CVE-2021-43798

CVE-2021-43798 Grafana 目录遍历 用于利用 Grafana 目录遍历的简易程序 安装 gem install httparty gem install colorize gem install timeout ruby cve-2021-43798.rb...

CVE-2025-44137

CVE-2025-44137 قراءة ملفات غير مصادق عليها في MapTiler Tileserver-php v2.0. الوصف MapTiler Tileserver-php v2.0 عرضة لثغرة اجتياز الدليل Directory Traversal. دالة renderTile داخل tileserver.php مسؤولة عن تسليم المربعات tiles المخزنة كملفات على الخادم عبر طلب ويب. إنشاء المسار إلى ملف يسمح باستخدام...

shiro-cve-2020-17523

Apache Shiro: analisi del bypass dell'autenticazione con due tecniche CVE-2020-17523 0x01 Descrizione della vulnerabilità Apache Shiro è un framework di sicurezza Java potente e facile da usare, che si occupa di autenticazione, autorizzazione, password e gestione delle sessioni. Con l'API di faci...

CVE-2024-48990

CVE-2024-48990 Hallo, dies ist 0x3bs Auf dem Opfer-Rechner: root@kitploit: set -e cd /tmp 1. Create the malicious module directory structure mkdir -p malicious/importlib auf dem Angreifer-Rechner um lib.c auf dem Angreifer-Rechner zu kompilieren: root@kitploit: gcc -shared -fPIC -o exp.so lib.c u...

CVE-2024-32019-ndsudo

Die ndsudo-Schwachstelle ermöglicht es einem Angreifer, Root-Berechtigungen zu erlangen, indem er einen nicht vertrauenswürdigen Suchpfad im ndsudo-Tool ausnutzt, das Teil des Netdata-Agents ist. Dies kann die Ausführung beliebiger Programme mit erhöhten Rechten ermöglichen, wenn der Angreifer ei...

CVE-2025-69599

CVE-2025-69599 लेखक: Rafael José Núñez Gulías कंपनी: Iberian Var Group प्रभावित उत्पाद: RayVentory Scan Engine 12.6 Update 8 और पिछले संस्करण Raynet सलाह: RSEC200965 rvia Raynet में अनियंत्रित खोज पथ तत्व Uncontrolled Search Path Element समस्या के लिए संवेदनशील है। जब साझा ऑब्जेक्ट लोड करते हैं औ...

BurpSuite_403Bypasser

403Bypasser Eine BurpSuite-Erweiterung zur Umgehung von 403-beschränkten Verzeichnissen. Durch die Verwendung des PassiveScan standardmäßig aktiviert wird jede 403-Anfrage automatisch von dieser Erweiterung gescannt, also einfach zu BurpSuite hinzufügen und genießen. Payloads: $1: HOSTNAME $2: PA...

CVE-2025-53632

CVE-2025-53632 Questo repository contiene un exploit di CVE-2025-53632 che colpisce Chall-Manager !WARNING Il modo in cui Chall-Manager gestisce gli scenari, è ancora completamente sfruttabile senza lo zip slip: basta manomettere il binario pulumi dello scenario in modo che la successiva esecuzio...

CVE-2022-22965

CVE-2022-22965 Spring4Shell-PoC Versione Spring Framework 5.2.20 e 5.3.18 Versione con patch: Spring Framework 5.3.18 e 5.2.20 Spring Boot 2.6.6 e 2.5.12 Dettagli Spring Core è il componente principale di Spring Framework. Questa è la base per costruire altri componenti nell'ecosistema Spring...

CVE-2020-8816

CVE-2020-8816 Ein Python-Skript zur Ausnutzung von CVE-2020-8816, einer Schwachstelle zur Remote-Code-Ausführung auf dem Pi-hole. Dieses Skript verwendet die von François Renaud-Philippon gefundenen Techniken, um eine Remote-Code-Ausführung auf einem Pi-hole zu erreichen, das eine Weboberfläche i...

CVE-2025-6218-POC

CVE-2025-6218 Prova de Conceito POC Visão Geral Este repositório contém uma Prova de Conceito POC simples para CVE-2025-6218 , demonstrando a exploração de uma vulnerabilidade envolvendo o tratamento de caminhos de extração de arquivos pelo WinRAR. O script batch da POC cria um arquivo ZIP que...

CVE-2026-66153

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

CVE-2026-66153

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

CVE-2026-66153

CVE-2026-66153 is a Link Following (CWE-59) vulnerability in the NEService auto-upgrade process of the SonicWall NetExtender Linux client . The process insecurely handles temporary files, allowing a local attacker with low privileges to manipulate file paths. The CVSS 3.0 score is 7.0 (HIGH) with...

Craft CMS - Remote Code Execution via Template Path Manipulation

This template identifies a critical Remote Code Execution RCE vulnerability in Craft CMS, identified as GHSA-2p6p-9rc9-62j9. The vulnerability exists due to improper handling of the --templatesPath query parameter, allowing attackers to execute arbitrary code by referencing malicious Twig...

OpenMetadata - Authentication Bypass

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The JwtFilter handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request...

pgAdmin < 6.17 - Unauthenticated Remote Code Execution

pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication. id: CVE-2022-4223 info: name: pgAdmin 6.17 - Unauthenticated Remote Code Execution...

PT-2026-81518

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

CVE-2024-32019-POC

⚠️ CVE-2024-32019 - PoC 📌 Versioni Affette = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ Prova di Concetto CVE-2024-32019 — escalation dei privilegi locale di ndsudo tramite percorso di ricerca non attendibile. 🔧 Compila l'exploit root@kitploit: x8664-linux-gnu-gcc -o nvme exploit.c -static 📤...

cve-2025-63888-exploit

CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit Uno strumento di ricerca sulla sicurezza per rilevare e testare la vulnerabilità CVE-2025-63888 in ThinkPHP 5.0.24, che consente l'esecuzione remota di codice tramite attacchi di inclusione di file. ⚠️ Disclaimer Questo strumento è destinat...