CVE-2026-102247

A vulnerability exists in FastAdmin versions 1.6.1.20250430 and 1.6.5.20260602 within the Database Management component. The flaw is located in an unknown function of the application/database.php file, which can be manipulated to result in execution with unnecessary privileges . This attack can b...

CVE-2026-102247 FastAdmin Database Management database.php unnecessary privileges

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CVE-2026-102247 FastAdmin Database Management database.php unnecessary privileges

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

EUVD-2026-88620

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Management. The manipulation results in execution with unnecessary privileges. The attack may be launched remotely. The exploit ...

CVE-2021-30146

CVE-2021-30146 Seafile 7.0.5 XSS Persistente Descripción sugerida: La aplicación versión del servidor: Seafile 7.0.5 es vulnerable a XSS persistente a través de la funcionalidad de compartir bibliotecas. Información adicional: Seafile es una solución de sincronización y uso compartido de archivos...

bitcracker

BitCracker BitCracker 是首个开源存储设备（硬盘、USB 闪存盘、SD 卡等）密码破解工具，针对使用 BitLocker 加密的设备。BitLocker 是 Windows Vista、7、8.1 和 10（旗舰版、专业版和企业版）提供的加密功能。它支持多种身份验证方法来加密存储设备，例如受信任平台模块 TPM、智能卡、恢复密码、用户提供的密码。 通过字典攻击，BitCracker 尝试找到正确的用户密码或恢复密码来解密加密的存储设备。该工具基于 CUDA 和 OpenCL 实现。 论文 多本期刊延迟了我们的 BitCracker 论文的发表（将近 3...

CVE_Project

CVEProject Preparativos para la explotación: 1.Instala Tomcat 7 en la máquina virtual sudo apt-get install tomcat7 2.Si el primer paso falla, establece JDKDIRS="/usr/lib/jvm/java-8-oracle" y añade las declaraciones “export JAVAHOME=/usr/lib/jvm/java-8-oracle” y “export...

CVE-2023-23397-PoW

CVE-2023-23397-PoW CVE-2023-23397 的工作量证明，针对易受攻击的 Microsoft Outlook 客户端应用程序。 仅用于教育和研究目的。 CVE-2023-23397 预览 此 CVE 旨在从 Microsoft Outlook 客户端版本 2016（除最新修补版本外）中检索已登录用户的 NetNTLM 哈希值。 复现与成功利用步骤 将任意声音文件下载到将作为 SMB 共享部署的 SMB 机器上。 启动 SMB 共享。 在 MS Outlook 中创建一个约会。在“开始”菜单中，选择“新建项目” -...

CVE-2026-102245

A vulnerability exists in MODSetter SurfSense versions up to 2.0.3 within the circleback Endpoint component. Specifically, an unknown function in the file surfsense_backend/app/routes/circleback_webhook_route.py lacks proper authentication, allowing for remote exploitation. Public exploits are av...

EUVD-2026-88619

A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the file surfsensebackend/app/routes/circlebackwebhookroute.py of the component circleback Endpoint. Executing a manipulation can lead to missing authentication. The attack can be...

esp32-wifi-penetration-tool

Herramienta de Penetración Wi-Fi para ESP32 Este proyecto presenta una herramienta universal para la plataforma ESP32 para implementar varios ataques Wi-Fi. Proporciona algunas funcionalidades comunes que se utilizan habitualmente en ataques Wi-Fi y facilita la implementación de nuevos ataques...

CVE-2020-13885

Título del Exploit: Citrix Workspace app anterior a 1912 para Windows - Escalada de Privilegios 1 Fecha: 2020-06-07 Autor: Andrew Hess Enlace del software: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Boletín:...

CBM

汽车后门制作器 Car Backdoor Maker 是一款用于制作攻击模板并将其加载到 The Bicho 的软件。 开始之前，请阅读如何 获取 The Bicho 硬件。 截图 安装与使用 本项目有自己的 维基，你可以在其中找到以下有用的文档： 安装 从源码编译 在 Linux 上运行 在 Windows 上运行 连接 The Bicho 基本设置 设置 CAN 帧 保存攻击模板 恢复攻击模板 高级设置 电话号码过滤器 停止命令 高级功能 杀死 ECU 帧 GPS 写入 The Bicho 内存 检查更新 免责声明 我们对不良使用不承担任何责任。 作者 Sheila A. Berta...

KubeStalk

KubeStalk KubeStalk 是一款从黑盒视角发现 Kubernetes 及关联基础设施攻击面的工具。该工具是在 Project Resonance - Wave 9 期间用于探测互联网上不安全 Kubernetes 集群的社区版本。 使用方式 下面的 GIF 演示了该工具的使用方式： 安装 KubeStalk 使用 Python 编写，需要 requests 库。 要安装该工具，你可以将仓库克隆到任意目录： git clone https://github.com/redhuntlabs/kubestalk 克隆后，你需要使用 python3 -m pip install...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identificada en la función createSessionInternal del archivo PackageInstallerService.java, es una vulnerabilidad de alta gravedad que afecta a Android versiones 12 y 13. Esta vulnerabilidad permite a un atacante realizar un ataque "run-as any app", lo que conduce a un...

mfoc

MFOC es una implementación de código abierto del ataque "offline nested" de Nethemba. Este programa permite recuperar claves de autenticación de la tarjeta MIFARE Classic. Ten en cuenta que MFOC solo puede recuperar claves del objetivo si tiene una clave conocida: la predeterminada incorporada en...

EUVD-2026-88618

A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown function of the file surfsensebackend/app/routes/editorroutes.py of the component Document Export Feature. Performing a manipulation results in server-side request forgery. The attack can be initiated...

CVE-2026-102244 MODSetter SurfSense Document Export Feature editor_routes.py server-side request forgery

A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown function of the file surfsensebackend/app/routes/editorroutes.py of the component Document Export Feature. Performing a manipulation results in server-side request forgery. The attack can be initiated...

CVE-2026-102244

MODSetter SurfSense versions up to 0.0.36 are vulnerable to a server-side request forgery (SSRF) flaw within the Document Export Feature . The vulnerability exists in an unspecified function located in surfsense_backend/app/routes/editor_routes.py. This flaw allows for remote manipulation that ca...

security-harness

Security Harness Un arnés de revisión de seguridad de aplicaciones multiagente para Claude Code y, más adelante, otros agentes de IA. Una habilidad de enrutador despacha a un pipeline completo de seguridad ofensiva que mapea una base de código, caza vulnerabilidades con una base de conocimiento p...