CVE-2014-4378

CoreGraphics Information Disclosure - CVE-2014-4378 This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fail...

CVE-2025-66954

CVE-2025-66954 – Buffalo LinkStation Username Enumeration via IDOR Summary A vulnerability in Buffalo LinkStation firmware version 1.85-0.01 allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue arises due to improper access contr...

CVE-2022-44268

CVE-2022-44268 This repository contains a Proof of Concept POC for a vulnerability in ImageMagick v. 7.1.0-49, a widely used open-source image manipulation library. The vulnerability allows an attacker to embed the content of an arbitrary file into a resized image when ImageMagick parses a PNG...

killcast

Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...

CVE-2024-9466

CVE-2024-9466 CVE-2024-9466 概念验证 PoC 描述 该脚本通过将 /home/userSpace/devices/debug.txt 附加到目标URL或IP地址列表来检查CVE-2024-9466漏洞。它根据HTTP响应状态码以及请求是否被重定向来判断目标是否存在漏洞。 设置 确保在与脚本相同的目录中存在一个 targets.txt 文件。该文件应包含要检查的URL或IP地址列表，每行一个。例如： http://example.com http://192.168.1.1...

CVE-2019-13633

CVE-2019-13633 Suggested description : Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. Additional Information : Blinger.io - is a platform which used by global clients such as FxPro, Alfa Bank, OneTwoTrip, Ivi, KupiVIP Group, Belavia, Wargaming, Yandex, OZON, TCS Group Holding and...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Triggers automatic SMB authentication to an attacker-controlled share. No interaction required — Windows Explorer initiates this NTLM authentication automatically. Results in NTLMv2 hash leakage information disclosure. Affects Windows 10/11 all versions,...

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 Vulnerability Description: During the security assessment of the Router firmware, it was observed that sensative information regarding the devices connected to router such as Mobile phone,Laptos, Tablets is...

security-interview-questions

Sources QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANS Cheat Sheets: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security OSCP: https://411hall.github.io/OSCP-Preparation/...

cve-2000-0649

Apache向けCVE-2000-0649 CVE-2000-0649は、レスポンスヘッダのLocationパラメータからサーバの内部IPアドレスを漏洩する可能性がある低リスクの脆弱性です。公式詳細はこちら: Rapid7: https://www.rapid7.com/db/modules/auxiliary/scanner/http/iisinternalip/ CVE: https://www.cvedetails.com/cve/CVE-2000-0649/ NIST: https://nvd.nist.gov/vuln/detail/CVE-2000-0649...

rootsh

rootsh rootsh is a local privilege escalation targeting OS X Yosemite 10.10.5 build 14F27. It exploits CVE-2016-1758 and CVE-2016-1828, two vulnerabilities in XNU that were patched in OS X El Capitan 10.11.4 and 10.11.5. rootsh will not work on platforms with SMAP enabled. CVE-2016-1758...

CVE-2019-14287

CVE-2019-14287...

CVE-2022-40684

CVE-2022-40684 Extract admin users and Fortigate details usage: Single URL: root@kitploit: .\poc-cve-2022-40684.ps1 -fgt 192.168.1.1 Multiple URL's: root@kitploit: .\poc-cve-2022-40684.ps1 -urlsfile urls.txt...

CVE-2024-32399

CVE-2024-32399 Vulnerability Overview Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component Vulnerability Type Directory Traversal Vendor of Product RaidenMAILD Mail Server Affected...

CVE-2024-9224

CVE-2024-9224 Hello World = 2.1.1 - Authenticated Subscriber+ Arbitrary File Read Description The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated...

CVE-2023-47459

CVE-2023-47459 Description A vulnerability was discovered in Knovos Discovery v.22.67.0 that allows a remote attacker to access confidential information using the components: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName,...

EternalView

EternalView EternalView is an all in one basic information gathering CLI tool made purely in BASH EternalView in action CAUTION: This tool is purely for educational purposes, don't use it on any website without the permission of it's owner. The user is responsible for his/her actions! Update:...

CVE-2015-6668

CVE-2015-6668 标题：Job-Manager WP 插件中的简历文件名泄露...

CVE-2020-15052

CVE-2020-15052 : Artica Proxy before 4.28.030418 Community Edition allows SQL Injection. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000 active servers,...

CVE-2023-23752

Joomla 未認証情報漏洩エクスプロイト CVE-2023-23752 エクスプロイト 説明 このリポジトリには、「Joomla 未認証情報漏洩」CVE-2023-23752 という脆弱性のエクスプロイトが含まれています。これは教育目的で作成された概念実証スクリプトであり、責任を持って使用する必要があることに注意してください。 このエクスプロイトは、未認証の情報漏洩脆弱性がどのように悪用される可能性があるかを示すために設計されています。 免責事項...