Lucene search
+L

849 matches found

Cvelist
Cvelist
•added 2026/09/19 7:43 a.m.•10 views

CVE-2026-9832 Payment Gateway of Stripe for WooCommerce <= 5.0.8 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint

The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in all versions up to, and including, 5.0.8. This is due to the publicly accessible woocommerceapiwtstripe webhook endpoint EHStripeWebhookHandler::handle wrapping...

5.3CVSS0.00226EPSS
SaveExploits0References10
Kitploit
Kitploit
•added 2026/09/19 3:38 a.m.•9 views

CVE-2024-52510

Nextcloud X-E2EE-SIGNATURE 우회 POC 요앜 Nextcloud의 E2EEv2 프로토윜읎 정상적윌로 작동하는 동안 큎띌읎얞튞는 서버에 업로드하Ʞ 전에 폮더 메타데읎터에 암혞학적윌로 서명합니닀. 읎는 파음 공유나 동Ʞ화 변겜을 위핎 메타데읎터륌 닀시 가젞올 때 메타데읎터가 변조되지 않았음을 볎장합니닀. 서명 검슝은 가젞옚 메타데읎터가 쎈Ʞ화될 때 큎띌읎얞튞의 foldermetadata.cpp:177 에서 수행됩니닀. 귞러나 악의적읞 서버가 읎 검사륌 우회할 수 있는 두 가지 방법읎 있습니닀: 빈...

7.5CVSS5.9AI score0.00738EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/19 2:50 a.m.•8 views

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

수정 볎고서: Windows Server 2019 Azure VM에서의 CVE-2013-3900 CVE-2013-3900 EnableCertPaddingCheck 수정 Tenable/Nessus륌 사용한 읞슝된 췚앜점 슀캔 쀑 Microsoft Azure에서 혞슀팅되는 Windows Server 2019 Datacenter 읞슀턎슀에서 CVE-2013-3900을 확읞했습니닀. 읎 슀캔은 유횚한 ꎀ늬자 자격 슝명을 사용하여 심잵 점검을 수행했윌며, OS 수쀀에서 읎 췚앜점의 졎재륌 확읞했습니닀. CVE-2013-3900은...

8.8CVSS7.6AI score0.44647EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/19 2:31 a.m.•9 views

opgp-service-cve-2019-9153

CVE-2019-9153 췚앜점 BSI의 섀정에 Ʞ반한 PoC 재현 opgp-service API의 읎러한 공격에 대한 췚앜점 조사 닀음윌로 테슀튞 싀행: root@kitploit: npm test ê²°ë¡ : opgp-service는 Ʞ볞적윌로 AEADprotect=true로 섀정되얎 있윌며, 읎는 CVE-2019-9153에서 섀명된 서명 우회 공격을 방얎합니닀. 띌읎선슀: MIT 저작권 2019 Stéphane M. Catala 읎로썚 볞 소프튞웚얎 및 ꎀ렚 묞서 파음읎하 "소프튞웚얎"의 사볞을 획득하는 몚든 사람에게 소프튞웚얎...

7.5CVSS7.3AI score0.02013EPSS
SaveExploits1
Nuclei
Nuclei
•added 2026/09/19 2:05 a.m.•196 views

MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on...

8.7CVSS7.2AI score0.02428EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/19 12:42 a.m.•7 views

CVE-2022-39299_PoC_Generator

CVE-2022-39299 악용 닀쀑 룚튞 요소륌 통한 서명 우회 볎안 권고 : https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-647v-whv7 팚치 : https://github.com/node-saml/passport-saml/commit/8b7e3f5a91c8e5ac7e890a0c90bc7491ce33155e node-saml 테슀튞 쌀읎슀에서 추출한 Ʞ볞 페읎로드 예제:...

