254015 matches found
Php-mod/curl Library <2.3.2 - Cross-Site Scripting
Php-mod/curl library before 2.3.2 contains a cross-site scripting vulnerability via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php. An attacker can inject arbitrary script, which can allow theft of cookie-based authentication credentials and launch of other...
Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion
Media Library Assistant plugin for WordPress before 2.82 contains a local file inclusion caused by unsanitized mlagallery link parameter, letting attackers include arbitrary local files, exploit requires access to the vulnerable link. id: CVE-2020-11732 info: name: Media Library Assistant 2.82 -...
external_expat_AOSP10_r33_CVE-2022-22822toCVE-2022-22827
Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...
Strapi-CVE-2019-1881
Strapi-CVE-2019-1881 by Kynda 1. pip install requests 2. python3 exploit.py :...
Sealighter
Sealighter - Trazado ETW Fácil para Investigación en Seguridad Creé este proyecto para ayudar a los no desarrolladores a sumergirse en la investigación del Seguimiento de Eventos para Windows ETW y el Seguimiento del Preprocesador de Windows WPP. Características Suscribirse a múltiples proveedore...
golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...
Important: Red Hat Security Advisory: grafana-pcp security update
An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Important: Red Hat Security Advisory: delve security update
An update for delve is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: grafana-pcp security update
An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
external_libexif_AOSP10_r33_CVE-2020-0198
libexif ------- DESCRIPTION libexif is a library for parsing, editing, and saving EXIF data. It is intended to replace lots of redundant implementations in command-line utilities and programs with GUIs. FEATURES libexif supports parsing, editing and saving of EXIF data. In addition, it has gettex...
dlinject
dlinject.py Inyecta una biblioteca compartida es decir, código arbitrario en un proceso linux en vivo, sin ptrace. Inspirado por Cexigua y linux-inject, entre otras cosas. Uso root@kitploit: .. . | /| | || || / | .. / | | | | |/ \ | |/ / \ \ \ | \ | |/|| /| |\ \ | /| // | / /| / / /|| /...
apache__mina-sshd_CVE-2023-35887_2-9-2
Apache MINA SSHD Apache MINA SSHD 是一个 100% 纯 Java 库，用于在客户端和服务器端支持 SSH 协议。它并不 旨在替代 Unix 操作系统的 SSH 客户端或 SSH 服务器，而是为需要 SSH 支持的基于 Java 的应用程序提供支持。 该库可以利用多种 I/O 后端： 默认传输是内置的，使用 Java 的 AsynchronousSocketChannel。 Apache MINA，一个可扩展的高性能异步 I/O 库，也可以使用，或者 Netty 异步事件驱动的网络框架也受支持。 受支持的标准 参考实现文档 RFC 4251 -...
polytracker
PolyTracker PolyTracker is a tool originally created for the Automated Lexical Annotation and Navigation of Parsers , a backronym devised solely for the purpose of referring to it as The ALAN Parsers Project. However, it has evolved into a general purpose tool for efficiently performing data-flow...
CVE-2022-24816
Uso del script CVE-2022-24816 Requisitos previos 1. Clonar el repositorio : root@kitploit: git clone https://github.com/c1ph3rbyt3/CVE-2022-24816.git cd CVE-2022-24816 2. Instalar las dependencias : Asegúrate de tener Python 3 instalado. Luego, instala las dependencias necesarias ejecutando:...
sshtunnel
|CircleCI| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...
external_expact_AOSP10_r33_CVE-2022-25314
Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...
CVE-2021-4034-PwnKit-
CVE-2021-4034 PwnKit - 分析とエクスプロイト このリポジトリには、CVE-2021-4034 （別名 PwnKit ）のエクスプロイトを実証するソースコードが含まれています。この脆弱性は pkexec（Polkitパッケージの一部）で発見され、悪意のある環境変数を使用することでローカル権限昇格をrootに 許可します。 ⚠️ 警告 このコードは教育および研究目的 でのみ提供されています。本番システムや明示的な許可なく使用してはなりません。不正使用は違法となる可能性があり、作者の利用規約に反します。 🧠 技術的説明 この脆弱性は、pkexec...
CVE-2024-28397-Exploit-Automation
CVE-2024-28397 Exploit Automation A Python automation script for exploiting the js2py Sandbox Escape vulnerability CVE-2024-28397. This tool automates the payload generation and delivery process to achieve Remote Code Execution RCE on vulnerable instances. ⚠️ Legal Disclaimer Usage of this tool fo...
