VUL4J-23

Apache Sling Bringing Back the Fun! Apache Sling is a web framework that uses a Java Content Repository, such as Apache Jackrabbit, to store and manage content. Sling applications use either scripts or Java servlets, selected based on simple name conventions, to process HTTP requests in a RESTful...

-CVE-2021-26904

CVE-2021-26904 LMA ISIDA Retriever 5.2 允许 SQL 注入 建议描述 ："ISIDA RETRIEVER v5.2" SQL 注入 易受攻击的功能 ：ISIDA RETRIEVER 平台容易受到 SQL 注入攻击 易受攻击的 URL 和参数 ：website.com/index.php?title=Injection 易受攻击的 URL 和参数 ：website.com/index.php?title=info?mode=info?query=Injection 易受攻击的参数 ：title, query 发现者 ：Alexander Semenen...

CVE-2020-3452

CVE-2020-3452 一个WIP Python脚本，用于利用Cisco Adaptive Security Appliance ASA和Cisco Firepower Threat Defense FTD设备Web界面中的目录遍历漏洞。 请注意，将为指定的目标创建目录，并且任何下载的文件都将下载到它们各自的目录中。此外，还提供了日志记录。...

ragflow-audit

ragflow-audit RAGFlow 三洞审计工具（CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286） ssti ：检测并利用 StringTransform / Message 组件的 SSTI - RCE zipslip ：离线检测 zip 条目的路径穿越（Zip Slip） apikey ：从分享链接 beta 推导 API key（uuid1 时间戳枚举） 纯 Python 标准库，无第三方依赖，Python 3.8+ 可直接运行。 用法 root@kitploit: python3 ragflow-audit.py -h...

CVE-2020-5844

CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 Admin privileged attackers can upload malicious PHP documents. By decoding the base64 file location users can gain a shell as apache user. Discovered by TheCyberGeek PoC python script root@kitploit: Usage: python3 CVE-2020-5844.py URL USER...

declarative-policy

DeclarativePolicy: A Declarative Authorization Library This library provides a DSL for writing authorization policies. It can be used to separate logic from permissions, and has been used at scale in production at GitLab.com. The original author of this library is Jeanine Adkisson, and copyright ...

AI-Security-Newsletter

AI Security Newsletter - June 2026 A digest of AI security research, insights, reports, upcoming events, and tools & resources. Follow the AISecHub community and our LinkedIn group for additional updates. Also check out our project, Awesome AI Security. Sponsored by InnovGuard.com - Technology...

ATAboy

If you don't want to build your own, the hardware can be purchased here: https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy is designed for retro computing enthusiasts, data recovery experts, and archivists. Read and write the oldest of IDE hard drives, without th...

paramiko

|version| |python| |license| |ci| |coverage| .. |version| image:: https://img.shields.io/pypi/v/paramiko :target: https://pypi.org/project/paramiko/ :alt: PyPI - Package Version .. |python| image:: https://img.shields.io/pypi/pyversions/paramiko :target: https://pypi.org/project/paramiko/ :alt:...

log4j-cve-2021-44228

log4j-cve-2021-44228...

CVE-2022-24716

CVE-2022-24716 Exploit for the vulnerability: Arbitrary File Disclosure Vulnerability in Icinga Web 2 2.8.6, 2.9.6, 2.10 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit...

JarHunter

JarHunter – Advanced JAR Analysis & Extraction Tool JarHunter is a tool designed to explore, search and extract specific classes from large JAR files quickly and efficiently. Instead of manually browsing thousands of classes, JarHunter allows you to search keywords across the entire JAR file and...

DDWPasteRecon

DDWPasteRecon Pastesites are websites that allows users to share plain text through public posts called “pastes.” Once attackers compromise the external perimeter and gain access to the internal resources they release the part of data on the "paste" sites like pastebin or hastebin. As these hacke...

UnCanny

UNCanny Coerce 这项研究的初衷很简单，因为我想找到属于自己的强制认证（coercion）技术。一开始我在寻找新的 RPC 攻击面，但在微软加入了 RPC 活动监控（https://techcommunity.microsoft.com/blog/microsoftdefenderatpblog/microsoft-defender-now-monitors-rpc-activity/4523368）之后，我决定换一条路。 UNCanny 就是那个兔子洞的产物。由于它的局限性，我不会认为它适合真正的红队作战，但我仍然认为这些笔记值得发表，供任何在这个领域深挖的人参考。...

Query-Hub

CQL-Hub | CrowdStrike SIEM & LogScale Queries Welcome to the CQL-Hub Backend Repository This repository powers cql-hub.com: A free, community-driven hub for CrowdStrike Falcon SIEM queries. All queries stored here are automatically published and made visible on the CQL-Hub website, making it easi...

fuzzuf

fuzzuf fuzzuf fuzz ing u nification f ramework は、ファジングプリミティブの構成要素を組み合わせてファジングループを記述するための独自のDSLを備えたファジングフレームワークです。 ビルド手順とチュートリアルについては、building.md と tutorial.md を参照してください。 Why use fuzzuf? fuzzuf は、各ファザーで定義されたファジングループを、DSL 表記によるビルディングブロックの組み合わせとして柔軟に定義できると同時に、独自のファザーに対する拡張性を維持します。 すでに...

Vulnerability-Disclosures

Mandiant 漏洞披露 本仓库详细列出了 Mandiant 披露的漏洞。这些漏洞通过内部研究、红队评估或在野利用被发现。可能提供也可能不提供概念验证（PoC）。 以下 许可证/许可 适用于本 Mandiant 仓库： 1. CC BY-SA 4.0 - 适用于与 CVE 相关的信息（不包括源代码，如 PoC） 2. MIT - 适用于所提供的 CVE 信息中包含的源代码 Mandiant 根据 Google 漏洞披露政策 协调和处理漏洞披露。 Mandiant CNA Mandiant 的 CVE 编号授权机构（CNA）范围：Mandiant 代码中的漏洞，以及由 Mandiant...

Snoopy

root@kitploit: | || | | || || || || | | | | || || || || || || || | | | | || | | || | | || || || | | || || || || || || || | | || | | || || || | | | |||| |||||||| || V0.1 “艾米，技术本身没有善恶之分，关键在于如何使用它。就像死亡射线一样。” ——法恩斯沃思教授 欢迎使用 Snoopy；一个分布式跟踪与分析框架。Snoopy 仍在开发中，如有建议或更正，请随时提交。本文档概述了基本用法。如需进一步了解背景，请参阅以下内容：...

perwendel__spark_CVE-2018-9159_2-7-1

Spark - 一个面向 Java 8 的微型 Web 框架 新闻 ：Spark 2.7.0 已发布。请试用它并报告任何 bug。 root@kitploit: com.sparkjava spark-core 2.7.0 重要提示 - 较旧版本的 Spark（低于 2.5.2 的版本）存在一个漏洞。请升级到最新版本。 文档请访问：http://sparkjava.com/documentation 使用问题请使用 带有 “spark-java” 标签的 Stack Overflow Javadoc：http://javadoc.io/doc/com.sparkjava/spark-co...

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Hardcoded Admin Credential in i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to Hardcoded admin credential vulnerability. These vulnerabilities could allows anyone to login as admin with just username “admin” and password “admin”. Description of product: i-doit is...