EUVD-2026-85348

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection...

CVE-2026-18180 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection...

CVE-2025-67223

CVE-2025-67223：Aranda Service Desk 中的不正确的访问控制与信息泄露 CVE ID: CVE-2025-67223 受影响产品: Aranda Service Desk Aranda File Server - AFS module 受影响版本: 8.3.12 作者: Brandon Perez Lara 🚨 概述 在 Aranda Service Desk 的文件管理模块（Aranda File Server）中发现了一个严重漏洞。系统将每日活动日志存储在公共目录 /AFS/logs/ 中，日志文件名可预测（例如...

EasY_HaCk

sqlmap sqlmap 是一个开源的渗透测试工具，可以用来自动化的检测，利用SQL注入漏洞，获取数据库服务器的权限。它具有功能强大的检测引擎,针对各种不同类型数据库的渗透测试的功能选项，包括获取数据库中存储的数据，访问操作系统文件甚至可以通过外带数据连接的方式执行操作系统命令。 演示截图 你可以访问 wiki上的 截图 查看各种用法的演示 安装方法 你可以点击 这里 下载最新的 tar 打包的源代码 或者点击 这里下载最新的 zip 打包的源代码. 推荐你从 Git 仓库获取最新的源代码: root@kitploit: git clone --depth 1...

EUVD-2026-85346

alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer an...

Solr-GRAB

Solr-GRAB 窃取Apache Solr实例的查询，无论是否需要用户名和密码。 免责声明 ：此项目应仅用于授权测试和教育目的。 下载 root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB 使用 你可以通过Censys搜索Apache Solr实例，使用dork "Welcome To Solr" 或 "Apache Solr Admin"。要抓取查询，只需访问HTTP接入点，端口可能是80、443或8080。 将 "http://URLHERE/" 替换为所需的URL，例如...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052, vulnerabilidad de fuga de información en el analizador de archivos DMG de ClamAV Uso Para crear un archivo DMG malicioso root@kitploit: git clone https://github.com/nokn0wthing/CVE-2023-20052.git cd CVE-2023-20052 sudo docker build -t cve-2023-20052 . sudo docker ru...

CVE-2024-24919

CVE-2024-24919 plantilla de nuclei para CVE-2024-24919 Esta plantilla ayudará a detectar la vulnerabilidad descrita verificando si el sistema filtra el contenido del archivo /etc/shadow...

CVE-2026-73591

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-73858

Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted values from public Freeform forms can be evaluated by the isolated Twig renderer when rendered into HTML attributes. An unauthenticated attacker can place Twig expressions in...

CVE-2026-73587

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering,...

CVE-2026-73589

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information...

CVE-2018-9995_dvr_credentials

工具 显示 DVR 凭证 root@kitploit: Exploit Title: "获取DVR凭证" CVE: CVE-2018-9995 CVSS 基础得分 v3: 7.3 / 10 CVSS 向量字符串: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 日期: 2018年4月9日 漏洞利用作者: Fernandez Ezequiel 推特:@capitanalfa 利用方法: root@kitploit: $ curl "http://:/device.rsp?opt=user&cmd=list" -H "Cookie: uid=admi...

gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...

CVE-2024-28995

CVE-2024-28995 SolarWinds Serv-U 存在目录遍历漏洞，允许读取主机上的敏感文件。 安装 git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt 用法 扫描单个目标 root@kitploit: python3 CVE-2024-28995.py -t domain.com 扫描域名列表 root@kitploit: python3 CVE-2024-28995.py -f domains.txt...

CVE-2026-96611

A flaw was found in FFmpeg. A local attacker can craft a malicious High Efficiency Image File Format HEIF file that, when processed, can cause a signed integer overflow. This overflow allows width and height values to become negative, bypassing internal validity checks. This can lead to data...

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 Path Traversal No Autenticado Potencialmente permite a un atacante leer cierta información en Check Point Security Gateways una vez conectados a internet y habilitados con Remote Access VPN o Mobile Access Software Blades. Hay...

r3con

R3CON 多功能 Web 侦察与漏洞扫描工具 r3con 是一款多功能 Web 侦察与漏洞扫描工具，也是一个超快速的爬虫，能够发现多种漏洞并收集信息。 漏洞检测 反射型 XSS 多线程爬取 开放重定向 子域名接管 SQL 注入 HTML 注入 SSRF CSRF CORS 发现易受攻击的 JS 库 信息泄露 侦察信息收集 Web IP 地址 服务器 IP 地址 Cname 记录 DNS 查询 SPF 查询 隐藏 IP API 端点 JS 端点 XSS 端点 目录搜索 子域名枚举 安装 root@kitploit: https://github.com/thenurhabib/r3con...

EUVD-2026-85340

Isotope eCommerce through 2.9.10 derives order identifiers from uniqid instead of a cryptographically secure source, allowing unauthenticated attackers to guess identifiers. Guest orders lack ownership verification, enabling attackers to access order details including billing address, customer...

CVE-2026-96599

Versions of Isotope eCommerce through 2.9.10 are vulnerable to an identifier prediction flaw. The application uses the uniqid() function rather than a cryptographically secure source to generate order identifiers. Because guest orders lack proper ownership verification, an unauthenticated attacke...