6274 matches found
CVE-2024-21182
Oracle WebLogic Server JNDI 脆弱性 教育目的のみ...
CVE-2024-6387
CVE-2024-6387 通过下面的一行bash脚本检查你的服务器是否存在CVE-2024-6387漏洞： root@kitploit: curl -fsSL https://dub.sh/cve-2024-6387-CN |bash...
CVE-2024-3094-One-Liner
CVE-2024-3094 ワンライナー脆弱性チェッカー このリポジトリは、xz ユーティリティの特定のバージョンに見つかった重大なセキュリティ脆弱性である CVE-2024-3094 に対して、サーバーが脆弱かどうかを迅速に判断するための、シンプルかつ強力なワンライナースクリプトを提供します。さらに、潜在的な間接的脆弱性を示す可能性がある xz ライブラリへの参照をコードリポジトリからスキャンする便利な方法も提供します。 サーバーの脆弱性を確認する サーバーが CVE-2024-3094 の影響を受けるかどうかを確認するには、ターミナルで次のコマンドを実行します:...
Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload
Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. id: CVE-2018-9206 info: name: Blueimp jQuery-File-Upload v9.22.0 -...
XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)
XWiki = 17.3.0 contains a server-side template injection caused by improper validation of Apache Velocity template code in the Administration interface HTTP Meta Info field, letting authenticated administrators execute arbitrary template logic. id: CVE-2025-51991 info: name: XWiki = 17.3.0 -...
Vendure - Arbitrary File Read
Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...
Angular-Base64-Upload - Remote Code Execution
angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...
CVE-2023-22518
CVE-2023-22518 CVE-2023-22518 不適切な認可の脆弱性に脆弱なConfluenceサーバーを悪用するためのエクスプロイトツール インストール: root@kitploit: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py 使用法: root@kitploit: python3 exploit.py -h usage: exploit.py -h -d DOMAIN -dL DOMAINSLIST -o OUTPUT -to...
shocker
Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...
Explora-o-RCE-n-o-autenticado-JetBrains-TeamCity-CVE-2024-27198-
Explora-o-RCE-n-o-autenticado-JetBrains-TeamCity-CVE-2024-27198- 2024年2月、JetBrains TeamCity サーバーに影響を与える2つの新しい脆弱性が特定されました（CVE-2024-27198 および CVE-2024-27199）。...
CVE-2019-1006
CVE-2019-1006 使用方法: ターミナルで「python CVE-2019-1006.py "url"」と入力します。ここで、url はテスト対象の RDG ゲートウェイサーバーの URL です。 例: python CVE-2019-1006.py "https://www.aaa.com/"...
Detect-CVE-2019-19781
CVE-2019-19781 の検出 独自のサーバーで $IP 変数を設定して、脆弱かどうかを検出します。...
CVE-2017-12542
CVE-2017-12542 このスクリプトは、HP iLO サーバーが脆弱かどうかを確認し、管理者ユーザーを追加できます。...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides an empty password value. This issue affects FreeRDP-based RDP Server implementations. RDP clients are not affected. The...
Astra Linux – Vulnerability in Apache2
Inconsistent interpretation of HTTP requests: The “HTTP Request Smuggling” vulnerability in modproxyajp of the Apache HTTP Server allows an attacker to secretly send requests to the AJP server to which the server forwards requests. This issue affects the Apache HTTP Server version 2.4.53 and...
Astra Linux – Vulnerability in libsoup2.4
A use-after-free vulnerability was discovered in libsoup, within the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server...
Astra Linux – Vulnerability in Mariadb 10.3
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. The supported versions affected are 5.7.33 and earlier, as well as 8.0.23 and earlier. This easily exploitable vulnerability allows a highly privileged attacker with network access via multiple protocols to compromi...
Astra Linux – Vulnerability in etcd
A cross-site request forgery flaw was discovered in etcd 3.3.1 and earlier. An attacker can create a website that attempts to send a POST request to the etcd server and modify a key. Adding a key is done using a PUT operation, so it seems theoretically safe but PUT operations cannot be performed...
