Lucene search
+L

254384 matches found

Kitploit
Kitploit
added 2026/09/14 6:39 p.m.9 views

Struts2Shell

Struts2Shell CVE-2017-5638 - Apache Struts2 S2-045 バグのためのエクスプロイト(およびライブラリ)です。 インストール root@kitploit: $ npm install -g struts2shell ライブラリとしてのインストール root@kitploit: $ npm install struts2shell コマンドラインオプション root@kitploit: -h, --help 使用方法を出力 -V, --version バージョン番号を出力 -u, --url target 攻撃対象のURL -c, --cmd...

10CVSS8.2AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/14 6:26 p.m.7 views

liblapith

Liblapith - Nessus結果ファイルを解析するためのライブラリ NCC Group Plc によってオープンソースとして公開 - http://www.nccgroup.com/ 開発者: Felix Ingram, felix dot ingram at nccgroup dot com http://www.github.com/nccgroup/liblaptith LGPLのもとで公開されています。詳細はLICENSEを参照してください 例 root@kitploit: import liblapith scan = liblapith.load"" scan =...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 6:19 p.m.11 views

CVE-2022-34169

설명 기기가 CVE-2022-34169에 대해 패치되었는지 확인합니다. 알려진 바에 따르면, Google 직원이 익스플로잇을 발견했지만 공개되지 않았습니다. 수정 방법이 알려져 있으므로, 런타임에 수정이 적용되었는지 확인하기 위해 이 작은 테스트 루틴을 작성했습니다. 직접 빌드 선택 사항 선택 사항: JDK가 있는 경우에만 가능합니다: root@kitploit: Optional: To see if javac is available: sudo updatedb && sudo locate /bin/javac javac Bcel.ja...

7.5CVSS7.3AI score0.81039EPSS
SaveExploits2References1
NVD
NVD
added 2026/09/14 6:17 p.m.5 views

CVE-2026-54150

next-video is a library for adding video to Next.js applications. Prior to 2.8.1, the GET endpoint exported by next-video/request-handler and commonly mounted at /api/video accepts an unauthenticated url query parameter, while src/utils/utils.ts isRemote treats any value without an HTTP or HTTPS...

6.9CVSS0.00371EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/14 6:17 p.m.17 views

DEBIAN-CVE-2026-19542

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

5.6CVSS5AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/14 6:17 p.m.6 views

CVE-2026-19542

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

5.6CVSS0.00277EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/14 6:17 p.m.8 views

DEBIAN-CVE-2026-19499

Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...

7.7CVSS4.9AI score0.00376EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 6:11 p.m.5 views

how-to-check-patch-secure-log4j-CVE-2021-44228

log4j-CVE-2021-44228 の確認方法 log4j とは? LOG4J は、ロギングサービスに使用されるオープンソースの Java ベースの Apache ソフトウェアです。 log4j の脆弱性 CVE-2021-44228 とは? Log4j の脆弱性により、テキストボックスに特定の文字列を入力するだけでリモートコード実行が可能になり、Log4j ライブラリを使用するすべてのプログラムに影響します。 攻撃対象 / 関連ソフトウェア...

10CVSS7.4AI score0.99999EPSS
SaveExploits370
Kitploit
Kitploit
added 2026/09/14 5:53 p.m.4 views

DjVuLibre-poc-CVE-2025-53367

1- DJVUとは DjVu(「デジャヴ」と発音)は、圧縮技術群、ファイル形式、そしてデジタル文書・スキャン文書・高解像度画像をWeb上で配信するためのソフトウェアプラットフォームです。...

8.4CVSS7.3AI score0.00863EPSS
SaveExploits0
OSV
OSV
added 2026/09/14 5:26 p.m.2 views

CVE-2026-55091 flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key

flat-to-nested converts a hierarchy from a flat representation to a nested representation. Prior to 1.1.2, FlatToNested.prototype.convert in index.js uses attacker-influenced id and parent record fields directly as keys in the plain temp and pendingChildOf objects. When parent or id is proto,...

