CVE-2026-108878

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw in the AiragAppController queryById handler. This vulnerability allows low-privileged authenticated users to access the configurations of other users' AI applications. Specifically, attackers can enumerate application...

EUVD-2026-97052

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration. Attackers can enumerate application ids via the unguarded /airag/app/listDict endpoint and...

Minio-Security-Vulnerability-Checker

Minio Security Vulnerability Checker Description This program is a tool created to check the security of Minio systems related to vulnerability CVE-2022-35919. This tool is designed to help users detect potential vulnerabilities in their Minio configuration. Usage 1. Make sure you have Python...

CVE-2022-24716-2

CVE-2022-24716 Icinga Web 2 is an open source monitoring web interface, framework and command line interface. Unauthenticated users can leak the contents of user-accessible local system files from the web server, including icingaweb2 configuration files with database credentials. Installation Usa...

CVE-2023-23752

CVE-2023-23752 About This exploit is Authentication Bypass leaking username password administrator and also leaking mysql config username , password , host and database Vulnerable Version only 4.00 = 4.28 Usage usage: exploit.sh -h -u URL -t TARGETS CVE-2023-23752 - Authentication Bypass...

iptables-essentials

Iptables Essentials: Reglas y comandos comunes de firewall ☑️ POR HACER Añadir ejemplos útiles de configuración de Iptables Añadir configuración útil de Kernel Settings sysctl Añadir enlaces a recursos externos útiles Añadir ejemplos de configuración avanzada, comandos, reglas Tabla de Contenidos...

CVE-2022-33891

CVE-2022-33891 PoC PoC for CVE-2022-33891, with ability to set custom payloads. Not vulnerable by default -- spark.acls.enable need to be TRUE. Intended Use Usage of this script is limited to personnel who are authorised to run the payload on the target hosts for vulnerability patching purposes...

EUVD-2026-97014

Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...

rayder

Rayder Una herramienta ligera para orquestar y organizar tus flujos de trabajo en línea de comandos Acerca de • Instalación • Uso • Configuración del flujo de trabajo • Ejecución paralela • Flujos de trabajo Acerca de Rayder es una herramienta de línea de comandos diseñada para simplificar la...

CVE-2012-1823

PHP CGI Argument Injection CVE-2012-1823 Description sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by...

EUVD-2026-96925

LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset management API to read stored provider API key...

netscaler-ctx697096-checker

NetScaler checker for CTX697096, CTX697174 and CTX697191 Read-only precondition and exposure checker for the Citrix NetScaler ADC / NetScaler Gateway security bulletin CTX697096 , covering CVE-2026-88771 through CVE-2026-88778 , and for CTX697174 , covering CVE-2026-88779 the SAML crash attack, a...

SXDork

SXDork v1.0 SXDork is a powerful tool that utilizes the technique of google dorking to search for specific information on the internet. Google dorking is a method of using advanced search operators and keywords to uncover sensitive information that is publicly available on the internet. SXDork...

CVE-2023-33246

CVE-2023-33246 - RocketMQ Remote Code Execution CVE-2023-33246 - Apache RocketMQ config Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is...

IngressNightmare-RCE-POC

⚠️ Critical RCE in Ingress-NGINX via Configuration Injection CVE-2025-1974 and more This repository contains a proof-of-concept PoC exploit for CVE-2025-1974 , a Critical CVSS 9.8 vulnerability in the Ingress-NGINX controller for Kubernetes. This flaw allows unauthenticated remote code execution...

CVE-2018-18441-exploit

CVE-2018-18441-exploit Las cámaras Wi-Fi de la serie DCS de D-Link exponen información sensible sobre la configuración del dispositivo. Los dispositivos afectados incluyen muchas de la serie DCS, como: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L,...

airflowscan

airflowscan Lista de verificación y herramientas para aumentar la seguridad de Apache Airflow. AVISO Este proyecto NO ESTÁ AFILIADO con la Apache Foundation ni con el proyecto Airflow, y no cuenta con su respaldo. Contenido El propósito de este proyecto es proporcionar herramientas para aumentar ...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the...

mole

Mole Un framework para identificar y explotar vulnerabilidades fuera de banda OOB. Instalación y Configuración Instalación de Mole Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Establec...

CVE-2023-29007_win-version

CVE-2023-29007win-version original PoC https://github.com/ethiack/CVE-2023-29007 PoC repository for CVE-2023-29007 More information available at: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007...