CVE-2019-3403

CVE-2019-3403 Volevo poter sfruttare facilmente CVE-2019-3403 per raccogliere tutti gli utenti da un'applicazione JIRA, quindi ho messo insieme questo script. Non è il codice più pulito in assoluto e non gestisce richieste che restituiscono oltre 1000 utenti li troncherà semplicemente ai primi...

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Wir fordern die sichere Rückkehr aller Bürger, die von der terroristischen Gruppe Hamas als Geiseln genommen wurden. Wir werden nicht ruhen, bis alle Geiseln freigelassen und sicher nach Hause zurückgekehrt sind. Sie können helfen, sie nach Hause zu...

The vulnerability of the iFlightDoc onboard documentation system, related to incorrect restrictions on the path name to the catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

CVE-2025-0108-PoC

CVE-2025-0108 Prova di concetto PoC Questo repository contiene una Prova di concetto PoC per la vulnerabilità CVE-2025-0108 , che è un problema di bypass dell'autenticazione nel software PAN-OS di Palo Alto Networks. Gli script forniti qui testano la vulnerabilità inviando una richiesta HTTP...

Apisix_Crack

ApisixCrack Panoramica Strumento di rilevamento e sfruttamento delle vulnerabilità della serie Apisix, incluse vulnerabilità di accesso non autorizzato CVE-2021-45232 e vulnerabilità di chiave predefinita CVE-2020-13945, supporta rilevamento e sfruttamento batch. Utilizzo Rilevamento batch:...

CVE-2025-31161

CrushFTP CVE-2025-31161 Strumento di Exploit 🔓 Strumento avanzato di rilevamento e sfruttamento per la vulnerabilità CVE-2025-31161 nelle versioni vulnerabili di CrushFTP. CVE-2025-31161 è una vulnerabilità critica di bypass dell'autenticazione nell'interfaccia web di CrushFTP. Manipolando l'head...

CVE-2020-9496

CVE-2020-9496 ApacheOfBiz 17.12.01 - Esecuzione remota di codice non autorizzata Le richieste XML-RPC sono vulnerabili a deserializzazione non sicura. Passaggi Passaggio 1: pip3 install -r requeriments.txt Passaggio 2: nc -nlvp computer attaccante Passaggio 3: python3 shell.py -i -p -li -lp...

CentralizedFirewall

Progetto API Firewall Manager Installazione Segui questi passaggi per configurare ed eseguire il progetto API: 1. Clona il Repository root@kitploit: git clone https://github.com/adriyansyah-mf/CentralizedFirewall cd CentralizedFirewall 2. Modifica il file .env Aggiorna le variabili d'ambiente in...

CVE-2023-32243

CVE-2023-32243 Essential Addons für Elementor - Unautorisierte Account-Übernahme. PoC ist jetzt veröffentlicht. Es wurde nur zu Bildungs-/Forschungszwecken erstellt! Nutzung auf eigene Gefahr!...

KeyCloak - Information Exposure

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients like client secret without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this...

Netgear DGN2200 - Improper Authentication

A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding "?x=1.gif" to the requested url, it will be recognized as passing the authentication. id: CVE-2024-57046 info: name: Netgear DGN2200...

Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter. id: CVE-2023-30019 info: name: Imgproxy = 3.14.0 - Server-side request forgery SSRF author: DhiyaneshDK severity: medium description: | imgproxy =3.14.0 is vulnerable to...

Spring Framework - Path Traversal

Spring Framework MVC applications deployed as WAR or with embedded Servlet containers that do not reject suspicious URI sequences and serve static resources with Spring resource handling contain a path traversal vulnerability, letting attackers access unauthorized files, exploit requires...

AntD Admin - Sensitive Information Disclosure

AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...

TITool PrintMonitor - Blind SQL Injection

The username parameter of the TITool PrintMonitor solution during the login request is vulnerable to and/or time-based blind SQLi. id: CVE-2018-7282 info: name: TITool PrintMonitor - Blind SQL Injection author: theamanrawat severity: critical description: | The username parameter of the TITool...

Joomla! Component Highslide 1.5 - Local File Inclusion

A directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1314 info: name: Joomla! Component Highslide 1.5 - Local File Inclusion...

Joomla! Component Online Market 2.x - Local File Inclusion

A directory traversal vulnerability in the Online Market commarket component 2.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1722 info: name: Joomla! Component Onlin...

Chyrp 2.x - Local File Inclusion

A directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, a different vulnerability than CVE-2011-2744. id: CVE-2011-2780 info: name: Chyrp 2.x - Local File Inclusion author: daffainf...

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

A directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1957 info: name: Joomla! Component Love Factory 1.3.4 - Local File Inclusion...

Eaton Intelligent Power Manager 1.6 - Directory Traversal

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. id: CVE-2018-12031 info: name: Eaton Intelligent Power Manager 1.6 - Directory Traversal author: daffainfo...