mediator

Mediator는 운영자와 셸이 "중개자mediator" 서버에 연결되어 연결을 브리징하는 종단간 암호화 리버스 셸입니다. 이를 통해 운영자/핸들러가 연결을 수신하기 위해 포트 포워딩을 설정할 필요가 없어집니다. 또한 Mediator는 플러그인을 생성하여 리버스 셸의 기능을 확장할 수 있습니다. Mediator의 스크립트는 독립 실행형으로 실행하거나 다른 침투 테스트 및 사고 대응 도구에 통합하기 위해 임포트할 수 있습니다. 아키텍처: 종단간 암호화 채팅 애플리케이션에서 영감을 받은 Mediator는 리버스 셸의 클라이언트/서...

CVE-2025-0108

이 스크립트를 paloaltocve20250108.nse로 저장한 후, 다음 Nmap 명령을 실행하십시오: nmap --script paloaltocve20250108.nse -p 80,443 또는 대상 목록의 경우: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...

CVE-2014-6271

CVE-2014-6271 사용법 go run CVE-2014-6271.go www.example.com 80 whoami...

GhostLock-H80GT

English | 中文 Honor 80 GT Privilege Escalation PoC: GhostLock CVE-2026-43499 A local privilege escalation exploit for the Honor 80 GT AGT-AN00 , CVE-2026-43499 — a use-after-free in the kernel rtmutex removewaiter path — plus a companion KernelSU kernel-module loading solution. In principle the bu...

CVE-2020-6418

CVE-2020-6418: RCE de Chrome encadenado con una escalada de privilegios de Windows Este repositorio contiene una cadena de explotación funcional de una sola etapa para CVE-2020-6418 un bug de confusión de tipos en el compilador Turbofan de V8, que afecta a Google Chrome 80.0.3987.87 x64. Visitar...

Exploit for Use After Free in Linux Linux_Kernel

English | 中文 Honor 80 GT Privilege Escalat...

CVE-2026-71260

CVE-2026-71260 affects ESPHome up to 2026.7.0-dev. In the web_server component, a text entity with mode: password correctly masks the TEXT field in the JSON 'state', but the serialization path unconditionally writes the raw password into the JSON 'value' field via set_json_icon_state_value()/set_...

PT-2026-53212

Information exposure vulnerability in Hitachi Storage Navigator. This issue affects Hitachi Virtual Storage Platform 5100, 5200, 5500, 5600, 5100H, 5200H, 5500H, 5600H, VX8: before DKCMAIN Ver. 90-09-24-00/00, SVP Ver. 90-09-24/00, before DKCMAIN Ver. 90-08-86-00/00, SVP Ver. 90-08-86/00; Hitachi...

EUVD-2025-209542

HCL BigFix Service Management SM Discovery is vulnerable to unenforced encryption due to port 80 HTTP being open, allowing unencrypted access. An attacker with access to the network traffic can sniff packets from the connection and uncover the data...

CVE-2026-33472

Cryptomator is an open-source client-side encryption application for cloud storage. Version 1.19.1 contains a logic flaw in CheckHostTrustController.getAuthority that allows an attacker to bypass the security fix for CVE-2026-32303. The method hardcodes the URI scheme based on port number, causin...

CVE-2026-2491

Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Socomec DIRIS A-40 power monitoring devices. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2026-22782 RustFS RPC signature verification logs shared secret

RustFS is a distributed object storage system built in Rust. From = 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. In...

MiracleLinux 4 : kernel-2.6.32-71.18.1.el6 (AXSA:2011-80:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-80:02 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

CVE-2024-39341

Entrust Instant Financial Issuance On Premise Software formerly known as Cardwizard 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier leaves behind a configuration file i.e. WebAPI.cfg.xml after the installation process. This file can be accessed without authentication on HTTP port 80 by guessin...

CVE-2022-0650

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...

CVE-2020-17409

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66. Authentication is not required to exploit this vulnerability. The specific flaw exists...

MAL-2025-156594 Malicious code in intan-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865d04b4b677a6a39047ee5cec1e542211b9ab6259297797c3bf104703289ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164956 Malicious code in rita-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fcc607f31bd5cf42110cad6b66327491db2f2ef4ebe17ca5d3578797c7855e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152442 Malicious code in alvino-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4678c7c982934283da80b87316d30b6e0c2510004c69aef803a923eaad1ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154114 Malicious code in cinta-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c61ecc41ce209f6f2be2e0780498ff360ac97408fc1c374f2d48ec0c3da2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...