2429077 matches found
CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media
WBCE File Upload XSS - WBCE v1.6.1 Author: Sergio Description: File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden XSS. Attack Vectors: A vulnerability in Media file upload sanitation allows you to upload a PDF file with hidden XSS. POC: When logging...
CVE-2002-0200
CVE-2002-0200 Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. External reference at https://marc.info/?l=bugtraq&m=101174569103289&w=2 Author Alex Hernandez aka @alt3kx...
WordPress-NotificationX-CVE-2024-1698
Set-up root@kitploit: docker-compose up --build Clean up root@kitploit: docker-compose down Testing root@kitploit: Measure-Command curl.exe http://localhost/wp-json/notificationx/v1/analytics -Method Post -Body 'nxid=1337&type=clicks=IFASCIISUBSTRINGselect userpass from wpusers where...
kube-monkey
kube-monkey es una implementación de Chaos Monkey de Netflix para clústeres de Kubernetes. Elimina aleatoriamente pods de Kubernetes k8s en el clúster, fomentando y validando el desarrollo de servicios resilientes a fallos. Únete a nosotros en kube-monkey en Kubernetes Slack. kube-monkey se ejecu...
CVE-2026-39949
CVE-2026-39949: Authenticated Remote Code Execution in Cacti Through Host Variable Injection Summary An OS command injection vulnerability in Cacti ≤ 1.2.30 allows any authenticated user with device and graph template creation privileges to execute arbitrary commands on the underlying server. The...
Grawler
Grawler - v1.0 This project isnot maintained anymore. Grawler is the best tool ever, made for automating google dorks it's a tool written in PHP which comes with a web interface that automates the task of using google dorks, scrapes the results, and stores them in a file, version 1.0 is the more...
Follina
Follina Notes related to CVE-2022-30190 FOLLINA: CVE-2022-30190 1. Uses Microsoft Support Diagnostic Tool MSDT 2. Exploits diagnostic window opened for Diagnosis and when executed properly, gives reverse shell to attacker. 3. Github: a. https://github.com/JohnHammond/msdt-follina b...
MCP-Inspector-CVE-2025-49596
MCP Inspector CVE-2025-49596 Vulnerability Checker This script checks if an MCP Inspector server is vulnerable to CVE-2025-49596, a security issue where the /sse endpoint responds to unauthenticated requests missing auth token. How It Works The script sends a GET request to the /sse endpoint of t...
CVE-2022-25845-In-Spring
CVE-2022-25845-In-Spring !IMPORTANT For learning and exchange only, do not use for illegal purposes exploit by python If helpful, give a star. Reference: https://github.com/luelueking/CVE-2022-25845-In-Spring Usage Modify the parameter passing logic as needed. Here, the default is POST request bo...
mkchain
mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...
CVE-2020-13925
CVE-2020-13925 Environment Setup Refer to https://github.com/apache/kylin to deploy using Docker, and change the version to 3.0.1 the vulnerable version. You can remove -m 8G \ it controls the allocated memory size. Then visit http://host:7070/kylin/login. The default username and password are...
scannerl
Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...
scannerl
Scannerl Scannerl 是一个模块化分布式指纹识别引擎，由 Kudelski Security 实现。Scannerl可以在单个主机上对数千个目标进行指纹识别，并且可以轻松地分布在多个主机上。Scannerl对于指纹识别的意义，就如同zmap对于端口扫描的意义。 Scannerl 适用于 Debian/Ubuntu/Arch（但也可能在其他发行版上运行）。它采用主从架构，主节点将工作（待指纹识别的主机）分配给其从节点（本地或远程）。整个部署对用户透明。 为什么使用 Scannerl...
CVE-2021-32644
CVE-2021-32644 This vulnerability is an XSS vulnerability that affected versions prior to Ampache 4.4.3. https://nvd.nist.gov/vuln/detail/CVE-2021-32644 Installation and Execution Steps 1. Install Ampache When installing, please configure port forwarding in the docker-compose.yml file. The...
Review.CVE-2021-3156
👑 CVE-2021-3156 Baron Samedit — Privilege Escalation via Heap Overflow in sudo 📅 Date: 2025-06-08 ✍️ Author: @TopskiyPavelQwertyGang 🧠 Security Researcher | Red Team Enthusiast 🧠 CVE Overview CVE-ID: CVE-2021-3156 Type: Heap-based Buffer Overflow Component: sudoedit sudo Access Level: Local Goal:...
aws-security-assessment-solution
自助安全评估解决方案 v2.0 网络安全仍然是许多 CIO、CISO 及其客户非常关注的重要话题。为应对这些重要关切，AWS 开发了一组核心服务，客户可使用这些服务来帮助保护其账户。Amazon GuardDuty、AWS Security Hub、AWS Config 和 AWS Well-Architected 审查有助于客户在其 AWS 账户上保持强大的安全态势。随着越来越多的组织部署到云中，特别是如果它们快速部署且尚未实施推荐的 AWS 服务，则可能需要对云环境进行快速安全评估。 我们开发了一种廉价、易于部署、安全且快速的解决方案，为客户提供安全评估报告。这些报告是使用开源项目...
CVE-2024-27956-RCE
CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage root@kitploit: git clone...
CVE-2025-24813
Exploitation Conditions DefaultServlet Write Function Enabled: Must configure readonly=false in web.xml Partial PUT Request Support: Tomcat supports chunked upload by default File Session Persistence Enabled: Must configure PersistentManager and FileStore in context.xml Deserialization Exploit...