CVE-2023-50564

CVE-2023-50564 Только для образовательных целей. Этот скрипт использует CVE-2023-50564 для загрузки reverse-php shell на целевой сервер. Вы можете использовать такую оболочку, как эта. Просто запакуйте php-файл в zip и передайте его этому скрипту. Пример root@kitploit: python3 cve-2023-50564.py -...

CVE-2022-25845-In-Spring

CVE-2022-25845-In-Spring !IMPORTANT 学習・交流のみを目的とし、不正な用途に使用しないでください pythonによるエクスプロイト 役に立ったら、スターをお願いします 参考： https://github.com/luelueking/CVE-2022-25845-In-Spring 使い方 必要に応じてパラメータ受け渡しのロジックを変更してください。ここではデフォルトでPOSTリクエストボディによるパラメータ受け渡しになっています。 root@kitploit: git clone...

CVE-2024-36401-PoC

CVE-2024-36401-PoC 이 저장소는 CVE-2024-36401에 대한 개념 증명PoC 스크립트를 포함합니다. 이 취약점을 악용하면 대상 서버에서 원격 코드 실행이 가능합니다. 기능 Perl을 사용하여 리버스 셸 리스너 할당 Base64를 사용하여 명령어 인코딩 취약점을 악용하기 위해 대상 서버에 요청 전송 시그널 처리를 통해 인터럽트를 원활하게 처리 사전 요구사항 Python 3.x requests 라이브러리 설치 1. 이 저장소를 클론합니다: root@kitploit: git clone...

EUVD-2026-53681

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node...

CVE-2026-67870

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node...

CVE-2026-67870

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node...

CVE-1999-0346

CGI PHP mlog script allows an attacker to read any file on the target server...

MCP Server Tools Detected

This is an informational notice that the scanner was able to detect the exposition of tools on the target Model Context Protocol MCP server. No source data...

SUSE SLES15: postgresql14 / postgresql14-contrib / postgresql14-devel / etc (SUSE-SU-2025:03019-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03019-1 advisory. Upgrade to 14.19: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child...

SUSE-SU-2025:03031-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Upgrade to 14.19: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table bsc1248120. - CVE-2025-8714: untrusted data inclusion in pgdump lets superuser of origin server execute arbitrary code ...

SUSE-SU-2025:03020-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Upgrade to 14.19: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table bsc1248120. - CVE-2025-8714: untrusted data inclusion in pgdump lets superuser of origin server execute arbitrary code ...

SUSE SLES12: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (SUSE-SU-2025:03004-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03004-1 advisory. Upgrade to 15.14: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table bsc1248120. -...

SUSE-SU-2025:03003-1 Security update for postgresql13

This update for postgresql13 fixes the following issues: Upgrade to 13.22: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table bsc1248120. - CVE-2025-8714: untrusted data inclusion in pgdump lets superuser of origin server execute arbitrary code ...

CVE-2025-55383

Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server...

SUSE-SU-2025:02842-1 Security update for postgresql13

This update for postgresql13 fixes the following issues: Upgrade to 13.22: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table bsc1248120. - CVE-2025-8714: untrusted data inclusion in pgdump lets superuser of origin server execute arbitrary code ...

MCP Server Unauthenticated Access

This is an informational notice that the scanner was able to detect a Model Context Protocol MCP server available without authentication on the target server. When available, the plugin provides the list of tools, prompts and resources in the attachments. No source data...

MCP Manifest Detected

This is an informational notice that the scanner was able to detect an MCP Model Context Procol manifest on the target server. No source data...

MCP Inspector Detected

This is an informational notice that the scanner was able to detect an MCP Model Context Procol Inspector instance on the target server. No source data...

MCP Server Detected

This is an informational notice that the scanner was able to detect a Model Context Protocol MCP HTTP server using SSE or Streamable-HTTP transport mode on the target server. No source data...

Exposed Dangerous Method or Function

Overview Affected versions of this package are vulnerable to Exposed Dangerous Method or Function through the EncryptionTool endpoint. An attacker can encrypt arbitrary files on the target server with a key of their choosing, making it exceedingly difficult for the target to recover the keys need...