apache__dolphinscheduler_CVE-2023-51770_3_2_1_fixed

Apache Dolphinscheduler Informazioni Apache DolphinScheduler è la moderna piattaforma di orchestrazione dei dati. Agile per creare flussi di lavoro ad alte prestazioni con low-code. Offre inoltre un'interfaccia utente potente, dedicata a risolvere complesse dipendenze tra attività nella pipeline ...

CVE-2025-6019-Exploitation

CVE-2025-6019 – UDisks2 ResizeFilesystem Sicherheitslücke Reproduktion zu Bildungszwecken Dieses Repository dokumentiert eine Reproduktion von CVE-2025-6019 zu Bildungszwecken, die in einer kontrollierten Laborumgebung Ubuntu VM, nicht produktiv durchgeführt wurde. 🛡️ Sicherheitshinweis Diese...

InvoicePlane <= 1.6.3 - Arbitrary File Read

InvoicePlane through 1.6.3 is vulnerable to an unauthenticated path traversal in the guest "Get::getfile" controller. The supplied filename is passed to readfile after a single urldecode with no directory-traversal validation, allowing an unauthenticated attacker to read files outside the...

CVE-2024-4367-POC-PDFJS

CVE 2024 4367: PoC per lo sfruttamento di XSS Cross-Site Scripting 1. Visualizzazione di un Avviso Attivazione XSS Un altro esempio di sfruttamento consiste nell'iniettare un semplice messaggio di avviso per verificare se l'attacco funziona. root@kitploit: python poc.py "alert'XSS exploit...

CVE-2024-1208

Badges Licenza MIT Installazione...

CVE-2018-8033

Emblemas Licença MIT Instalação...

CVE-2024-0235

Badge Licenza MIT Installazione 1. Installa Python3 e pip Istruzioni qui Se non riesci a capirlo, non dovresti usare questo strumento Installa tramite pip root@kitploit: pip install CVE-2024-0235 Esegui il comando seguente per verificare CVE-2024-0235 -h Configurazioni 2. Abbiamo integrato l'API ...

CVE-2019-9670

Badge Licenza MIT Installazione 1. Installa Python3 e pip Istruzioni Qui Se non riesci a capirlo, non dovresti davvero usare questo strumento Installa tramite pip root@kitploit: pip install CVE-2019-9670 Esegui il comando qui sotto per verificare CVE-2019-9670 -h Configurazioni 2. Abbiamo integra...

x8

x8 Suite di scoperta di parametri nascosti scritta in Rust. Lo strumento aiuta a identificare parametri nascosti che potrebbero potenzialmente essere vulnerabili o rivelare funzionalità interessanti che potrebbero sfuggire ad altri tester. La sua elevata precisione è ottenuta tramite confronto ri...

GONET-Scanner

GO/NET Scanner Bildschirmfotos Installation root@kitploit: chmod +x install.sh ./install.sh as root Verwendung root@kitploit: ARGUMENTS -ar CIDR: ARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top...

web-brutator

Web Brutator Fast Modular Web Interfaces Bruteforcer 📥 Install root@kitploit: python3 -m pip install -r requirements.txt ⏩ Usage root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / |...

Parallels H-Sphere 3.6.1713 - Cross-Site Scripting

Parallels H-Sphere 3.6.1713 contains a cross-site scripting vulnerability via the indexen.php 'from' parameter. id: CVE-2022-30777 info: name: Parallels H-Sphere 3.6.1713 - Cross-Site Scripting author: 3th1cyuk1 severity: medium description: | Parallels H-Sphere 3.6.1713 contains a cross-site...

Adobe Commerce (Magento) - Remote Code Execution

Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. id: CVE-2022-24086 info: name:...

Froxlor < 0.10.38.2. - HTML Injection

HTML Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2. id: CVE-2022-3869 info: name: Froxlor TEST" matchers-condition: and matchers: - type: word part: body words: - 'The message to ""TEST" failed' - type: word part: header words: - "text/html" - type: status status: - 200 d...

WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting

WordPress Elementor Website Builder plugin 3.5.5 and prior contains a reflected cross-site scripting vulnerability via the document object model. id: CVE-2022-29455 info: name: WordPress Elementor Website Builder = 3.5.5 - DOM Cross-Site Scripting author: rotembar,daffainfo severity: medium...

Joomla! Harmis Messenger 1.2.2 - Local File Inclusion

Joomla! Harmis Messenger 1.2.2 is vulnerable to local file inclusion which could give an attacker read access to arbitrary files. id: CVE-2019-9922 info: name: Joomla! Harmis Messenger 1.2.2 - Local File Inclusion author: 0xAkoko severity: high description: Joomla! Harmis Messenger 1.2.2 is...

Zyxel NAS Firmware 5.21- Remote Code Execution

Multiple Zyxel network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using th...

Artica Proxy Community Edition <4.30.000000 - Local File Inclusion

Artica Proxy Community Edition before 4.30.000000 is vulnerable to local file inclusion via the fw.progrss.details.php popup parameter. id: CVE-2020-13158 info: name: Artica Proxy Community Edition 4.30.000000 - Local File Inclusion author: 0xAkoko severity: high description: Artica Proxy Communi...

Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)

Keycloak 12.0.1 and below allows an attacker to force the server to request an unverified URL using the OIDC parameter requesturi. This allows an attacker to execute a server-side request forgery SSRF attack. id: CVE-2020-10770 info: name: Keycloak = 12.0.1 - requesturi Blind Server-Side Request...

Cute Editor for ASP.NET 6.4 - Cross-Site Scripting

Cute Editor for ASP.NET 6.4 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. id:...