186 matches found
Thunderstorm
Thunderstorm Thunderstorm 是一个用于攻击 UPS 设备的模块化框架。 目前仅提供 CS-141 和 NetMan 204 的利用模块。框架的测试版将在未来发布。 CVE Thunderstorm 目前能够利用以下 CVE 漏洞： CVE-2022-47186 – 文件上传无限制 CS-141 CVE-2022-47187 – 通过文件上传实现跨站脚本攻击 CS-141 CVE-2022-47188 – 通过文件上传实现任意本地文件读取 CS-141 CVE-2022-47189 – 通过文件上传实现拒绝服务 CS-141 CVE-2022-47190 –...
CVE-2025-46047
CVE-2025-46047 Silverpeas -u 示例： python silverpeasenumpoc.py http://vulnerable-silverpeas.local -u admin 从文件测试用户名： python silverpeasenumpoc.py -w 示例： python silverpeasenumpoc.py https://vulnerable-silverpeas.com -w users.txt 输出 脚本将输出： + 用户名 '...' 似乎有效（状态码: 200） 对于可能对应现有账户的用户名。 - 用户名 '...' 似乎无效（状态...
CVE-2026-26744
CVE-2026-26744 Existe una vulnerabilidad de enumeración de usuarios en FormaLMS 4.1.18 y anteriores en la funcionalidad de recuperación de contraseña accesible a través del endpoint /lostpwd. La aplicación devuelve mensajes de error diferentes para nombres de usuario válidos e inválidos por...
ejbca-pqc-lab
Laboratorio PQC Puro con EJBCA — Jerarquía PKI de Dos Niveles ML-DSA-65 Una implementación práctica de NIST FIPS 204 ML-DSA en una jerarquía PKI de dos niveles utilizando EJBCA Community Edition. 📖 Guía completa: Construyendo una PKI Post-Cuántica: Cómo firmé una CA Raíz y una CA Subordinada usan...
Kibana 9.4.x < 9.4.4 Information Disclosure (ESA-2026-161)
The version of Kibana installed on the remote host is 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-161 advisory. - Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for...
CVE-2026-78584 Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure
Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...
CVE-2025-71317
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...
CVE-2025-71318
NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages such as administration.html, administration-commands.html, and configuration.html to disclose sensitive information including...
CVE-2025-71318 NetMan 204 Missing Authentication for Administrative Functions
NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages such as administration.html, administration-commands.html, and configuration.html to disclose sensitive information including...
CVE-2025-71318
CVE-2025-71318 concerns NetMan 204, where authentication is not enforced on administrative pages and command endpoints. A remote, unauthenticated attacker can directly access pages (e.g., administration.html, administration-commands.html, configuration.html) to disclose sensitive details such as ...
EUVD-2025-210079
NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages such as administration.html, administration-commands.html, and configuration.html to disclose sensitive information including...
CVE-2025-71317 NetMan 204 Hard-coded Backdoor Credentials
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...
EUVD-2025-210078
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...
CVE-2025-71317: Use of Hard-coded Credentials
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...
CVE-2025-71318: Missing Authentication for Critical Function
NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages such as administration.html, administration-commands.html, and configuration.html to disclose sensitive information including...
PT-2026-49127
This crate provides Rust bindings to ML-DSA FIPS 204 via C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604, after which no further security patches or bug fixes will be applied to the upstream implementations. As a result, this crat...
ml-dsa's UseHint function has off by two error when r0 equals zero
Summary There's a bug in the usehint function where it adds 1 instead of subtracting 1 when the decomposed low bits r0 equal exactly zero. FIPS 204 Algorithm 40 is pretty clear that r0 0 means strictly positive, but the current code treats zero as positive. This causes valid signatures to...
GHSA-H37V-HP6W-2PP8 ml-dsa's UseHint function has off by two error when r0 equals zero
Summary There's a bug in the usehint function where it adds 1 instead of subtracting 1 when the decomposed low bits r0 equal exactly zero. FIPS 204 Algorithm 40 is pretty clear that r0 0 means strictly positive, but the current code treats zero as positive. This causes valid signatures to...
PT-2026-5048
The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard ML-DSA. Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto ml-dsa crate incorrectly accepts signatures with repeated duplicat...
CVE-2026-24850: Improper Verification of Cryptographic Signature
The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard ML-DSA. Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto ml-dsa crate incorrectly accepts signatures with repeated duplicat...