linux-malware

linux-malware Vista de actualizaciones de los últimos 7 días de este repositorio ¿Envíos? Prensa/academia https://en.wikipedia.org/wiki/Linuxmalware 17 - Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection,...

reproxy

Reproxy es un servidor/proxy inverso simple de borde HTTPs que admite varios proveedores docker, estático, archivo, catálogo consul. Uno o más proveedores suministran información sobre el servidor solicitado, la URL solicitada, la URL de destino y la URL de verificación de salud. Se distribuye co...

WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting

WordPress eCommerce Product Catalog plugin before 3.0.39 contains a cross-site scripting vulnerability. The plugin does not escape the ic-settings-search parameter before outputting it back in the page in an attribute. This can allow an attacker to steal cookie-based authentication credentials an...

bumblebee

Threat Intelligence Exposure Catalogs Maintained exposure catalogs for recent supply-chain campaigns, built from public threat-intelligence reporting with Perplexity Computer and updated via PRs as fresh campaigns are reported. Pass a catalog to a scan with --exposure-catalog . Review the entries...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in improper restrictions on path names to the catalog. This allows attackers to gain unauthorized access to local files and directories.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

The vulnerability of the iFlightDoc onboard documentation system, related to incorrect restrictions on the path name to the catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the FOQUZ platform, related to incorrect restrictions on the name of the path to the catalog, allows attackers to compromise the integrity of the protected information.

The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

VMware-CVE-2022-22954-Command-Injector

VMware-CVE-2022-22954-Command-Injector Prueba de concepto para explotar VMware CVE-2022-22954 Cómo funciona Este simple script de Python realiza una solicitud GET a la URL especificada, añadiendo /catalog-portal/ui/oauth/verify?error=&deviceUdid= y luego seguido de una versión codificada en URL d...

owasp-istg

Guía de Pruebas de Seguridad IoT de OWASP La Guía de Pruebas de Seguridad IoT de OWASP proporciona una metodología integral para pruebas de penetración en el ámbito de IoT, ofreciendo flexibilidad para adaptar innovaciones y desarrollos del mercado de IoT, al tiempo que garantiza la comparabilida...

reproducer-okio-cve-2023-3635

reproducer-okio-cve-2023-3635 Qué reproduce esto Reproductor para facebook/react-native58148: El propio packages/react-native/gradle/libs.versions.toml de React Native fija okhttp = "4.9.2" / okio = "2.9.0", y okio 2.9.0 está afectado por CVE-2023-3635 / GHSA-w33c-445m-f8w7, corregido en okio...

CVE-2026-33310

CVE-2026-33310 CVE-2026-33310 Inyección de Comandos mediante la Expansión shell en Valores por Defecto de Parámetros Resumen La sintaxis shell dentro de los valores por defecto de parámetros parece expandirse automáticamente durante el proceso de análisis del catálogo. Si un catálogo contiene un...

cve-2022-22954

CVE-2022-22954 Este paquete detecta un subconjunto de intentos y explotaciones de CVE-2022-22954, genera un aviso, e incluye la URI de explotación y los primeros 4KB de los datos que se enviaron de vuelta al atacante como respuesta. Aunque detectar este ataque es más directo mediante análisis de...

CVE-2022-22954

Detección de múltiples puntos de activación de vulnerabilidades, detección por lotes multiproceso, ejecución de comandos, escritura de archivos // 单个目标漏洞检测 python CVE-2022-22954.py -u https://x.x.x.x // 命令执行 python CVE-2022-22954.py -u https://x.x.x.x -c "id" // 写文件 python CVE-2022-22954.py -u...

CVE-2026-106510

A flaw was found in plugin-techdocs-node. An authenticated attacker with permissions to register catalog entities can achieve arbitrary code execution by submitting a crafted documentation configuration file. When the documentation is built, the malicious markdown extensions setting triggers...

Magento-CVE-2019-7139-SQLi-PoC

CVE-2019-7139 PoC: Magento SQL Injection This repository contains a proof-of-concept PoC exploit for CVE-2019-7139 PRODSECBUG-2198, an unauthenticated SQL injection vulnerability in Magento, discovered by Charles Fol of Ambionics Security. Vulnerability Details CVE ID : CVE-2019-7139 Affected...

VMware-CVE-2022-22954

Inyección de plantillas del lado del servidor Freemarker en VMware CVE-2022-22954 Workspace ONE Access POC para VMware CVE-2022-22954 ¡¡Usa esta solicitud GET de una línea!! Esto ejecutará cat /etc/passwd...

CVE-2026-105816

A flaw was found in Vault. This vulnerability allows a privileged operator to achieve arbitrary code execution on the underlying host system. Vault does not consistently verify that stored plugin catalog entries reference binaries located within the designated plugin directory. In configurations...

CVE-2022-22954

CVE-2022-22954 Attention Please use this at your own risk. This repo is meant only for educational purposes and we are strictly against all illegal intentions and we would not be responsible of any illegal activities associated with this repo. Be ethical! Example python3 CVE-2022-22954.py -t...

Security Bulletin: Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...

CVE-2026-105816

Vault and Vault Enterprise are vulnerable to arbitrary code execution on the host because the software does not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. If Vault utilizes Shamir seals and an external plugin directory , a pri...