weblogicScanner

Link strumento originale: https://github.com/rabbitmask/WeblogicScan weblogicScaner 简体中文 | English Al 27 novembre 2020, strumento di scansione delle vulnerabilità weblogic. Se esistono vulnerabilità non registrate con POC pubblicato, si prega di aprire un issue. L'autore originale ha già raccolto...

wcfproxy

Erstellung Sie können das Tool entweder einmal kompilieren und dann das resultierende Binary verwenden oder es "wie ein Skript" ausführen die Go-Toolchain kompiliert es dann bei Bedarf. Für die Entwicklung ist die letztgenannte Option praktisch. Für den produktiven Einsatz wird empfohlen, es einm...

fastjson

fastjson...

CVE-2026-41729

CVE-2026-41729: Spring Data REST JSON Patch Map Key SpEL Injection PoC Questo repository è una PoC minima di riproduzione per CVE-2026-41729, pubblicata tramite l'avviso di sicurezza ufficiale di Spring. Avviso ufficiale: https://spring.io/security/cve-2026-41729/ Titolo ufficiale: Spring Data RE...

CVE-2017-12635

CVE-2017-12635 Fallstudie und PoC von CVE-2017-12635 Apache CouchDB 1.7.0 / 2.x 2.1.1 - Remote Privilege Escalation Präsentation CouchDB Apache CouchDB ist eine dokumentenorientierte NoSQL-Datenbank, implementiert in Erlang. CouchDB verwendet mehrere Formate und Protokolle, um seine Daten zu...

mud-visualizer

Visualizzatore di Manufacturer Usage Description MUD Attenzione: mud-visualizer è attualmente in beta. Usalo a tuo rischio. Questo strumento può essere utilizzato per visualizzare i file MUD in formato JSON. Indice Motivazione Installazione Astrazioni MUD supportate Contributi Supporto Citazione...

Exihibitor-RCE

Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 चरण 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ चरण 2: $ cd Exihibitor-RCE/ चरण 3 वैकल्पिक: आपको स्क्रिप्ट में json डेटा पेलोड संपादित करने की आवश्यकता हो सकती है। ऐसा करने के लिए, exihibitor के config टैब में परिवर्तन करते...

sqlmap-tamper-api

SQLmap Tamper-API यह SQLmap टैम्पर स्क्रिप्ट्स के लिए एक API है जो आपको अपनी पसंदीदा प्रोग्रामिंग भाषा का उपयोग करके टैम्पर स्क्रिप्ट लिखने की अनुमति देता है। यह API SQLmap की उस सीमा को हल करता है जो केवल Python को टैम्पर स्क्रिप्ट लिखने के लिए स्वीकार करता है। यह कैसे काम करता है taper-api.py...

Stash < 0.26.0 - SQL Injection

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter. id: CVE-2024-32231 info: name: Stash Stash" tags: cve,cve2024,stash,sqli,vuln http: - raw: - | POST /graphql HTTP/1.1 Host: Hostname Content-type: application/json...

PowerJob <=4.3.2 - Unauthenticated Access

PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface. id: CVE-2023-29923 info: name: PowerJob =4.3.2 - Unauthenticated Access author: For3stCo1d severity: medium description: | PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface. impact: ...

Viessmann Vitogate 300 - Remote Code Execution

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method. id: CVE-2023-45852 info: name: Viessmann Vitogate 300 - Remote Code Execution autho...

Artica Pandora FMS <=7.42 - Arbitrary File Read

Artica Pandora FMS through 7.42 is susceptible to arbitrary file read. An attacker can read the chat history, which is in JSON format and contains user names, user IDs, private messages, and timestamps. This can potentially lead to unauthorized data modification and other operations. id:...

FUXA <= 1.2.7 - Hardcoded JWT Secret Authentication Bypass

FUXA v1.2.7 contains a hardcoded credentials vulnerability caused by use of a hard-coded secret key in server/api/jwt-helper.js, letting remote attackers forge admin tokens and bypass authentication, exploit requires no special conditions. id: CVE-2025-69971 info: name: FUXA = 1.2.7 - Hardcoded J...

Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export

The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...

Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution

Spring Data REST 2.6.9 and 3.0.1, Spring Boot 1.5.9 and 2.0 M6 contain a remote code execution caused by processing malicious PATCH requests with crafted JSON data, letting attackers execute arbitrary Java code, exploit requires sending malicious PATCH requests. id: CVE-2017-8046 info: name: Spri...

OpenAM<=15.0.3 FreeMarker - Template Injection

OpenAM is an open access management solution. In versions 15.0.3 and prior, the getCustomLoginUrlTemplate method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input id: CVE-2024-41667 info: name: OpenAM=15.0.3 FreeMarker - Template Injection...

Fastjson Insecure Deserialization - Remote Code Execution

parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi-// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is...

SiYuan <= 3.6.5 - Unauthenticated Path Traversal

SiYuan = 3.6.5 contains a path traversal via double URL-encoding in the /assets/ route publish mode port 6808, allowing unauthenticated attackers to read arbitrary files inside WorkspaceDir including conf/conf.json which exposes the API token and access auth code. id: CVE-2026-54066 info: name:...

Cisco IOS XE WLC - Arbitrary File Upload

A vulnerability in the Out-of-Band Access Point AP Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system.This vulnerability is due to the presence of a hard-coded JSON Web...

Ollama - Remote Code Execution

Ollama before 0.1.34 does not validate the format of the digest sha256 with 64 hex digits when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring. id: CVE-2024-37032 info: name: Ollama ...