282450 matches found
EUVD-2026-88606
A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/networktools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has be...
CVE-2026-102240 Netcore NAP930 Network Tools CGI network_tools eval os command injection
A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/networktools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has be...
CVE-2026-102240
A vulnerability exists in Netcore NAP930 version 0.1.241010.141410 within the Network Tools CGI component. Specifically, the eval function in the file /www/cgi-bin/network_tools is susceptible to OS command injection due to improper handling of the sid argument. This flaw allows for remote exploi...
AutoRDPwn
AutoRDPwn is a post-exploitation framework created in Powershell, designed primarily to automate the Shadow attack on Microsoft Windows computers. This vulnerability listed as a feature by Microsoft allows a remote attacker to view his victim's desktop without his consent, and even control it on...
CVE-2026-97512
A flaw was found in the Linux kernel's Qualcomm Serial Peripheral Interface spi-qcom-qspi driver. This flaw can result in a Denial of Service DoS or system instability due to incomplete error handling during runtime power management PM suspend and resume operations. If an operation fails midway,...
princeprocessor
princeprocessor Generador independiente de candidatos de contraseñas usando el algoritmo PRINCE El nombre PRINCE se usa como acrónimo y significa PRobability INfinite Chained Elements, que son los bloques de construcción del algoritmo Descripción breve El princeprocessor es un generador de...
CVE-2026-101860 RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management
A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the function PluginInstaller::addSudoers of the file src/RaspAP/Plugins/PluginInstaller.php of the component sudo Configuration. Performing a manipulation results in improper privilege management. The attack...
EUVD-2026-88604
A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the function PluginInstaller::addSudoers of the file src/RaspAP/Plugins/PluginInstaller.php of the component sudo Configuration. Performing a manipulation results in improper privilege management. The attack...
CVE-2026-101860
A vulnerability exists in RaspAP raspap-webgui up to version 3.5.5 within the sudo Configuration component. The flaw is located in the PluginInstaller::addSudoers function of the file src/RaspAP/Plugins/PluginInstaller.php , where improper privilege management occurs. An attacker can initiate thi...
CVE-2019-13288-POC
CVE-2019-13288-POC xpdf/install/bin/pdftotext ./poc.pdf En Xpdf 4.01.01, la función Parser::getObj en Parser.cc puede causar una recursión infinita mediante un archivo manipulado. Un atacante remoto puede aprovechar esto para un ataque de denegación de servicio. Esto es similar a CVE-2018-16646...
scour
Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...
scour
Scour - AWS 检测框架 该工具用于在 AWS 控制平面内模拟攻击模式。每个攻击都会附带一个特定的 UA（用户代理），供蓝队进行信号检测。 状态 目前仍在积极开发中。存在大量错误 。 尚未准备好投入生产环境。 问题提交地址 ： https://github.com/grines/scour/issues 维护者 ： grines 什么是 Scour？ Scour 是一个基于 Golang 编写的现代模块化 AWS 利用框架，专为红队测试和蓝队分析而设计。它包含可用来攻击环境或构建防御检测的现代技术。 特性 命令补全 动态资源列表 命令历史 蓝队模式（为攻击行为添加唯一的用户代理标...
THC-Archive
THC-Archive 安全研究小组（又称黑客）The Hacker's Choice 的所有发布版本 在 Twitter 上关注我们: https://twitter.com/hackerschoice 在 Medium 上阅读更多: https://medium.com/@hackerschoice 为什么？ 因为我们再也没有时间运营完整的 web 服务器了，另一方面我们也不希望这些资料就此丢失…… 活跃项目 还有其他活跃的 THC 项目拥有自己的 GitHub 仓库： thc-hydra: https://github.com/vanhauser-thc/thc-hydra...
CVE-2026-101859
A vulnerability exists in RaspAP raspap-webgui up to version 3.5.5 within the OpenVPN Configuration Handler component. The root cause is an os command injection vulnerability in the escapeshellcmd function of the ajax/openvpn/del_ovpncfg.php file. Attackers can exploit this by manipulating the cf...
EUVD-2026-88603
A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability is the function escapeshellcmd of the file ajax/openvpn/delovpncfg.php of the component OpenVPN Configuration Handler. Such manipulation of the argument cfgid leads to os command injection. The atta...
CVE-2019-0708
CVE-2019-0708 CVE-2019-0708 cssxn 记住此人肮脏的嘴巴 是的，昨天开了个玩笑。玩的开心...
CVE-2026-98075
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program references its main function as a callback, the kernel fails to translate the function reference into a valid memory address. A local user with permissions to load BPF programs could exploit this...
CVE-2026-98074
A flaw was found in the Linux kernel's network bonding driver. A local user with network administration privileges can cause a physical network adapter to permanently remain in promiscuous mode a configuration where an interface captures all traffic on the local network segment, rather than only...
cc-ddos
如果你觉得这个仓库有用，请给它点个 Star，因为它是免费的 : 捐赠信息在发布版中 脚本仍正常运行，已于 2025 年测试。 cc-ddos 一个用于通过多种 HTTP Flood 方法对网站进行 DDOS 攻击的 Python 脚本。一个普通网站只需 5 秒即可完全瘫痪！ 使用方法： 该脚本可在 Windows、Linux Core 以及 Android Termux 上运行，以下是说明： 使用以下方法将以自动预设配置运行脚本，并利用全部网络资源以达到最大攻击力。使用手动脚本可以自定义攻击参数！ 测试 2022/09/01： 下载适合您操作系统的版本：点击此处 本程序依赖于其他程序，...