CVE-2024-24919

CVE-2024-24919 检查器 一个简单的 bash 脚本，用于检查 CVE-2024-24919 漏洞。 安装 克隆仓库： root@kitploit: git clone https://github.com/satriarizka/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919-scan.sh 用法 ./CVE-2024-24919-scan.sh -l ips.txt HUNTER 查询 root@kitploit: product.name="Check Point SSL Network...

svn-extractor

Svn-Extractor 很多时候，Web 应用渗透测试人员会遇到 .svn 文件夹。对于那些不了解的人来说，.svn 文件夹是 SVN 版本控制系统用于执行其操作的。对于黑盒渗透测试，该文件夹包含大量信息。其中一些关键的帮助领域包括： 1. 发现隐藏的文件和文件夹名称 2. 访问文件的源代码。 3. 即使 htaccess 中设置了限制，也能下载文件。 如何实现这一点。 1. 发现隐藏的文件和文件夹名称 根据所使用的 SVN 版本，有两种方法可以实现这一点。 对于 1.6 版本，我们有 .svn/wc.db，其中包含类似的数据，但采用 sqlite3 格式。 这些文件可以通过 URL...

CVE-2024-24919

CVE-2024-24919 漏洞利用工具 概述 本仓库包含 CVE-2024-24919 的概念验证（PoC）漏洞利用代码，这是 Check Point SVN 中发现的一个严重漏洞。该漏洞允许读取系统文件。 CVE ID : CVE-2024-24919 严重性 : 严重 目录 漏洞详情 利用工具详情 使用方法 1. 克隆仓库： root@kitploit: git clone https://github.com/un9nplayer/CVE-2024-24919.git cd CVE-2024-24919 2. 目标/IP 必须存在于 domain-IP.txt 中...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

CVE-mitre

CVE-Mitre Common Vulnerability Exposure Scarica un singolo CVE La variabile è solo un esempio ; puoi creare il tuo script SVN per scaricare una singola cartella = CVE = Saluti @nu11secur1ty $CVE = CVE-2020-13935 root@kitploit: svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE...

Kali-Linux

Взломы и настройка Kali-Linux текущий релиз Еженедельные образы Kali: ссылка Скачать отдельный inode root@kitploit: apt install subversion -y svn checkout https://github.com/nu11secur1ty/Kali-Linux/trunk/$inode Введение: Подходит ли вам Kali Linux? Как разработчики дистрибутива, вы могли бы...

CVE-2026-47836

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

CVE-2026-47836 Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

CVE-2026-47836

Spring Cloud Config Server is susceptible to a time-of-check-time-of-use (TOCTOU) attack via the spring.cloud.config.server.svn.basedir property, which specifies where SVN repositories are cloned. The affected version ranges are 5.0.0–5.0.4, 4.3.0–4.3.4, 4.0.0–4.2.8, and 3.1.14 and earlier . The ...

EUVD-2026-66637

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

PT-2026-82231

Name of the Vulnerable Software and Affected Versions Spring Cloud Config versions 5.0.0 through 5.0.4 Spring Cloud Config versions 4.3.0 through 4.3.4 Spring Cloud Config versions 4.0.0 through 4.2.8 Spring Cloud Config versions 3.1.14 and earlier Description The base directory used by the Sprin...

CVE-2024-24919-POC

CVE-2024-24919-POC Un semplice strumento per automatizzare CVE-2024-24919 Esposizione di Informazioni Sensibili Caratteristiche Facile da usare. Commenti utili; può testare più domini Uso root@kitploit: git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ root@kitploit: cd...

cve-2026-47836 - HIGH - Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

cve-2026-47836 - HIGH - Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN...

SUSE CVE-2026-29169

A NULL pointer dereference in moddavlock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.moddavlock is not used internally by moddav or moddavfs. The only known use-case for moddavlock was moddavsvn from Apache Subversion earlier than...

subversion: Fix of CVE-2017-9800

CVE-2017-9800: fix arbitrary code execution via crafted svn+ssh:// URLs by validating the decoded hostinfo and adding an end-of-options guard to the default svn+ssh and example rsh tunnel commands...

CLSA-2026-1777038917 subversion: Fix of CVE-2017-9800

CVE-2017-9800: fix arbitrary code execution via crafted svn+ssh:// URLs by validating the decoded hostinfo and adding an end-of-options guard to the default svn+ssh and example rsh tunnel commands...

CLSA-2026-1777040144 subversion: Fix of CVE-2017-9800

CVE-2017-9800: fix arbitrary code execution via crafted svn+ssh:// URLs by validating the decoded hostinfo and adding an end-of-options guard to the default svn+ssh and example rsh tunnel commands...

CVE-2026-22696 dcap-qvl has Missing Verification for QE Identity

dcap-qvl implements the quote verification logic for DCAP Data Center Attestation Primitives. A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity,...

PT-2026-4820

Name of the Vulnerable Software and Affected Versions dcap-qvl versions prior to 0.3.9 Description The dcap-qvl library contains a flaw in its quote verification logic. The library retrieves QE Identity collateral from the PCCS, but fails to verify the QE Identity signature against its certificat...