cve-2025-5548-freefloat-ftp-walkthrough

CVE-2025-5548 – FreeFloat FTP Server 1.0 Procedura dettagliata Repository in cui documentiamo passo dopo passo l'analisi e lo sfruttamento controllato della CVE-2025-5548 su FreeFloat FTP Server 1.0 all'interno di un ambiente di laboratorio. In questo progetto non ci limitiamo a eseguire un explo...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

trust-boundary-ctf

🐘 Trust Boundary: CTF sull'isolamento delle sessioni MCP La console riporta Session Active. Ogni chiamata strumento ha successo. Il token OAuth dell'amministratore è in ogni risposta. Trust Boundary è un laboratorio CTF basato su browser, costruito attorno a un reale fallimento nell'isolamento...

CVE-2018-4878-

-cms 서버 클러스터 CMS 일괄 식별, 백업 일괄 탐색, 일괄 인젝션. VIP 그룹판 백업...

CVE-2026-75330

The front-end interface /superdiamond/preview/projectCode/module/type of super-diamond-server = 1.3.3 is vulnerable to SQL injection. The module parameter is directly concatenated into the SQL IN clause through StringUtils.split and string concatenation without being parameterized and bound...

CVE-2025-62341

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

wotop

Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a...

LightMe

LightMe LightMe ist ein einfacher HTTP-Server, der Powershell-Skripte/Payloads nach deren Obfuskation bereitstellt und die Obfuskation als Hintergrunddienst ausführt, um die Payloads ständig zu obfuskieren, wodurch bei jeder HTTP-Anfrage fast ein neuer obfuskierter Payload bereitgestellt wird...

MCPwner

MCPwner बैजर से सावधान सुरक्षा अनुसंधान ऑटोमेशन के लिए मॉडल कॉन्टेक्स्ट प्रोटोकॉल सर्वर इनके साथ संगत:...

CVE-2018-3191

Vulnerabilità di esecuzione remota di comandi Weblogic-CVE-2018-3191 Ambiente weblogic per Docker 0x00 Introduzione Il 17 ottobre, Oracle ha rilasciato il Critical Patch Update CPU di ottobre, risolvendo una vulnerabilità critica di esecuzione remota di codice in WebLogic CVE-2018-3191. Questa...

CVE-2025-5844

CVE-2025-5548: Analyse & PoC 📝Zusammenfassung Dieses Repository bietet eine umfassende technische Analyse und einen funktionalen Proof of Concept PoC für CVE-2025-5548 : eine Buffer Overflow Stack-Sicherheitslücke, die den FreeFloat FTP Server v1.0 betrifft. Die Forschung deckt den gesamten...

CVE-2021-26855-PoC

CVE-2021-26855-PoC CVE-2021-26855 के लिए PoC शोषण कोड। मूल कोड https://github.com/GreyOrder द्वारा विकसित किया गया था। CVE-2021-26855 ssrf golang अभ्यास का सरल उपयोग प्रभावित संस्करण root@kitploit: Exchange Server 2013 CU23 से कम है Exchange Server 2016 CU18 से कम है Exchange Server 2019 CU7 से क...

CVE-2024-40725-CVE-2024-40898

🚨Allerta🚨Vulnerabilità Apache 🚨Allerta🚨Avviso di Sicurezza: CVE-2024-40725 e CVE-2024-40898🚨Allerta🚨 CVE-2024-40725 Descrizione: CVE-2024-40725 è una vulnerabilità ad alta gravità riscontrata nelle versioni 2.4.0–2.4.61 di Apache HTTP Server. Questa vulnerabilità interessa il modulo modproxy...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

cve-2022-36804

CVE-2022-36804：Atlassian Bitbucket Server 中的预认证 RCE 在 Atlassian Bitbucket Server 和 Data Center 的多个 API 端点中发现了一个严重命令注入漏洞。该漏洞影响所有版本低于 、、、、、 和 的 Bitbucket Server 和 Data Center。 CVE-2022-36804 实验环境 构建 Docker root@kitploit: docker build -t bitbucket . 运行 Docker...

OpenRelayMagic

OpenRelayMagic root@kitploit: ╔═╗┌─┐┌─┐┌┐┌╦═╗┌─┐┬ ┌─┐┬ ┬╔╦╗┌─┐┌─┐┬┌─┐ ║ ║├─┘├┤ │││╠╦╝├┤ │ ├─┤└┬┘║║║├─┤│ ┬││ ╚═╝┴ └─┘┘└┘╩╚═└─┘┴─┘┴ ┴ ┴ ╩ ╩┴ ┴└─┘┴└─┘ Strumento per testare relay aperti vulnerabili su server SMTP Caratteristiche Controlla un singolo target o una lista di domini Porte 587 e 465...

CVE-2022-26923

CVE-2022-26923 描述 此漏洞允许低权限用户在默认的 Active Directory 环境中，在安装了 Active Directory 证书服务 AD CS 服务器角色的情况下，将权限提升至域管理员。 该漏洞主要与 Active Directory 证书服务 AD CS 角色相关。AD CS 角色是一种 Windows Server 角色，允许您构建公钥基础设施 PKI，并为您的组织提供公钥加密、数字证书和数字签名功能。AD CS 角色用于为用户、计算机和服务颁发证书。 目录 CVE-2022-26923 描述 目录 前提条件 环境 利用 概念验证 参考文献 前提条件...

cve-2022-26134

cve-2022-26134 cve-2022-26134 atlassia Confluence Data Center2016 服务器 OGNL %...

CVE-2021-26085

CVE-2021-26085 Atlassian Confluence Server 7.5.1 预授权任意文件读取漏洞证明代码 POC 存在漏洞的端点： root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties...

cve-2021-31630

本脚本可自动利用 OpenPLC Web Server v3 中的漏洞。 您将能够与服务器建立自动反向 Shell，无需使用手动技术。 CVE-2021-31630 详情 Open PLC Webserver v3 中的命令注入漏洞允许远程攻击者通过应用程序 "/hardware" 页面上的 "Hardware Layer Code Box" 组件执行任意代码。 该脚本经过定制，完成在 OpenPLC 中的注册后，会在同一终端生成机器的 Shell。 使用以下命令（建议创建 Python 虚拟环境安装依赖项） 但是，breakerplc.py 脚本必须在虚拟环境外执行。...