Apache httpd <=2.4.29 - Arbitrary File Upload

Apache httpd 2.4.0 to 2.4.29 is susceptible to arbitrary file upload vulnerabilities via the expression specified in , which could match '$' to a newline character in a malicious filename rather than matching only the end of the filename. This could be exploited in environments where uploads of...

Joomla! Component BeeHeard 1.0 - Local File Inclusion

A directory traversal vulnerability in the BeeHeard combeeheard and BeeHeard Lite combeeheardlite component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1952 info: name: Joomla! Component BeeHeard 1.0 - Loc...

MooSocial 3.1.8 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exisits in the dataredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. id: CVE-2023-43325 info: name: MooSocial 3.1.8 - Cross-Sit...

Garage Management System 1.0 - SQL Injection

Garage Management System 1.0 contains a SQL injection vulnerability in /login.php via manipulation of the argument username with input [email protected]' AND SELECT 6427 FROM SELECTSLEEP5LwLu AND 'hsvT'='hsvT. An attacker can possibly obtain sensitive information from a database, modify data, and/or execut...

cve-2020-1066

cve-2020-1066 Analyse https://blog.csdn.net/qq37353105/article/details/114481214...

super

SUPER Android Analyzer Sicher, Einheitlich, Leistungsstark und Erweiterbar – Rust Android Analyzer SUPER ist ein Kommandozeilentool, das unter Windows, macOS X und Linux verwendet werden kann und .apk -Dateien auf Schwachstellen untersucht. Dazu entpackt es APKs und wendet eine Reihe von Regeln a...

security-code-scan

Rilevatore di pattern di vulnerabilità per C e VB.NET - Website Download Le versioni ufficiali sono disponibili come pacchetto nuget, estensione Visual Studio e eseguibile autonomo. Compilazione root@kitploit: git clone https://github.com/security-code-scan/security-code-scan.git cd...

CVE-2026-4782

CVE-2026-4782...

CVE-2026-12415-or-CVE-2026-12416.py

CVE-2026-12415-or-CVE-2026-12416.py CVE-2026-12415-or-CVE-2026-12416.py...

iac-scan-runner

IaC Scan Runner Servizio che scansiona la tua Infrastructure as Code alla ricerca di vulnerabilità comuni...

CVE-2017-7092-PoC

CVE-2017-7092-PoC...

CVE-2022-0847

CVE-2022-0847 Semplice riproduzione di CVE-2022-0847 Indirizzo originale dell'articolo di divulgazione: https://dirtypipe.cm4all.com/ Ambiente di riproduzione root@kitploit: Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dipendenze root@kitploit: gcc Passaggi...

mole

Mole Un framework per identificare e sfruttare vulnerabilità out-of-band OOB. Installazione e Configurazione Installazione di Mole Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Imposta...

CVE-2020-9548

CVE-2020-9548: Vulnerabilità di esecuzione di codice remoto in FasterXML/jackson-databind...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra...

CVE-2022-31793

CVE-2022-31793 -u specifica IP -l specifica file IP -v modalità verifica -f specifica file da leggere python poc.py -u ip -v python poc.py -l url.txt -v python poc.py -u ip -f /etc/hosts python poc.py -l url.txt -f /etc/hosts...

CVE-2015-5531

CVE-2015-5531...

CVE-2014-3120

CVE-2014-3120...

poc_CVE-2025-1716

pocCVE-2025-1716...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability root@kitploit: - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE -...