CVE-2015-3337

CVE-2015-3337 CVE-2015-3337 Arbitrary File Read http://10.10.20.166:9200/plugin/head/../../../../../../../../../etc/passwd Usage: python CVE-2015-3337.py root@kitploit: python CVE-2015-3337.py / \ | | | | / | |/ | | | | || || || / | / / | | | | ' / /'| |/' || | | \ / / / / / / / / | | | | | | ||...

CVE-2026-37072

CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9는 admin-head-updates.php에서 부적절한 접근 제어 취약점이 존재합니다. 인증되지 않은 공격자는 'lang' GET 파라미터의 로컬 파일 포함 취약점을 악용할 수 있습니다. 적절한 파일 포함이 포함된 특수하게 조작된 POST 요청을 'lang' URL 파라미터에 전송함으로써 공격자는 구성 파일을 손상시킬 수 있습니다. 그런 다음 setup 엔드포인트로 GET 요청을 전송하면 구성 파일...

CVE-2024-31317

CVE-2024-31317 Preface A couple of days ago, I saw an analysis of the CVE-2024-31317 vulnerability posted on JD's official account. After reading it through, I found it quite interesting. Moreover, the current mainstream solutions for automotive IVI In-Vehicle Infotainment are all based on Androi...

dirsearch

DirSearch Este software es una implementación en Go del dirsearch tool original escrito por Mauro Soria. DirSearch es la primera herramienta que escribo en Go, principalmente para jugar y experimentar con el modelo de concurrencia de Go, canales, etc. : Propósito DirSearch toma una URL de entrada...

Pummel

root@kitploit: ██████╗ ██╗ ██╗███╗ ███╗███╗ ███╗███████╗██╗ ██╔══██╗██║ ██║████╗ ████║████╗ ████║██╔════╝██║ ██████╔╝██║ ██║██╔████╔██║██╔████╔██║█████╗ ██║ ██╔═══╝ ██║ ██║██║╚██╔╝██║██║╚██╔╝██║██╔══╝ ██║ ██║ ╚██████╔╝██║ ╚═╝ ██║██║ ╚═╝ ██║███████╗███████╗ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝╚═════...

peer-tweet

PeerTweet Decentralized feeds using BitTorrent's DHT. Idea from Arvid and The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Screenshot Quick links Download the latest binaries from the releases page. Find and share PeerTweet addresses from the addresses issues page. What is PeerTweet?...

Sec5GLoc

Sec5GLoc: Securing 5G Indoor Localization via Adversary-Resilient Deep Learning Architecture Our work addresses security and privacy challenges in 5G indoor localization by proposing an adversary-resilient deep learning architecture. Sec5GLoc combines Channel Impulse Response CIR fingerprinting...

CVE-2026-5096

The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.4.4. This is due to the loadpreviousfieldvalue method in class-evf-form-task.php accepting arbitrary URL values from $POST data for upload fields without domain restriction,...

CVE-2026-72530-TrueConf-Sandbox-Escape-

CVE-2026-72530: TrueConf Server Sandbox Escape - Mitigação e Detecção PoC 📌 Descrição Geral Este repositório contém uma demonstração educacional da mitigação e detecção para CVE-2026-72530 , uma vulnerabilidade crítica de Code Injection e Sandbox Escape no TrueConf Server. Contexto da...

CVE-2026-37072

Veno File Manager Project 4.4.9 contains an Incorrect Access Control vulnerability in admin-head-updates.php. An unauthenticated attacker can exploit a Local File Inclusion flaw in the lang GET parameter by sending a crafted POST request to corrupt the configuration file. A subsequent GET request...

citrixmash_scanner

CVE-2019-19781 citrixmash Scanner Ein multithreaded Scanner für Citrix-Geräte, die anfällig für CVE-2019-19781 sind. Der Scanner versucht nicht, Hosts zu kompromittieren/auszunutzen und vermeidet das Herunterladen sensibler Inhalte. Ein HEAD-Request wird verwendet, um festzustellen, ob ein Ziel...

reverie

Reverie KKW 2018 में उल्लिखित NIZKPoK का एक कुशल कार्यान्वयन Reverie, Improved Non-Interactive Zero Knowledge with Applications to Post-Quantum Signatures में उल्लिखित MPC-in-the-head NIZKPoK का एक कार्यान्वयन प्रोवर और वेरिफायर है। Reverie का उद्देश्य जटिल प्रेडिकेट्स के लिए ठोस प्रोवर दक्षता छो...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ftrace: A null pointer dereference occurred in ftraceaddmod. The @ftracemod is allocated using kzalloc. Therefore, both members prev, next of @ftracemode-list are NULL. This makes calling listdel invalid. If kstrdup for...

Astra Linux – Vulnerability in Tomcat9

There is a vulnerability related to improper input validation in Apache Tomcat. Tomcat did not restrict HTTP/0.9 requests to only the GET method. If a security constraint was configured to allow HEAD requests to a URI but deny GET requests, users could bypass this constraint on GET requests by...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: refscale: Uninitialized use of waitqueueheadt was fixed. Running the refscale test occasionally causes the kernel to crash with the following error: 8569.952896 BUG: Unable to handle a page fault for address: ffffffffffffffe8...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvme: fixed the SRCU protection for the nvmenshead list The process of walking the nvmenshead siblings list is protected by the head’s srcu in nvmensheadsubmitbio, but not in nvmempathrevalidatePaths. Removing namespaces from...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: Battery: Fixed a possible crash that occurred when unregistering a battery hook. When a battery hook returns an error during the addition of a new battery, the battery hook is automatically unregistered. However, the batter...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fixed a use-after-free in the iomap inline data write path The inline data buffer head dibh is released prematurely in gfs2iomapbegin via releasemetapath, while iomap-inlinedata still points to dibh-bdata. This causes a...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: kcm: Fixed a memory leak in the error path of kcmsendmsg. The syzbot reported a memory leak as follows: BUG: Memory leak Unreferenced object 0xffff88810b088c00 size 240: Comm “syz-executor186”, pid 5012, jiffies 4294943306 age...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fixed a race condition between searching chunks and releasing the journalhead from the bufferhead. A race condition was encountered between ocfs2testbgbitallocatable and jbd2journalputjournalhead, resulting in the followin...