8.1CVSS7.8AI score0.03398EPSS
SaveExploits1References7
Kitploit
Kitploit
•added 2026/09/19 12:06 a.m.•10 views

cve-2026-25262-sm8450-research

Snapdragon 8 Gen 1 SM8450에서 CVE-2026-25262에 대한 싀험적 확읞 상태: 부분적 성공 — 임의 SRAM ì“°êž° 확읞, 전첎 Firehose 쎈Ʞ화 대Ʞ 쀑. 읎 저장소는 Snapdragon 8 Gen 1 SM8450 플랫폌, 특히 POCO F4 GT ꞰꞰ윔드명 ingres에 대한 CVE-2026-25262Qualcomm Sahara 프로토윜의 Write-What-Where의 적용 가능성에 대한 싀험적 연구 결곌륌 포핚합니닀. 죌요 발견 사항 확읞됚: CVE-2026-25262는 SM8450에서 악용...

7AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/18 10:46 p.m.•8 views

CVE-2025-29775

SAMLStorm CVE-2025-29775 랩 환겜 읎는 xml-crypto 띌읎람러늬 및 Node.js의 SAML 구현에 영향을 믞치는 SAMLStorm 췚앜점CVE-2025-29775을 시연하Ʞ 위한 랩 환겜입니닀. ì°žê³ : 읎는 췚앜점의 싀제 악용읎 아니며, 췚앜점읎 얎떻게 작동할 수 있는지 볎여죌Ʞ 위한 재현입니닀. 구성 요소 서비슀 제공자Service Provider : @node-saml/node-saml을 사용하는 췚앜한 SAML 서비슀 제공자 ID 제공자Identity Provider : 간닚한 몚의 SAML I...

9.3CVSS8.3AI score0.09509EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/18 9:44 p.m.•9 views

PowerShell-Obfuscation-Bible

PowerShell 難読化バむブル PowerShell スクリプトを手動で難読化し、シグネチャベヌスの怜知を回避するためのテクニック、実䟋、そしお少しの理論をたずめた教育目的のコレクションです。このリポゞトリの内容は個人調査の結果であり、オンラむン資料の読解や、ラボやペンテストでの詊行錯誀を含みたす。䜕を鵜呑みにしないでください。 YouTube 動画プレれンテヌション : youtube.com/watch?v=tGFdmAhlXE ⚠ 免責事項 :...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/18 7:53 p.m.•9 views

spd_flasher

CVE-2022-38694 匷化版゚クスプロむト — RP2350 USB Host 自動フラッシャヌ 䞭囜語版 README チュヌトリアル UDX710 ブヌトチェヌンリバヌス゚ンゞニアリングず RP2350 堅牢化ブヌトチュヌトリアル CVE-2022-38694 Unisoc BootROM の脆匱性を Raspberry Pi RP2350 USB Host 経由で悪甚し、起動時に SPL Loader を自動送信しお任意の u-boot を起動したす。 埓来 PC ず spddump を必芁ずした゚クスプロむトチェヌンを、RP2350...

7.8CVSS6.6AI score0.00586EPSS
SaveExploits2References10
Kitploit
Kitploit
•added 2026/09/18 6:41 p.m.•13 views

waf-community-bypasses

WAFコミュニティバむパス Web Application Firewall別名WAFはゎミです。 最も安䟡なCloudflareから、Imperva、Akamai、F5、Checkpoint、Fortinetずいった「゚ンタヌプラむズ」ず蚀われるベンダヌたで、すべおのベンダヌは実質的な保護を䞀切提䟛せず、顧客を隙しおいるだけです。 WAFシグネチャの99.9%は、10〜15幎前に曞かれた単なる正芏衚珟RegExpsにすぎたせん。 これを蚌明するために、コミュニティバむパスを含むTwitterペむロヌドを、確認できるCSVリストにたずめたした。...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/18 6:02 p.m.•5 views

the-key-ships-with-the-lock-cve-2026-82876-phison-s11-ssd-firmware-signature-bypass

CVE-2026-82876 — Phison S11 SSDファヌムりェア眲名怜蚌バむパスPoC CVE-2026-82876 CVSS 3.1: 8.2 High / CVSS 4.0: 9.3 Critical、CWE-347の抂念実蚌です。Phison PS3111-S11 SATA SSDコントロヌラは、ファヌムりェア曎新甚RSA眲名を、䞍倉のコントロヌラストレヌゞに固定されたモゞュラスではなく、ファヌムりェアむメヌゞ自䜓に埋め蟌たれた公開モゞュラス...

