CVE-2023-42793

Acerca de CVE-2023-42793 Primero necesitarás obtener el token utilizando un exploit diferente. Sin embargo, el siguiente exploit te permitirá obtener RCE en el servidor Linux, ya que codifica el payload en URL y lo envía al servidor. Cómo usar root@kitploit: python3 ./main -t TEAMCITYTOKEN -u...

CVE-2023-42793

Acerca de CVE-2023-42793 Primero necesitarás obtener el token mediante el uso de otro exploit. Sin embargo, el siguiente exploit te permitirá obtener RCE en el servidor Linux, ya que codifica la carga útil en la URL y la envía al servidor. Cómo usar root@kitploit: python3 ./main -t TEAMCITYTOKEN ...

CVE-2026-73628

Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...

pyjwt 安全漏洞

PyJWT is a Python library developed by José Padilla of the United States. It allows for the encoding and decoding of JSON Web Tokens JWTs. There were security vulnerabilities in PyJWT versions 2.8.0 to 2.12.1. These vulnerabilities stemmed from the fact that when verifying separate JWS tokens tha...

CVE-2024-47769 IDURAR has a Path Traversal (unauthenticated user can read sensitive data)

IDURAR is open source ERP CRM accounting invoicing software. The vulnerability exists in the corePublicRouter.js file. Using the reference usage here, it is identified that the public endpoint is accessible to an unauthenticated user. The user's input is directly appended to the join statement...