27946 matches found
CVE-2025-32432
CVE-2025-32432 - Craft CMS Unauthenticated RCE PoC Working proof-of-concept for CVE-2025-32432 , an unauthenticated remote code execution vulnerability in Craft CMS versions up to and including 5.6.16 also affects 4.x and 3.x trees on equivalent code paths. Search keywords: CVE-2025-32432, Craft...
CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server
CVE-2025-34322 and CVE-2025-34323 Nagios Log Server Proof of Concept exploits for CVE-2025-34322 and CVE-2025-34323 in Nagios Log Server, along with a combined script to return a shell as root. CVE-2025-34322 After auth, replace your session ID into these two curl commands. The first one set the...
CVE-2020-17519
CVE-2020-17519 Log Traversal Tool A Python tool that uses a directory traversal technique to request log files from a target URL. It displays real-time progress, supports proxy configuration, and optionally saves valid responses. Features Directory Traversal with Configurable Depth Uses a...
log4j
Log4J 零日漏洞 Log4j OSINT 发现汇总，包括检测、攻击面、缓解措施和失陷指标（IoC）。 I. 概述 摘要 该漏洞使得任何能够将文本注入日志消息或日志消息参数并写入服务器日志的攻击者，都有可能从远程服务器加载代码。目标服务器随后通过 Java 命名和目录接口（JNDI）调用执行该代码。 JNDI 可与多种网络服务交互： 1. 轻量目录访问协议（LDAP）——默认端口 389 2. 安全 LDAP（LDAPS）——默认端口 636 3. 域名服务——默认端口 53 4. Java 远程接口（RMI）——默认端口 1099 5. 通用对象请求代理架构（CORBA） 截至 20...
CVE-2025-1974
🚨 Log Injection Test via Ingress-NGINX Admission Controller 🧠 Overview This script tests for annotation injection vulnerabilities in Kubernetes clusters using the NGINX Ingress Controller. It is meant for detection purposes only in relation to CVE-2025-1974, which allows malicious annotations to...
CVE-2023-47668
CVE-2023-47668 Restrict Content = 3.2.7 - Information Exposure via legacy log file Description: The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.7 via the legacy log file. This makes it possible...
BIT-ZOOKEEPER-2026-84501 Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider
An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble", ... request containing newline characters \n. When the ensemble name doesn't match, EnsembleAuthenticationProvider.handleAuthentication logs the raw,...
BIT-ZOOKEEPER-2026-84439 Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources
When audit logging is enabled zookeeper.audit.enable=true, an unauthenticated attacker can inject arbitrary fields into Apache ZooKeeper's audit log by sending a digest authentication request with tab characters \t embedded in the username. Because the audit log uses tab-separated key=value forma...
boa-cve-2009-4496-analysis
CVE-2009-4496 — 防御性漏洞分析 概述 这个仓库记录了对 CVE-2009-4496 的防御性分析，这是与 Boa Web 服务器相关的一个历史漏洞。 本项目的目标是从防御性安全视角审视该漏洞，具体包括： 被动观察公开可用信息； 审阅漏洞文档； 在本地检查历史源代码； 对比存在漏洞的代码与已修正的代码； 评估漏洞的技术成因； 分析修复措施； 评估现有证据的局限性。 未执行任何主动测试、漏洞利用、认证尝试、扫描或对第三方系统的修改。 漏洞摘要 CVE： CVE-2009-4496 CVE 记录标识的受影响软件： Boa 0.94.14rc21 NVD 报告的弱点分类：...
RITA-J
RITA Real Intelligence Threat Analytics in Jupyter Notebook RITA is an open source framework for network traffic analysis sponsored by Active Countermeasures RITA-J is the implementation of RITA features in Jupyter Notebook. The goal is to support all types of Firewall/Proxy/DNS logs that are in...
CVE-2023-26469-Jorani
CVE-2023-26469 Exploitation Tool Overview This is a Proof of Concept PoC exploit tool for Jorani 1.0.0, which allows attackers to achieve remote code execution through path traversal and log injection techniques. ⚠️ Warning: This tool is intended for security research and authorized testing only...
CVE-2026-67599_ClearOS_RCE
OS Command Injection in Log Viewer Filter Parameter Package: ClearFoundation Tested Versions: ClearOS 7.9.1.342252 Vulnerability Type: OS Command Injection CWE-78 Severity: High CVE : CVE-2026-67599 CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Score: 7.2 Thank you to VulnCheck f...
CVE-2023-3350
CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 Security research documenting an unauthenticated information disclosure and a cryptographic design flaw in IBERMATICA RPS 2019. The vulnerabilities can be chained to expose application logs containing authentication-related SQL queries and recov...
CVE-2021-44228-example
This is an example of exploiting CVE-2021-44228 A Log4J2 RCE vulnerability I'm not responsible for this code. PLEASE do not use maliciously CVE-2021-44228 : This vulnerability allows you to execute arbitrary code by logging a malicious message on the target machine. For example, you can use it in...
CVE-2026-93982: Insertion of Sensitive Information into Log File
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with access to application stdout or centralized logging systems can capture base64-encoded credentials to replay MCP requests...
Graylog2__graylog2-server_CVE-2023-41044_5-1-2
Graylog Welcome! Graylog is an open source log management platform. You can read more about the project on our website and check out the documentation on the documentation site. Issue Tracking Found a bug? Have an idea for an improvement? Feel free to add an issue. Contributing Help us build the...
ToolShellFinder
🛠️ ToolShellFinder: CVE-2025-53770 & CVE-2025-53771 Detection A high-performance PowerShell 7+ script for scanning IIS logs to detect signs of exploitation related to ToolShell , specifically targeting the zero-day vulnerabilities CVE-2025-53770 and CVE-2025-53771 in Microsoft SharePoint. This...
JndiLookup
JndiLookup Some tool to help analyzing Apache Log4j 2 CVE-2021-44228 This tool uses the "lookup" feature from log4j-2 to test against the JNDI vulnerability. The objective is to easily run the lookup feature to normalize logs for example or to do a real testing on some payload - please be cautiou...
watchTowr-vs-progress-moveit_CVE-2024-5806
CVE-2024-5806 Exploit for Progress MOVEit Transfer CVE-2024-5806. See our blog post at TBD. PoC in Action See --help for, well, help. A typical run should look like this: root@kitploit: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk id.ppk --pem id / | | |\ \ \ / / \ ...
