CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Meta below 符号链接本地权限提升 概述 字段| 详情 ---|--- CVE| CVE-2025-27591 软件| Meta below（系统资源监视器） 受影响版本| 前提条件： 当前用户必须拥有执行 /usr/bin/below 的 sudo 权限...

hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

CVE-2022-37969

CVE-2022-37969 Windows 本地权限提升 PoC 作者：Ricardo Narvaja 和 Daniel Kazimirow Solid 仅用于演示目的。完整的漏洞利用适用于易受攻击的 Windows 11 21H2 系统。 基于先前 Zscaler 发布的信息 的功能性 PoC。 查看相关文章 理解 CVE-2022-37969 Windows 通用日志文件系统驱动程序本地权限提升。 用法 理解 CVE-2022-37969 Windows 通用日志文件系统驱动程序本地权限提升。 利用过程详解： 创建初始的 BLF 日志文件 创建多个随机的 BLF 日志文件...

PhishingKitHunter

PhishingKitHunter 查找使用你品牌/组织文件和图片的网络钓鱼工具包。 PhishingKitHunter （或 PKHunter ）是一款用于识别网络钓鱼活动中使用的钓鱼工具包URL的工具，这些活动针对你的客户，并利用你网站上的一些文件（如CSS、JS等）。 该工具基于Python 3编写，通过分析在合法网站上获取特定文件（如某些样式内容）或在钓鱼会话后重定向用户的referer URL。日志文件（应）包含用户来源的referer URL以及钓鱼工具包的部署位置。 PhishingKitHunter...

CVE-2023-47529

CVE-2023-47529 Cloud Templates & Patterns collection = 1.2.2 - Esposizione di informazioni sensibili tramite file di log root@kitploit: Description: The Cloud Templates & Patterns collection plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,...

CVE-2017-5618-Screen-4.5.0-Root

GNU Screen 4.5.0 Exploração de Escalação de Privilégio Local CVE-2017-5618 📌 Visão Geral Exploração de escalação de privilégio local para o GNU Screen 4.5.0 que sequestra o carregamento de bibliotecas compartilhadas para obter acesso root através da manipulação do ld.so.preload. 🔧 Detalhes Técnic...

CVE-2023-47668

CVE-2023-47668 Descrizione Vulnerabilità di esposizione di informazioni sensibili a un attore non autorizzato nel plugin StellarWP Membership Plugin – Restrict Content plugin Esempio del risultato root@kitploit: Log file content: 2024-12-24 20:47:19 - wprcpdiscounts table upgrade to 202003311...

ColdFusion_EXp

أداة استغلال CVE-2023-29298/CVE-2023-26360 لرد الاتصال Reverse Shell مقدمة مبدأ الثغرة هو أن البيانات التي نبنيها في طلبات عميل CFML تُحفظ في coldfusion-out.log على الخادم؛ هذا الدليل يسجّل معلومات أخطاء الطلبات، وملف coldfusion-out.log يحتوي على الكود الذي نكتبه، ثم نستخدم classname لقراءة وتنفي...

All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path. This makes it possible for unauthenticated attackers to create or append a log file in arbitrary locations outside the intended storage...

MagnusBilling Login Logs - Cross-Site Scripting

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is...

watchTowr-vs-progress-moveit_CVE-2024-5806

CVE-2024-5806 Progress MOVEit Transfer CVE-2024-5806 के लिए शोषण। हमारा ब्लॉग पोस्ट TBD पर देखें। PoC कार्य में सहायता के लिए --help देखें। एक विशिष्ट रन इस प्रकार दिखना चाहिए: root@kitploit: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk id.ppk --pem id / | | |\ \ \ /...

Security Bulletin: Security Vulnerability in Apache Zookeeper affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-24281 CVE-2026-24308)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Zookeeper Vulnerability Details CVEID:CVE-2026-24281 DESCRIPTION: Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails,...

CVE-2020-23968-ILEX-SignGo-EoP

CVE-2020-23968 Ilex International Sign&go Workstation Security Suite 7.1 consente l'elevazione dei privilegi tramite un attacco di symlink su C:\ProgramData\Ilex\S&G\Logs\000-sngWSService1.log...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file (CVE-2026-1918)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to sensitive information in a log file. Vulnerability Details CVEID:CVE-2026-1918 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through...

CVE-2026-56651

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

evilginx

Evilginx v.1.1.0 THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes...

CVE-2025-27591

CVE-2025-27591 - Escalação de Privilégios via below Este repositório contém um exploit para CVE-2025-27591 , uma vulnerabilidade de escalação de privilégios na ferramenta de monitoramento Linux Below. 🛠️ Detalhes da Vulnerabilidade CVE : CVE-2025-27591 Pontuação CVSS : 7.8 Alta Ferramenta Afetada ...

CVE-2026-56651 Arbitrary File Overwrite via Symlink Following in dool project

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

CVE-2026-56651 Arbitrary File Overwrite via Symlink Following in dool project

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

CVE-2026-56651

Dool (a shell utility for managing shell history) in versions up to 1.3.8 is vulnerable to symlink following when the --devel flag is used. The application opens its log file without the O_NOFOLLOW flag, allowing a local attacker to place a symlink at the expected log path pointing to a sensitive...