uefi-firmware-parser

UEFIファームウェアパーサー .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser UEFIファームウェアパーサーは、UEFIファームウェアボリュームの解析、抽出、再作成を行うためのシンプルなモジュールとスクリプト群です。 BIOS、OptionROM、Intel ME、その他のフォーマット用の解析モジュールも含まれています。...

CVE-2024-43044-jenkins

简介 这是一个针对 CVE-2024-43044 的利用工具，该漏洞允许代理从控制器读取任意文件。 该利用工具将利用该漏洞读取文件，伪造一个管理员账户的“记住我”Cookie，从而获取对 Jenkins 脚本引擎的访问权限。 查看完整的分析文章：https://blog.convisoappsec.com/en/analysis-of-cve-2024-43044/ 构建利用工具 mvn package 运行利用工具 利用工具用法： java -jar exploit.jar modesecret java -jar exploit.jar modeattach java -jar...

PoC-for-ME-SAML-Vulnerability

PoC-for-ME-SAML-Vulnerability CVE-2022-47966 的 PoC 进行测试时，请将其作为 POST 请求发送至 /SamlResponseServlet。将其进行 Base64 编码，并作为 SAMLResponse 参数的值发送。 格式 POST /SamlResponseServlet HTTP/1.0 Host: SAMLResponse=&RelayState=...

CVE-2021-21973-Automateme

CVE-2021-21973-Automateme automate me!...

Bulk Me Now! Plugin <= 2.0 - Cross-Site Scripting

Bulk Me Now! WordPress plugin = 2.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

CVE-2019-13272

CVE-2019-13272 - Pkexec ローカル権限昇格 ⚠️ 教育および許可されたセキュリティ研究目的のみ 元のエクスプロイト作成者 元のPoC作成者 BCOLES に深く感謝します 説明 Linux カーネル 5.1.17 より前のバージョンでは、kernel/ptrace.c 内の ptracelink が、ptrace 関係を作成しようとするプロセスの資格情報の記録を誤って処理します。これにより、ローカルユーザーが親子プロセス関係の特定のシナリオを活用して root アクセスを取得できる可能性があります。ここでは、親が特権をドロップして execve...

osinteye

This will not receive any further updates. Instagram is deprecated, so I decided to just archive it. Username enumeration & reconnaisance suite Supported sites PyPI Github TestPypi About.me Instagram DockerHub Installation Clone project: $ git clone https://github.com/rly0nheart/osinteye.git $ cd...

hide-me

Mac 和主机名随机更改器 hide-me 每次进行网络渗透测试时，我都需要执行一些步骤来确保自己隐藏身份：关闭接口、更改 MAC 地址、更改主机名、重新启用接口、重启网络管理器服务，并在测试完成后将 MAC 地址和主机名改回原来的。这很耗时，有时我甚至会忘记其中的某个步骤。后来我想到了一个主意——写一个脚本来自动完成所有操作。基本上，这个脚本会将 MAC 地址随机更改为一个随机值，并从指定文件中随机挑选一个主机名。 作者：Andrei Zgirvaci 免责声明：此工具仅用于测试目的，并且只能在获得明确同意的情况下使用。请勿将其用于非法目的，就是这样。 贡献：欢迎贡献代码！...

ODH-BricksBuilder-CVE-2024-25600-THM

ODH-BricksBuilder-CVE-2024-25600-THM 概述 此仓库托管了一个基于 Python 的漏洞扫描器，由 Oblivion Development & Hosting OD&H 开发，用于检测 WordPress 的 Bricks Builder 插件中的 CVE-2024-25600 漏洞。此工具主要设计用于 Try Hack Me THM 练习，提供受控环境用于网络安全教育和技能培养。 该扫描器利用异步网络操作实现高效扫描，并提供交互式 shell 用于深入的漏洞分析和命令执行。 仓库链接：...

Tell-Me-Root

Tell Me Root Batch Detection Tool Based on cve-2026-24061 Telnet Remote Authentication Bypass Vulnerability This is a super super super lightweight tool written in Python! Hands-free, batch scanning, just sit back and wait for the shell to be fed to you! Even a paramecium can easily dig out...

CVE-2026-105639

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which retur...

EUVD-2026-92595

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which retur...

CVE-2026-105639 Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which retur...

CVE-2026-105639 Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which retur...

CVE-2026-105639

The open-source project management tool Plane is vulnerable to a pre-auth workspace invitation hijack prior to version 1.4.0 . The flaw exists because the signup flow creates a logged-in user for any submitted email without an out-of-band ownership check, while the User.email field is unique. An ...

CVE-2026-105639 Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which retur...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 著者: Moshe Kol, Shlomi Oberman このリポジトリには、Track TCP/IP スタック（Ripple20 脆弱性スイートの一部）における重大なヒープベースのバッファオーバーフロー脆弱性 CVE-2020-11896 の PoC エクスプロイトが含まれています。 このエクスプロイトは、NET+OS 7.5 を搭載した Digi Connect ME 9210 デバイス上でリモートコード実行 RCE を達成します。詳細な解説はこちらをご覧ください。...

CVE-2024-50491

CVE-2024-50491 RSVP ME = 1.9.9 - 未认证的SQL注入 描述 WordPress的RSVP ME插件在版本1.9.9及以下存在SQL注入漏洞，原因是对用户提供的参数转义不充分，并且对现有SQL查询准备不充分。这使得未经认证的攻击者能够将额外的SQL查询追加到已有查询中，从而从数据库中提取敏感信息。 详细信息 类型 : plugin Slug : rsvp-me 受影响的版本 : 1.9.9 CVSS 分数 : 7.5 CVSS 评级 : 高危 CVSS 向量 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE...

CVE-2026-85493

Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-106086

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which retur...