conduit

Conduit AIコーディングエージェント向けオンプレ制御プレーン。 エンジニア別コスト帰属 · ハードバジェット · 出力ガバナンス · コンテキストロート可観測性 · 監査対応エクスポート — すべてVPC内で完結。 ConduitはAIコーディングエージェント（Claude Code、Cursor、Codex、Aider）と既存のプロバイダ（Anthropic、OpenAI、Bedrock、Azure、または既存のLiteLLM / Portkey デプロイ）の間に位置します。環境変数1つで導入可能、クライアントの変更不要、プロンプトと完了は保存されません。...

CVE-2019-19547

CVE-2019-19547 CVE-2019-19547 POC Symantec EDR 本地部署版（版本低于 "4.3.0"）存在无需认证的反射型 XSS 漏洞，可通过以下 URL 触发： root@kitploit: https://@IPEDR/r3epmpi/v1/dx/log 参考 https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-and-Response-XSS/SYMSA1502...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

CVE-2020-12593

CVE-2020-12593 CVE-2020-12593 概念验证 Symantec EDR 本地部署版本（低于"4.5"）存在信息泄露漏洞，可通过以下URL利用： root@kitploit: https://@IPEDR/atpapi/v2/policies/blacklist 参考 https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-Response-Security-Update/SYMSA16562...

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR local on-prem anterior a la versión "4.4.0" es propenso a una vulnerabilidad de divulgación de información a través de las siguientes URL: root@kitploit: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes...

CVE-2025-53770

CVE-2025-53770 这是一个针对 SharePoint 未认证远程代码执行漏洞 的扫描器，漏洞编号为 CVE-2025-53770。 该代码是通过逆向分析一个在野外见到的 payload 编写的。 使用风险自负，我对可能造成的任何负面影响概不负责。 它是如何工作的？ 它尝试通过向 SharePoint ToolBox 控件中注入一个标记来利用该漏洞。 如果在 SharePoint 服务器的响应中找到这个无害的标记，则该主机被标记为易受攻击。 如何使用 root@kitploit: 检查 是否易受攻击，并尝试提取版本信息 % ./CVE-2025-53770 ... INFO00...

Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...

CVE-2025-53770

CVE-2025-53770 这是一个针对SharePoint未认证远程代码执行漏洞的扫描器，其CVE编号为CVE-2025-53770。 该代码是通过对野外中发现的payload进行反向工程编写的。 请自行承担使用风险，对于可能造成的任何负面影响，本人概不负责。 工作原理 它试图通过向SharePoint ToolBox小部件注入一个标记来利用该漏洞。 如果在SharePoint服务器响应中发现这个无害标记，则将该主机标记为易受攻击。 使用方法 root@kitploit: check if is vulnerable and try extract version informati...

cve-2021-26084-confluence

这是一个快速粗糙的PoC，针对特定的Confluence实例进行了调整，因为现有的现成PoC没有一个能正常工作。 显然，它几乎完全基于 https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md 和 https://github.com/alt3kx/CVE-2021-26084PoC 的工作。 你需要在脚本中设置一些变量。 host 是你要检查的主机。 sessionid 是从登录Confluence时创建的JSESSIONID cookie中获取的会话ID。 spacekey 是你系统上的任意有效空间键 -...

cve-2021-27065

盗まれたデータの検索に基づいて、新しいコードを追加したり既存のコードを修正したりし続けます 侵害された場合、これらのスクリプトは決してそれを修正してくれるわけではありません！ これらのスクリプトは、システムで何が起こったのかを知る以外には、あなたにとって何の利益も提供しません。 とはいえ、システムからどのようなデータが盗まれた可能性があるかについての調査で使用しているスクリプトを、ここに追加し続けます。 便利なリンク 1...

CVE-2026-81939

A Zip Slip vulnerability in the SonicWall Network Security Manager NSM On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive...

CVE-2026-78328

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...

CVE-2026-81939

A Zip Slip vulnerability in the SonicWall Network Security Manager NSM On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination directory using a specially crafted archive...

CVE-2026-81939

CVE-2026-81939 is a Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality. An attacker with high privileges (e.g., SuperAdmin) can extract files outside the intended destination directory using a specially crafted archive, ...

CVE-2026-78328

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...

CVE-2026-78328

CVE-2026-78328 is a missing authorization (CWE-862) vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface. A lower-privileged Admin user can escalate privileges to SuperAdmin . SonicWall rates it CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The NVD/CNA entr...

EUVD-2026-71680

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...

CVE-2026-78327

An OS Command Injection (CWE-78) in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands executed on the underlying host, resulting in remote code execution . The vulnerability affects NS...

EUVD-2026-71679

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

PT-2026-86223

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...