SNet

SNet 日本語版はこちら / Japanese version CTF, в котором вы используете ИИ для захвата флага. Нет опыта пентестинга? Не проблема. Claude Code выступает в роли вашего личного тренера — он настраивает среду, обучает вас инструментам и шаг за шагом проводит через реальные атакующие техники. Каждую команду вы...

CVE-2022-42889

🚀 CVE-2022-42889 Text4Shell 익스플로잇 Apache Commons Text 1.10.0 미만 버전에서 발생하는 치명적인 원격 코드 실행 취약점인 CVE-2022-42889Text4Shell을 위한 Python 익스플로잇입니다. 📋 목차 설명 취약점 세부 정보 영향을 받는 버전 익스플로잇 기능 요구 사항 사용법 예제 작동 방식 탐지 완화 참고 자료 면책 조항 📝 설명 이 익스플로잇은 StringLookup 인터폴레이터가 처리하는 특수하게 조작된 입력 문자열을 통해 원격 코드 실행RCE을 허용하는 Apache...

CVE-2026-18718 — Updated!

Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...

CVE-2026-39047

PrintHack - 프린터 보안 테스트 도구 root@kitploit: | | | | | | \ | \ | | | | | | | | | | | | | | | | | ⚠️ 면책 조항 : 이 도구는 합법적인 보안 테스트 및 교육 목적으로만 사용됩니다. 소유한 시스템 또는 명시적 테스트 승인을 받은 시스템에서만 책임감 있게 사용하십시오. 🎯 기능 핵심 기능 🔌 원시 소켓 인쇄 - 포트 9100을 통한 프린터 직접 통신 📄 PCL 페이로드 전달 - 프린터 명령 언어Printer Command Language 페이로드 전송 🖼️...

EUVD-2026-58544

OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods...

OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...

GHSA-2MW5-23GM-PCCQ OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...

EUVD-2026-58507

OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints...

OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

Summary The OpenChoreo API server openchoreo-api authorized requests to its exec and wirelogs endpoints against the project supplied by the caller in the request, rather than against the project that actually owns the target component. The target component was resolved by name only, and the...

GHSA-52GF-6RPQ-FGMX OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

Summary The OpenChoreo API server openchoreo-api authorized requests to its exec and wirelogs endpoints against the project supplied by the caller in the request, rather than against the project that actually owns the target component. The target component was resolved by name only, and the...

EUVD-2026-63663

Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection...

Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

Summary Mailpit's SMTP server reads each command line with an unbounded bufio.Reader.ReadString'\n' before parsing the command or enforcing any protocol length limit. A remote SMTP client can send an oversized single command line and force Mailpit to allocate attacker-controlled memory before the...

GHSA-W878-PJ84-3J5V Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

Summary Mailpit's SMTP server reads each command line with an unbounded bufio.Reader.ReadString'\n' before parsing the command or enforcing any protocol length limit. A remote SMTP client can send an oversized single command line and force Mailpit to allocate attacker-controlled memory before the...

GHSA-9468-V6MJ-FPPW Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends

Vulnerability Details File: internal/client/handler.go OnClientConnecting, internal/proxy/http.go requestHeaders, internal/proxy/grpc.go requestMetadata, internal/unigrpc/grpc.go Consume Line: handler.go:389,548-552 e.Headers - SetEmulatedHeadersToContext, http.go:131-165 requestHeaders,...

CVE-2025-69600

CVE-2025-69600 저자: Rafael José Núñez Gulías 회사: Iberian Var Group 영향 받는 제품: RayVentory Scan Engine 12.6 Update 8 및 이전 버전 Raynet 권고: RSEC200966 Raynet의 rvia에서 명령 삽입Command Injection 취약점으로 인해 공격자가 getconfig, upload, inventory, oracle 옵션을 통해 명령을 실행할 수 있습니다. 검증은 /opt/rvia/rvia.cfg 설정 파일에서 URL을 가져올 때만...

Exploit for Eval Injection in Langflow

Description Usage python3 poc.py -u -c Without...

dual-ec-drbg

DualECDRBG バックドア: 教育用 Proof-of-Concept セキュリティ専門家向け | 教育目的のみ ⚠️ 免責事項 このリポジトリには、DualECDRBG 暗号バックドア CVE-2014-8610 の教育用デモンストレーションが含まれています。これは、スノーデンの暴露後に公開された、十分に文書化された脆弱性です。 これは教育目的のみのものです: 10年以上前の、非推奨の脆弱性を実証 公知のパラメータと数学的関係を使用 セキュリティトレーニングと意識向上を目的とする 責任ある開示慣行に従う 📚 学べること 1. 歴史的背景 :...

CVE-2025-29927-Proof-of-Concept

워크스루 1단계 5분 힌트 대상이 노출하는 네트워크 서비스는 무엇인가요? — — — 해결 방법 root@kitploit: kali@kali:$ nmap kali@kali:$ nmap -sC -sV -p 2단계 5분 힌트 1 랜딩 페이지에는 로그인 페이지만 표시되지만, 웹 서버는 종종 추가 경로를 노출합니다. 힌트 2 Gobuster나 DirBuster와 같은 디렉터리 무차별 대입 도구를 사용해 보세요. — — — 해결 방법 root@kitploit: kali@kali:$ gobuster dir -u http://:/ -w...

CVE-2026-39987 — Updated!

CVE-2026-39987 Exploit POC Overview This repository contains a Proof-of-Concept POC script for CVE-2026-39987, a pre-authentication Remote Code Execution RCE vulnerability in Marimo. The exploit leverages a WebSocket endpoint to execute arbitrary commands on the target system. Vulnerability Detai...

CVE-2026-26832

CVE-2026-26832: node-tesseract-ocr 中的操作系统命令注入 摘要 node-tesseract-ocr 至版本 2.2.1 允许在 src/index.js 的 recognize 中进行操作系统命令注入。该包构建一个 shell 命令字符串并使用 childprocess.exec 执行它。由于输入路径仅用双引号包裹，攻击者可以通过精心构造的文件路径注入 shell 语法。 受影响产品 产品| 受影响版本| 修复版本 ---|---|--- node-tesseract-ocr| 所有 2.2.1 及之前版本| 截至 2026-03-24 无可用修复...