스: GPLv3.0 기능 다양한 포트에서 Log4Shell 익스플로잇을 수신합니다. 요청 라인과 헤더에서 익스플로잇을 탐지합니다. 익스플로잇 페이로드를 재귀적으로 다운로드합니다. 파일 및 Azure Blob Storage에 로깅합니다. 사용법 1. Poetry 설치: curl -sSL https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py | python3 ...

Exploit for Improper Access Control in Ollyo Helix3

CVE-2026-49049 This repository contains a Python-based scanne...

CVE-2023-42793-TeamCity-Unauthenticated-RCE

CVE-2023-42793 - JetBrains TeamCity 보안 평가 도구 이 저장소는 온프레미스 JetBrains TeamCity 서버에 영향을 미치는 치명적인 취약점인 CVE-2023-42793 의 보안 영향을 평가하고 시연하기 위해 설계된 Python 기반 유틸리티를 제공합니다. 취약점 세부 정보 CVE 식별자: CVE-2023-42793 CVSSv3 점수: 9.8 치명적 취약점 유형: 인증 우회 / 원격 코드 실행 RCE 영향을 받는 버전: 2023.05.4 이전의 JetBrains TeamCity 수정 버전:...

CVE-2024-50492

🚨 CVE-2024-50492 - ScottCart 🔥 ScottCart 🧑‍💻 작성자: Nxploit – Khaled Alenazi 📌 설명 WordPress 용 ScottCart 플러그인 버전 ≤ 1.1은 원격 코드 실행RCE 에 취약합니다. 이로 인해 인증되지 않은 공격자 가 취약한 AJAX 엔드포인트를 통해 서버에서 임의의 PHP 함수를 실행할 수 있습니다. 플러그인 : ScottCart ≤ 1.1 취약점 : 인증되지 않은 함수 삽입 → RCE CVE : CVE-2024-50492 CVSS 점수 : 9.8 - 치명적 🧠...

CVE-2026-89607

A flaw was found in ecryptfs in the Linux kernel. The parsetag3packet function does not properly validate the size of the encrypted key, allowing an oversized key to be processed. This improper validation leads to out-of-bounds writes, corrupting critical data structures within the ecryptfsauthto...

CVE-2026-89522

A flaw was found in the Linux kernel's media subsystem, specifically within the ipu7 driver. When an error occurs during the device's initial setup probe error path, a V4L2 asynchronous notifier is not correctly removed from a global list. This results in a use-after-free vulnerability, where the...

CVE-2026-89496

A flaw was found in ocfs2, the Oracle Cluster File System, within the Linux kernel. A local user could exploit this vulnerability by performing a copyfilerange operation within the same filesystem. This can lead to a memory leak, potentially causing resource exhaustion and a Denial of Service DoS...

CVE-2026-80951

A flaw was found in the Linux kernel's I3C master driver. A malicious I3C device could exploit this by sending an In-Band Interrupt IBI payload that exceeds the allocated slot size. This can lead to an out-of-bounds write into the IBI pool, potentially causing memory corruption and system...

cve-2019-6207

CVE-2019-6207 root@kitploit: $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct...

Exploit for Improper Input Validation in N8N

🛡️ AI Security Tool Module n8n Full C...

Moniker-Link-CVE-2024-21413

🛡️ Moniker Link CVE-2024-21413 방: Moniker Link CVE-2024-21413 — TryHackMe 상태: ✅ 완료 날짜: 2025년 5월 30일 🎯 목표 CVE-2024-21413을 이해하고 익스플로잇합니다. 이 취약점은 Microsoft Outlook에서 Moniker Link를 사용하여 보호된 보기를 우회하고 NTLM 자격 증명을 유출합니다. 공격을 수행하는 방법과 이를 탐지 또는 완화하는 방법을 학습합니다. 🗝️ 핵심 개념 Moniker Link — Windows에서 COM 모델을 사용하여...

CVE-2014-6271-Apache-Debian

CVE-2014-6271-Apache-Debian 개요 이 리포지토리는 CVE-2014-6271의 PoC 환경입니다. apache2 컨테이너 이미지를 사용하여 취약점을 포함한 웹 서비스를 배포할 수 있습니다. 사전 준비 이미지 빌드 Dockerfile에서 안전하지 않은 이미지를 빌드합니다. root@kitploit: docker build -t cve-2014-6271-apache-debian:buster ./insecure-base-image/ docker build -t training-website-poc:v1.0...

PT-2026-90722

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub 11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and...

PT-2026-90727

A vulnerability was determined in Xuxueli xxl-job up to 3.4.2. This affects the function GroovyClassLoader.parseClass of the file xxl-job-core/src/main/java/com/xxl/job/core/glue/GlueFactory.java. This manipulation causes code injection. Remote exploitation of the attack is possible. The exploit...

PT-2026-90729

A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the argument name/author leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used...

PT-2026-90726

A vulnerability was found in Xuxueli xxl-job up to 3.4.2. Affected by this issue is some unknown functionality of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/controller/JobGroupController.java. The manipulation results in improper privilege management. The attack may be launch...

Linux Distros Unpatched Vulnerability : CVE-2026-89696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFIGNFSDV42INTERSSC is enabled, nfsd4putfh can return success with fhdentry and...

CVE-2026-89627

A flaw was found in the Linux kernel's HID Human Interface Device roccat driver. When a roccat device is destroyed, the driver fails to properly free buffered reports, leading to a memory leak. A local attacker could potentially exploit this to exhaust system memory, resulting in a Denial of...