CVE-2026-28672

CVE-2026-28672 — Apache Ranger UnixUserGroupBuilder OS 명령 주입 Apache Ranger의 user-syncunixusersync 모듈에 존재하는 OS 명령 주입에 대한 실행 가능한 개념 증명PoC 재현 코드입니다. 동기화되는 각 사용자의 그룹을 열거하는 동안 UnixUserGroupBuilder는 셸을 통해 id 명령을 실행하며, 명령줄에 username 을 연결합니다: root@kitploit: //...

http-vuln-CVE-2022-41082

업데이트된 버전은 HTTPS 확인도 지원합니다. exchange-vuln-check.nse HTTP의 경우: nmap -p80 --script exchange-vuln-check.nse HTTPS의 경우: nmap -p443 --script exchange-vuln-check.nse 결과를 파일에 저장하려면: nmap -p80 --script exchange-vuln-check.nse -oN results.txt http-vuln-CVE-2022-41082 Microsoft Exchange Server 원격 코드 실행...

CVE-2019-12086-jackson-databind-file-read

jackson-CVE-2019-12086 脆弱性の説明 Default Typing が有効な場合、かつ classpath に mysql-connector-java 8.0.15 以下（2019.2.1 リリース）が存在する場合、攻撃者は悪意のある JSON データを送信することで任意のファイルを読み取ることができます。mysql-connector-java ライブラリは、データベース接続に一般的に使用される MySQL JDBC ドライバです。 CVE の説明は以下のとおりです： A Polymorphic Typing issue was discovered in...

-CVE-2025-0133-GlobalProtect-XSS

mitsecvpnxssexploit 🔓 GlobalProtect SSL VPN 엔드포인트 /ssl-vpn/getconfig.esp를 대상으로, URL에 제작된 XSS 페이로드를 추가하는 익스플로잇입니다. 사용법 root@kitploit: python3 exploit.py -u https://target.com 파라미터 -u, --url: 대상 기본 URL 쿼리 파라미터는 포함하지 마세요 페이로드 미리보기 root@kitploit: prompt"mitsec" 작성자 GitHub: ynsmroztas...

TP-Link-defaults

TP-Link-defaults Python-скрипт для подбора стандартных паролей некоторых хотспотов TP-Link Вдохновлено Использование root@kitploit: usage: scan.py -h -p -t TIMEOUT Python script for trying default passwords for some TP-Link Hotspots optional arguments: -h, --help show this help message and exit -...

offsec-lab

OffSec Lab — Classic CVE Exploitation Labs + Knowledge Base A...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-extensions is a rich component library for the Wicket framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the AjaxEditableLabel, AjaxEditableChoiceLabel, and AjaxEditableMultiLineLabel rendering paths in...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

CVE-2026-21018

SveService 버퍼 오버플로우 Samsung SMR May 2026 SVE-2026-0478CVE-2026-21018 영향을 받는 버전: Android 14, 15, 16 공개 상태: 비공개 제보 SMR May-2026 Release 1 이전의 SveService에서 발생하는 경계를 벗어난 쓰기Out-of-bounds write로 인해 로컬 권한 공격자가 임의 코드를 실행할 수 있습니다. 패치는 적절한 입력 검증을 추가합니다. 경고: 이것은 교육 목적의 개념 증명PoC일 뿐입니다. 공부 외의 목적으로 사용하는 모든 행위에...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-extensions is a rich component library for the Wicket framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS through org.apache.wicket.extensions.markup.html.form.palette.component.AbstractOptions in the palette option-rendering...

awesome-soc — Updated!

Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...

Security Bulletin: Resolved multiple XSS vulnerabilities in DOMPurify (CVE-2026-49978, CVE-2026-65898, CVE-2026-66010, and others)

Summary Carbon Charts has updated its DOMPurify dependency from 3.4.0 to 3.4.12, resolving 9 CVEs identified by security scanning CVE-2026-49978 Critical CVSS 9.3, CVE-2026-65898 High CVSS 7.2, CVE-2026-66010 Medium CVSS 6.1, CVE-2026-65902 Medium CVSS 6.1, CVE-2026-65901 Medium CVSS 6.1,...

NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend

A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description MUD URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL,...

Zygotroller

Zygotroller Удаление владельцев профилей/Family Link на любом устройстве с режимом разработчика до июня 2024 Android 12+ Zygotroller — это proof-of-concept, который может удалить владельца профиля и связанные ограничения с помощью ошибки внедрения в Zygote CVE-2024-31317. Для этого требуется режи...

CVE-2022-22965

CVE-2022-22965 Poc&Exp, поддержка массового сканирования Использование root@kitploit: -a string адрес для обратного подключения -b показывать баннер true по умолчанию -c string команда default "ls" -p int порт для обратного подключения -poc выполнять только poc-сканирование, по умолчанию только p...

zeek-plugin-roca

Johanna::ROCA 이 플러그인은 CVE-2017-15361 키 탐지를 구현합니다. https://github.com/crocs-muni/roca 에서 제공되는 소스의 재구현입니다. 이 플러그인은 공개 키를 확인할 수 있는 두 가지 새로운 BIF를 제공합니다: rocavulnerablecert - 인증서가 취약한지 확인합니다 rocavulnerablemod - 모듈러스가 취약한지 확인합니다. 또한 이 플러그인은 자동으로 로드되는 스크립트를 포함하며, 네트워크 트래픽에서 CVE-2017-15361이 발견될 때 알림을 보낼...

CVE-2025-3776

CVE-2025-3776 - "Verification SMS with TargetSMS" 플러그인 1.5 이하에서의 원격 코드 실행 플러그인 정보 플러그인 이름: Verification SMS with TargetSMS 취약한 버전: = 1.5 CVE ID: CVE-2025-3776 유형: 원격 코드 실행 RCE OWASP 분류: A1: 인젝션 CVSS 심각도: 10.0 치명적 필요한 권한: 인증 불필요 공개 날짜: 2025년 4월 23일 근본 원인: 프로그래밍 오류 이 취약점은 사용자 입력에 대해 허용된 함수 목록화이트리스트...