9.3CVSS6.1AI score0.00149EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/09/18 4:53 p.m.•10 views

CVE-2025-65945-poc

CVE-2025-65945: node-jws 眲名バむパス これは、node-jws ラむブラリにおける眲名怜蚌バむパスの抂念実蚌です。このバグにより、サヌバヌがナヌザヌ制埡のデヌタから HMAC 秘密鍵を導出する堎合、攻撃者は有効な JWT を停造できたす。 バグの内容 jws.createVerify 関数は、HMAC アルゎリズムを䜿甚する際に秘密鍵が実際に提䟛されたこずを怜蚌したせん。アプリが JWT 内の䜕かkid ヘッダヌなどに基づいお秘密鍵を怜玢し、その怜玢が倱敗した堎合、空の秘密鍵に察しお怜蚌しおしたう可胜性がありたす。 攻撃者はこれを次のように悪甚できたす 1...

7.5CVSS5.9AI score0.00215EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/18 4:18 p.m.•10 views

CVE-2021-21239

CVE-2021-21239에 ꎀ한 Ʞ술 볎고서: Redash SAML 읞슝 췚앜점 SAML 소개 SAMLSecurity Assertion Markup Language은 연합 ID 시슀템에서 당사자 간 읞슝 및 권한 부여 데읎터륌 교환하Ʞ 위한 개방형 표쀀입니닀. 읎륌 통핎 도메읞 간 SSOSingle Sign-On가 가능합니닀. 죌요 구성 요소는 닀음곌 같습니닀. IdPIdentity Provider : 사용자륌 읞슝하고 SAML 얎섀션을 발꞉하는 서비슀입니닀예: Google의 SAML IdP. 개읞 킀로 얎섀션에 서명하여...

6.5CVSS7.3AI score0.01271EPSS
SaveExploits3
NVD
NVD
•added 2026/09/18 12:17 p.m.•5 views

CVE-2026-28198

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS0.00199EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/18 12:09 p.m.•6 views

Weblogic_Wsat_RCE

WeblogicWsatRCE CVE-2017-10271のPOCです。 java.lang.ProcessBuilderがRCEの元のベクタヌであったため、この特定のペむロヌドをブロックするシグネチャベヌスのルヌルが耇数存圚したす。 java.lang.Runtimeを远加したした。今埌も他のものを远加する予定です。これは教育目的のみであり、このコヌドの䜿甚に぀いお䞀切の責任を負いたせん。...

7.5CVSS8.3AI score0.9999EPSS
SaveExploits45
Kitploit
Kitploit
•added 2026/09/18 11:33 a.m.•7 views

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 우늬는 테러 조직 하마슀에 의핎 읞질로 잡힌 몚든 시믌의 안전한 귀환을 요구합니닀. 몚든 읞질읎 석방되얎 안전하게 집윌로 돌아올 때까지 우늬는 쉬지 않을 것입니닀. 여러분도 귞듀읎 집윌로 돌아였도록 도욞 수 있습니닀.https://stories.bringthemhomenow.net/ 🚀 CVE-2024-41107 익슀플로잇 🚀 읎 저장소는 Apache CloudStack의 CVE-2024-41107 로 식별된 치명적읞 췚앜점에 대한 익슀플로잇을 포핚합니닀. 읎...

8.1CVSS8.2AI score0.1776EPSS
SaveExploits1
EUVD
EUVD
•added 2026/09/18 11:12 a.m.•6 views

EUVD-2026-82875

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS0.00199EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 11:12 a.m.•9 views

CVE-2026-28198

CVE-2026-28198 affects NetBackup Flex OS (Cohesity), specifically its management shell. An authenticated, low-privileged user can bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation yields ...

9.4CVSS0.00199EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/18 11:12 a.m.•27 views

CVE-2026-28198 Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted roo...

9.4CVSS0.00199EPSS
SaveExploits0References2
Rows per page
Query Builder