15156 matches found
CVE-2025-24893-
CVE-2025-24893- CVE-2025-24893 | Sicherheitslücke zur Remote-Codeausführung auf der XWiki-Plattform Proof of Concept...
CVE-2019-12744
CVE-2019-12744 Informationen Exploit-Titel: Remote-Befehlsausführung durch nicht validierten Datei-Upload in SeedDMS-Versionen 5.1.11 CVE: CVE-2019-12744 Hersteller-Homepage: https://www.seeddms.org/index.php?id=2 Exploit-Autor: NobodyAtall Getestete Version: Seeddms 5.1.10, 5.0.11 Getestetes...
CVE-2020-7471
CVE-2020-7471 Iniezione SQL tramite input del delimitatore StringAgg Configurazione: Esegui ./setup.sh per la configurazione iniziale Apri l'immagine docker per avviare il database: docker exec -it containerid /bin/bash Ed esegui i seguenti comandi: root@kitploit: python manage.py makemigrations...
CVE-2025-55182-bypass
CVE-2025-55182-bypass CVE-2025-55182-bypass-waf...
CVE-2022-46169
CVE-2022-46169 Einrichtung root@kitploit: git clone https://github.com/miko550/CVE-2022-46169.git cd CVE-2022-46169 Verwendung root@kitploit: usage: CVE-2022-46169.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg:...
CVE-2022-27925
CVE-2022-27925 Configurazione root@kitploit: git clone https://github.com/miko550/CVE-2022-27925.git cd CVE-2022-27925 Utilizzo root@kitploit: usage: CVE-2022-2925.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg:...
CVE-2021-33558.
CVE : CVE-2021-33558. Codice exploit di CVE-2021-33558 Sommario In Boa/0.94.13 ci sono varie configurazioni errate. Espone varie informazioni sensibili. Prova di concetto https://target.com/backup.html https://target.com/preview.html https://target.com/js/log.js https://target.com/log.html...
CVE-2022-23861
CVE-2022-23861: Múltiplos Cross-Site Scripting Armazenados no YSoft SafeQ Vários campos na aplicação web YSoft SafeQ podem ser usados para injetar entradas maliciosas que, devido à falta de sanitização da saída, resultam na execução de código JS arbitrário. Esses campos podem ser aproveitados par...
CVE-2026-11747
Seres Software syWEB is affected by a Reflected XSS vulnerability caused by improper neutralization of user-supplied input during web page generation. The flaw affects versions through 27082026 . An attacker who lures a user into a crafted link can execute script in the victim's context, with a c...
CVE-2026-11747 Reflected XSS in Seres Software's syWEB
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...
CVE-2026-5218
Softtr Informatics Technology Trading Limited Company E-Commerce Pack (before 5.03.01.49 ) is affected by an improper neutralization of script-related HTML tags (basic XSS), allowing Cross-Site Scripting in a web page. The vulnerability is rated CVSS 4.3 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S...
CVE-2026-5218 HTML Injection in Softtr's E-Commerce Pack
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...
CVE-2018-16763_fuel_cms_exploit
⚠️ Aviso Legal Este projeto é estritamente para fins educacionais e de pesquisa ética em segurança. Todas as atividades foram realizadas em um ambiente controlado de laboratório / CTF. Não utilize as técnicas descritas aqui em qualquer sistema sem a devida autorização. 🎯 Objetivos Identificar...
log4shellwithlog4j2_13_3
log4shellwithlog4j2133 Applicazione web Springboot che accetta un parametro get di nome e registra il suo valore in log4j2. Vulnerabile a CVE-2021-44228. compilare l'applicazione Springboot vulnerabile con mvn clean install eseguire l'applicazione Springboot con l'agente k2 con java --add-modules...
log4j-scanner
log4j-scanner Ein Log4j-Schwachstellenscanner ist ein automatisierter Scanner, um Log4j-Schwachstellen CVE-2021-44228 und CVE-2021-45046 in Webanwendungen zu finden. Funktionen 1- Er unterstützt mehrere URLs für den Scan 2- Er verfügt über Payloads, die einige WAF umgehen können 3- Er unterstützt...
CVE-2025-3248
Documentazione dello strumento di exploit per CVE-2025-3248 Introduzione Questo strumento viene utilizzato per sfruttare la vulnerabilità CVE-2025-3248 una vulnerabilità di injection di codice Python, costruendo un payload malevolo per ottenere l'esecuzione remota di comandi RCE sul server target...
log4j2-web-vulnerable
log4j2-web-vulnerable Una semplice web app vulnerabile per il test dell'exploit RCE di log4j2 CVE-2021-44228. Avvio Esegui java -jar target/gs-handling-form-submission-0.1.0.jar. Accedi a http://127.0.0.1/greeting Se vuoi compilarla da solo, usa una versione di JDK 8u20...
CVE-2021-45416
Docker RosarioSIS Installazione Requisiti minimi: Docker e Git funzionanti. Puoi scaricare l'immagine da DockerHub oppure: 1. docker on root@kitploit: $ git clone https://github.com/dnr6419/CVE-2021-45416.git $ cd CVE-2021-45416 $ docker-compose up -d 2. Visita l'URL e installa il database...