IPGeoLocation

IPGeoLocation ==== 用于获取IP地理位置信息的工具 由 ip-api 提供支持 要求 Python 3.x termcolor colorama 下载/安装 git clone https://github.com/maldevel/IPGeoLocation pip3 install -r requirements.txt --user 如果缺少 pip3： apt-get install python3-setuptools easyinstall3 pip pip3 install -r requirements.txt 功能 获取IP或域名地理位置。...

bt2

bt2: Blaze Telegram 后门工具包 bt2 是一个基于 Python 的后门程序，以 IM 机器人形式存在，利用 Telegram 提供的基础设施和功能丰富的机器人 API，稍加改造其通信平台以充当 C&C 服务器。 依赖项 Telepot requests 安装 $ sudo pip install telepot $ sudo pip install requests PS: Telepot 需要至少 requests 2.9.1 才能正常工作。 局限性 目前 shellcode 执行组件依赖于 ctypes，仅适用于 Windows 平台。 使用方法...

trappsec

trappsec trappsec 是一个开源框架，帮助开发者检测探测 API 业务逻辑的攻击者。通过嵌入难以与真实 API 结构区分的逼真假路由和蜜罐字段，诱使攻击者进行身份认证——将侦察行为转化为可操作的安全遥测数据。 专为那 1% 实际查看安全告警的人，以及 99% 仅仅喜欢拥有告警这个想法的人而构建。 阅读文档 • 极速入门 核心概念 Decoy Routes（假路由）： 这些是位于真实业务逻辑之外但看起来真实的“幽灵”端点。通过在客户端代码中植入虚假引用，可以引诱攻击者触碰这些陷阱，从而通过自定义静态或动态响应（根据认证状态调整）监控其行为。 Honey Fields（蜜罐字段...

CVE-2026-102158 Security Advisory 0190

Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...

EUVD-2026-93955

Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...

CVE-2026-102158

Improper validation of selected CloudVision CUE application programming interface (API) request parameters allows an authenticated network user to perform SQL injection against the backend. This vulnerability impacts the availability of the system. No specific details regarding affected versions ...

CVE-2026-102158 Security Advisory 0190

Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...

CVE-2018-7691

CVE-2018-7691 La API REST de SSC contiene vulnerabilidades de Referencia Directa a Objetos Inseguros IDOR que permiten a usuarios autenticados acceder a detalles arbitrarios de los usuarios locales y LDAP mediante el método POST, y a detalles arbitrarios de los proyectos de Fortify de otros...

CVE-2026-101158 Security Advisory 0185

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting XSS. Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting...

EUVD-2026-93944

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting XSS. Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting...

CVE-2026-101158

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS) . Successful exploitation could enable an attacker to hijack another CloudVision user's web session , potentially resulti...

CVE-2026-101158 Security Advisory 0185

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting XSS. Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting...

CVE-2025-59501

CVE-2025-59501 利用SCCM的AdminService API（当启用了Entra ID集成时）提权为完全管理员并接管SCCM层级架构的POC。更多细节见这篇博客。 依赖 uv 安装 git clone https://github.com/garrettfoster13/CVE-2025-59501.git cd CVE-2025-59501/ uv sync 使用方法 该工具包含两个模块：token 和 admin ➜ CVE-2025-59501 git:main ✗ uv run poc.py usage: poc.py -h token,admin ... POC...

LibTP_Gadget

LibTPGadget Esta es una generalización de https://github.com/AlmondOffSec/LibTPLoadLib para hacer proxy de APIs con un número arbitrario 11 como máximo, pero suficiente de argumentos. Se proporciona como una librería compartida de Crystal Palace. API compatible con el LibTP de @rasta-mouse para...

CVE-2026-103006

Elasticsearch is vulnerable to Uncontrolled Recursion (CWE-674) in its search aggregation processing . An authenticated user with read access to a single index can submit a specially crafted request containing deeply nested aggregation definitions. This triggers unbounded recursive execution, exh...

CVE-2026-103006 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...

EUVD-2026-93936

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...

CVE-2026-102407

A vulnerability in Elasticsearch (CWE-863) allows an authenticated user with sufficient privileges over a single resource to modify a data stream to which they are not authorized. By using the Modify Data Streams API , an attacker can potentially inject data or affect searchability, though they c...

CVE-2026-102407 Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification

Incorrect Authorization CWE-863 in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with sufficient privileges over a single resource could use the Modify Data Streams API to modify a data...

EUVD-2026-93928

Incorrect Authorization CWE-863 in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with sufficient privileges over a single resource could use the Modify Data Streams API to modify a data...