7.5CVSS5.9AI score
SaveExploits0References5
EUVD
EUVD
added 2026/09/14 5:18 p.m.6 views

EUVD-2026-77685

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

5.6CVSS0.00277EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/14 5:18 p.m.30 views

CVE-2026-19542 Stack-based out-of-bounds write in tdelete during tree rebalancing

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

5.6CVSS0.00277EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 5:18 p.m.92 views

CVE-2026-19542

CVE-2026-19542 is a stack-based out-of-bounds write in the tdelete function of the GNU C Library (glibc) versions 2.1 through 2.44. The root cause is that two rebalancing branches in tdelete push an entry onto an alloca-allocated parent-node stack without checking capacity, writing one pointer pa...

5.6CVSS0.00277EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 5:16 p.m.7 views

CVE-2025-0851

CVE-2025-0851 해당 취약점은 Deep Java Library자바 딥 러닝을 오픈 소스 프레임워크에서 모델을 로드할 때 사용되는 tar 및 zip 모델 아카이브를 추출하기 위한 유틸리티를 제공 중 untar 및 unzip 기능에 File Traversal 취약점이 생겨 발생. 상세 내용 : Linux 시스템에서 압축을 생성하고 Window 시스템에서 추출할 때 추출 프로세스에 관심이 있는 대상 외부에 의도된 대상 외부에 아티팩트가 기록될 수 있습니다. 반대도 적용 가능 테스트 방법 : C:/ 경로에 해당 두개의...

9.8CVSS8.3AI score0.23267EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/14 5:11 p.m.6 views

EUVD-2026-77675

Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...

7.7CVSS0.00376EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/14 5:11 p.m.2 views

CVE-2026-19499 Buffer overflow in strfmon and strfmon_l right-justification padding

Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...

7.7CVSS5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/14 5:09 p.m.5 views

exploit-CVE-2017-7494

针对 Samba 4.5.9 的 SambaCry RCE 漏洞利用 Samba 是 SMB/CIFS 网络协议的自由软件重新实现。Samba 为各种 Microsoft Windows 客户端提供文件和打印服务,并且可以作为域控制器(DC)或域成员集成到 Microsoft Windows Server 域中。从版本 4 开始,它支持 Active Directory 和 Microsoft Windows NT 域。 4.5.9 及更早版本的 Samba 容易受到名为 SambaCry 的远程代码执行漏洞的影响。CVE-2017-7494...

10CVSS8.6AI score0.99448EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/14 4:55 p.m.6 views

Windows-Explorer-CVE-2025-24071

Windows-Explorer-CVE-2025-24071 보안 취약점 보고서: CVE-2025-24071 - Windows 파일 탐색기 스푸핑 취약점 개요 NSFOCUS CERT는 Microsoft가 최근 Windows 파일 탐색기의 중요한 스푸핑 취약점CVE-2025-24071을 해결하기 위해 보안 업데이트를 발표했음을 발견했습니다. 이 취약점의 CVSS 점수는 7.5로 심각도를 나타냅니다. 문제는 Windows 탐색기에서 .library-ms 파일에 대한 암시적 신뢰 및 자동 파일 구문 분석 동작으로 인해 발생합니다. 인증...

6.5CVSS6.9AI score0.22915EPSS
SaveExploits23References1
Kitploit
Kitploit
added 2026/09/14 4:46 p.m.6 views

CVE-2024-23346-exploit

CVE-2024-23346-エクスプロイト これは、悪意のあるCIFファイルを、Hack the BoxのChemistryマシン上でホストされているCIF Analyzerウェブサイトにアップロードすることで、pymatgen(CVE-2024-23346)Pythonライブラリの既知のリモートコード実行(RCE)脆弱性を悪用するエクスプロイトです。 NVD CVEリンク: https://nvd.nist.gov/vuln/detail/CVE-2024-23346 使用方法: CVE-2024-23346-exploit.py -t targetIP -P targetPORT ...

9.3CVSS8.1AI score0.03816EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/14 4:42 p.m.9 views

ldapserver

此软件包仍在开发中。 ldapserver 是一个辅助库,用于构建能够使用 LDAP 协议进行通信的服务器软件。它可以是 LDAP 的替代实现、自定义 LDAP 代理,甚至是能够将其 API “伪装”成 LDAP 服务器的完全不同的后端。 该软件包支持: 所有基本 LDAP 操作(绑定、搜索、添加、比较、修改、删除、扩展) SSL StartTLS 已实现取消绑定请求,但在内部用于关闭连接。 优雅停止 受 net/http ServeMux 启发的基本请求路由 日志记录器自定义(日志接口) 默认行为 放弃请求 如果您没有设置处理 AbandonRequest...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder