CVE-2017-8295-WordPress-4.7.4---Unauthorized-Password-Reset

CVE-2017-8295-WordPress-4.7.4---不正なパスワードリセット 脆弱性に関する情報 Wordpressには、脆弱性を含むパスワードリセット機能があり、 場合によっては、攻撃者がパスワードリセットリンクを入手できる可能性があり、 事前認証なしで。 このような攻撃により、攻撃者は不正アクセスを取得する可能性があり、 被害者のWordPressアカウント。...

CVE-2026-47256

A flaw was found in the OpenTelemetry Sentry exporter. A remote attacker can exploit a path traversal vulnerability by manipulating the service.name attribute. This allows the attacker to craft malicious Sentry API URLs, potentially gaining unauthorized access to sensitive administrative or...

CVE-2026-57578 DotVVM: Missing authorization in AuthorizeActionFilter

DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, AuthorizeActionFilter performs no authorization because its explicit ICommandActionFilter.OnCommandExecutingAsync, IViewModelActionFilter.OnViewModelCreatedAsync, and...

CVE-2020-9496

CVE-2020-9496 ApacheOfBiz 17.12.01 - 인증되지 않은 원격 코드 실행 XML-RPC 요청은 안전하지 않은 역직렬화에 취약합니다. 단계 1단계: pip3 install -r requeriments.txt 2단계: nc -nlvp 공격자 컴퓨터 3단계: python3 shell.py -i -p -li -lp 4단계: nc 리스너에서 셸을 확인할 수 있습니다...

golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority CA. A remote attacker could potentially exploit this by presenting a revoked key, leading t...

evil_minio

Evil MinIO CVE-2023-28434 Doc: CVE-2023-28432 minio 接口未授权访问到无损RCE和全局后门.pdf EXP for CVE-2023-28434 MinIO unauthorized to RCE Changed from https://github.com/minio/minio/tree/8b4d0255b7247b1a06d923e69ed5ba01434e70b8 Changed what? add cmd/x.go, used for exec system command root@kitploit: package cmd...

CVE-2021-34045

Información Título del exploit：Novel-plus-install-v3.5.3-Druid Acceso no autorizado Fecha del exploit：01.06.2021 Autor del exploit：Al1ex@Heptagram Página del proveedor：https://github.com/201206030/novel-plus Versión afectada：novel-plus-install-v3.5.3 Descripción：El sistema Novell plus incluye el...

CVE-2011-2523-poc

CVE-2011-2523-poc Este es un script de python3 para explotar el CVE-2011-2523, la Ejecución de Comandos por Backdoor en VSFTPD 2.3.4, usando los módulos socket y telnetlib. Requisitos root@kitploit: sudo python3 -m pip install pwntools Instalación root@kitploit: git clone...

CVE-2017-14263

HoneywellNVRvul CVE-2017-14263 xfuturesec Co., Ltd Primero, obtén el SessionID para un usuario invitado. Podemos encontrar el SessionID en cualquier petición http. Por ejemplo: POST https://192.168.1.104/RPC2 HTTP/1.1 Accept: text/javascript, text/html, application/xml, text/xml X-Requested-With:...

CVE-2024-29269-EXPLOIT

CVE-2024-29269 - Ejecución Remota de Código RCE en Telesquare TLR-2005KSH Se ha identificado un problema en Telesquare TLR-2005Ksh versiones 1.0.0 y 1.1.4 que puede permitir a atacantes ejecutar comandos arbitrarios del sistema explotando el parámetro Cmd. Esta vulnerabilidad podría permitir que...

CVE-2023-29923

CVE-2023-29923 1. Prepare un url.txt, por ejemplo: 2. Ejecute python CVE-2023-29923.py -f url.txt 3. Los activos detectados con vulnerabilidad de falta de autorización se guardarán en el archivo result.txt en el mismo directorio...

Astra Linux – Vulnerability in edk2

EDK2’s Network Package is vulnerable to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of availability...

CVE-2017-7921

CVE-2017-7921 poc de detección de acceso no autorizado de Hikvision y detección de contraseñas Uso: root@kitploit: Usage: -a 加载Poc模块 -b 加载密码爆破模块 -e 加载Exp模块 -f string 文件名称 默认为空 -i string 输入ip地址 eg:192.0.0.1-192.0.0.255 -p string 密码 default:12345 default "12345" -s string 协议 eg:http default "http" ...

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - Hikvision Camera Series Improper Authentication Vulnerability A security flaw identified as CVE-2017-7921, which affects various models of Hikvision cameras. The vulnerability was discovered in the DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Seri...

NextSploit

🔍 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter ⚠️ NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927 , a security flaw in Next.js. The tool first identifies if a target website is running Next.js and determines whether its version falls within the vulnerable...

EUVD-2026-77355

Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access data they are not authorized to read, resulting in unauthorized disclosure of information. This issue affects Apache Doris: from 2.0.0 through 2.1., from 3.0.0 through 3.0., fr...

brokeCLAUDIA

🔓 brokeCLAUDIA - CVE-2025-41090 CVE-2025-41090 - Broken access control vulnerability in microCLAUDIA 📑 Table of Contents What is microCLAUDIA? Vulnerability CVE-2025-41090 📂 Public Disclosure CWE Broken Access Control Remediation Presentation Exploit 📂 Overview Requirements Installation Usage Not...

CVE-2025-64516-POC

CVE-2025-64516 POC para acceso no autorizado a documentos. CVE-2025-64516 Impacto Un usuario no autenticado puede acceder a documentos de GLPI adjuntos a cualquier elemento ticket, activo, .... Versiones afectadas Versiones = 10.0.0, = 11.0.0 Parches Actualizar a 10.0.21 Actualizar a 11.0.3 Uso...

KeyCloak - Information Exposure

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients like client secret without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this...

Node.js <8.6.0 - Directory Traversal

Node.js before 8.6.0 allows remote attackers to access unintended files because a change to ".." handling is incompatible with the pathname validation used by unspecified community modules. id: CVE-2017-14849 info: name: Node.js 8.6.0 - Directory Traversal author: RandomRobbie severity: high...