CVE-2024-24919

CVE-2024-24919 检查器 一个简单的 bash 脚本，用于检查 CVE-2024-24919 漏洞。 安装 克隆仓库： root@kitploit: git clone https://github.com/satriarizka/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919-scan.sh 用法 ./CVE-2024-24919-scan.sh -l ips.txt HUNTER 查询 root@kitploit: product.name="Check Point SSL Network...

Kali-Linux

Kali-Linux 黑客技术与配置 当前版本 Kali 周版镜像： 链接 下载单一节点 root@kitploit: apt install subversion -y svn checkout https://github.com/nu11secur1ty/Kali-Linux/trunk/$inode 介绍： Kali Linux 适合你吗？ 作为该发行版的开发者，你可能期望我们推荐每个人都应该使用 Kali Linux。然而，事实是，Kali 是一个专门针对专业渗透测试员和安全专家的 Linux 发行版。鉴于其独特性，如果你不熟悉...

CVE-2024-24919

CVE-2024-24919 漏洞利用工具 概述 本仓库包含 CVE-2024-24919 的概念验证（PoC）漏洞利用代码，这是 Check Point SVN 中发现的一个严重漏洞。该漏洞允许读取系统文件。 CVE ID : CVE-2024-24919 严重性 : 严重 目录 漏洞详情 利用工具详情 使用方法 1. 克隆仓库： root@kitploit: git clone https://github.com/un9nplayer/CVE-2024-24919.git cd CVE-2024-24919 2. 目标/IP 必须存在于 domain-IP.txt 中...

CVE-mitre

CVE-Mitre 常见漏洞暴露 下载单个 CVE 该变量仅为示例 ; 你可以编写自己的 SVN 脚本来下载单个文件夹 = CVE = 此致 @nu11secur1ty $CVE = CVE-2020-13935 root@kitploit: svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE 分析描述链接表： 开始添加 2022 2023 还有更多…… 🤫 😉 😎...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

svn-extractor

Svn-Extractor 很多时候，Web 应用渗透测试人员会遇到 .svn 文件夹。对于那些不了解的人来说，.svn 文件夹是 SVN 版本控制系统用于执行其操作的。对于黑盒渗透测试，该文件夹包含大量信息。其中一些关键的帮助领域包括： 1. 发现隐藏的文件和文件夹名称 2. 访问文件的源代码。 3. 即使 htaccess 中设置了限制，也能下载文件。 如何实现这一点。 1. 发现隐藏的文件和文件夹名称 根据所使用的 SVN 版本，有两种方法可以实现这一点。 对于 1.6 版本，我们有 .svn/wc.db，其中包含类似的数据，但采用 sqlite3 格式。 这些文件可以通过 URL...

CVE-2024-24919-POC

CVE-2024-24919-POC 一个自动化CVE-2024-24919 敏感信息泄露 的简单工具 功能特点 易于使用 有帮助的注释；可测试多个域名 使用方法 root@kitploit: git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ root@kitploit: cd CVE-2024-24919-POC; chmod +x CVE-2024–24919.sh root@kitploit: ./CVE-2024–24919.sh -h 用于发现漏洞域名的Shodan Dorks 服务器："Check...

CVE-2026-80190

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

CVE-2026-80190 Apache Allura: Stored XSS via code repositories

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

CVE-2026-80190

Apache Allura versions through 1.20.0 are affected by a stored cross-site scripting (XSS) vulnerability in SVN code repositories . Git repositories are not known to be affected. The vulnerability is likely mitigated by default CSP (Content Security Policy) headers . The CVSS 3.1 score is 6.1 (Med...

EUVD-2026-70951

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

CVE-2026-47836

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

CVE-2026-47836 Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

CVE-2026-47836

Spring Cloud Config Server is susceptible to a time-of-check-time-of-use (TOCTOU) attack via the spring.cloud.config.server.svn.basedir property, which specifies where SVN repositories are cloned. The affected version ranges are 5.0.0–5.0.4, 4.3.0–4.3.4, 4.0.0–4.2.8, and 3.1.14 and earlier . The ...

EUVD-2026-66637

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

PT-2026-82231

Name of the Vulnerable Software and Affected Versions Spring Cloud Config versions 5.0.0 through 5.0.4 Spring Cloud Config versions 4.3.0 through 4.3.4 Spring Cloud Config versions 4.0.0 through 4.2.8 Spring Cloud Config versions 3.1.14 and earlier Description The base directory used by the Sprin...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview org.springframework.cloud:spring-cloud-config-server is a library that provides an HTTP resource-based API for external configuration. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through the spring.cloud.config.server.svn.basedir...

cve-2026-47836 - HIGH - Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

cve-2026-47836 - HIGH - Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN...

SUSE CVE-2026-29169

A NULL pointer dereference in moddavlock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.moddavlock is not used internally by moddav or moddavfs. The only known use-case for moddavlock was moddavsvn from Apache Subversion earlier than...