CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 PoC 略微修改，用于英语翻译和对 https://github.com/chaosec2021/Spring-cloud-function-SpEL-RCE/blob/main/SpelRCEPOC.py 的检测。默认情况下，对目标执行 whoami 命令，并创建一个 vulnerable.txt 文件，其中包含存在漏洞的 URL。 利用此漏洞非常容易实现。下面给出了利用该漏洞的 curl 命令。 curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...

Security Bulletin: Security vulnerability in Java affects IBM Robotic Process Automation

Summary A security vulnerability in Java affects IBM Robotic Process Automation. Java is used by IBM Robotic Process Automation as part of its deployment. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2026-34282 DESCRIPTION: Easily...

poc_CVE-2025-68613

PoC: n8n 샌드박스 이스케이프 CVE-2025-68613 교육 목적 전용 이 PoC는 n8n의 심각한 취약점CVE-2025-68613을 시연합니다. 소유하지 않은 시스템이나 명시적인 테스트 허가를 받지 않은 시스템에서는 사용하지 마십시오. 취약점 개요 1.122.0 이전 버전의 n8n에는 원격 코드 실행RCE 취약점이 존재합니다. 인증된 사용자는 워크플로 표현식 편집기의 특정 JavaScript 페이로드를 통해 표현식 샌드박스를 우회하고 호스트 시스템에서 임의 코드를 실행할 수 있습니다. 1. 취약한 환경 설정 데이터...

Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. Python is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fixes...

CVE-2018-7600

Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Установите необходимые библиотеки с помощью: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE COD...

CVE-2017-1000486

CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 또는 6.0 - 원격 코드 실행 익스플로잇 요구 사항을 설치하려면 다음을 실행하세요: root@kitploit: git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt 익스플로잇 사용 방법은 다음과 같습니다: root@kitploit: $ python primefaces.py -h...

GHSA-F8FG-PG57-V4J8 league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed

Summary The AttributesExtension documents a security guarantee: Note: Attributes starting with on e.g. onclick or onerror are capable of executing JavaScript code and are therefore never allowed by default. You must explicitly add them to the allow list if you want to use them. —...

league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed

Summary The AttributesExtension documents a security guarantee: Note: Attributes starting with on e.g. onclick or onerror are capable of executing JavaScript code and are therefore never allowed by default. You must explicitly add them to the allow list if you want to use them. —...

CVE-2026-78608

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...

CVE-2022-1329

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 원격 코드 실행 root@kitploit: 날짜: 2023년 4월 16일 공격자: Việt Hùng https://github.com/phanthibichtram12 공급자 홈페이지: https://elementor.com/ 소프트웨어 링크: https://wordpress.org/plugins/elementor/advanced/ 아래로 스크롤하여 버전 선택 버전: 3.6.0, 3.6.1, 3.62 테스트 환경: WordPress 5.9.3 이...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

CVE-2020-14294

CVE-2020-14294 This vulnerablity was discovered and disclosed by me. This repository will hold the advisory. This repository is only for educational purposes. Links Advisory SYSS-2020-024 Detailed writeup SySS Blog entry Vendor notice MITRE Entry NVD Entry...

SR-71

Универсальный инструмент для разведки Цель этого инструмента — помочь охотникам за багами и пентестерам во время разведки... Установка: Может использоваться на любой системе с Python3 Вы можете легко установить SR-71 с помощью pip: root@kitploit: pip3 install SR-71 Чтобы использовать его, просто...

cve-2024-48325

CVE-2024-48325 Description: An authenticated user can abuse SQL injection vulnerability exists in the getDocuments function of the InstituicaoDocumentacaoController class. The instituicaoid parameter in /module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoid is not proper...

GHSA-XWG4-73V4-XW9W nanoid: Integer Overflow or Wraparound

Summary An integer overflow in nanoidsize permanently corrupts the process-wide CSPRNG pool, causing all subsequent ID generation to return the deterministic string "uuuuuuuuuuuuuuuuuuuuu". Any application that passes user-influenced values to the size parameter loses all randomness guarantees fo...

nanoid: Integer Overflow or Wraparound

Summary An integer overflow in nanoidsize permanently corrupts the process-wide CSPRNG pool, causing all subsequent ID generation to return the deterministic string "uuuuuuuuuuuuuuuuuuuuu". Any application that passes user-influenced values to the size parameter loses all randomness guarantees fo...

CVE-2025-59528.yaml

CVE-2025-59528.yaml...

EUVD-2026-69569

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...

CVE-2026-78608 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...

CVE-2026-78608

CVE-2026-78608 is a Missing Authorization (CWE-862) vulnerability in Kibana , where an internal APM integration function lacked a proper authorization check. This allowed any authenticated Kibana user to read APM server credentials that should only be accessible to users with APM or Fleet adminis...