apex

Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...

ctf

CTF Related stuff Table of Contents The challs are linked in the table below. Description| Event/Game| Solution ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| An exe with a "login" functionality with the password in plain text in the memory. Blackbox| Level 2| An exe with setuid for...

Introspy-iOS

Introspy-iOS Blackbox tool to help understand what an iOS application is doing at runtime and assist in the identification of potential security issues. See http://isecpartners.github.io/Introspy-iOS/ for a quick introduction. Description This is the repository for the Introspy-iOS tracer. The...

Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)

Prometheus Blackbox Exporter through 0.17.0 contains a server-side request forgery caused by unsanitized target parameter in /probe, letting attackers perform SSRF attacks, exploit requires sending crafted target parameter. id: CVE-2020-16248 info: name: Prometheus Blackbox Exporter - Server-Side...

blackbox-fuzzing

Blackbox-Fuzzing of IoT Devices Using the Router TL-WR902AC as Example This is the HTML version of my term paper which can be downloaded as PDF here. Introduction Fuzzing has become "one of the most effective ways" of finding bugs in software. With this or similar claims, many current...

slurp-1

slurp Blackbox/whitebox S3 bucket enumerator Overview Credit to all the vendor packages that made this tool possible. This is a security tool; it's meant for pen-testers and security professionals to perform audits of s3 buckets. Features Scan via domains; you can target a single domain or a list...

Barco/AWIND OEM Presentation Platform - Remote Command Injection

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf ora ha un pacchetto ufficiale su PyPi con il nomebbpb. Il pacchetto blackboxprotobuf è un fork più vecchio Descrizione Blackbox Protobuf è un insieme di strumenti per lavorare con Protocol Buffers protobuf codificati senza la definizione protobuf corrispondente...

Astra Linux – Vulnerability in libqb

In logblackbox.c in libqb before version 2.0.8, a buffer overflow can occur due to the use of long log messages, as the size of the log headers is not taken into consideration...

[SECURITY] Fedora 45 Update: blackbox-terminal-0.15.2-3.fc45

Black Box is an elegant and customizable terminal for GNOME...

PT-2026-105634

These are all security issues fixed in the prometheus-blackbox exporter-0.26.0-9.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-QQ16629 Security fix for CVE-2020-16248 applied in: prometheus-blackbox-exporter 0.18.0-r0

Security vulnerability affects the prometheus-blackbox-exporter package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OT08451 Security fix for CVE-2026-40898 applied in: kube-metrics-adapter 0.2.9-r0, kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8, kubernetes-dns-node-cache 1.26.0-r1, prometheus-blackbox-exporter 0.28.0-r2

CVE-2026-40898 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101494

Security vulnerability affects the prometheus-blackbox-exporter package. This issue is resolved in later releases. See references for vulnerability details...

clusterfuzz v2.39.2

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

EUVD-2026-64745

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

apex v2.4.0-canary.d5c18874

Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...

CVE-2026-78251: Use of Hard-coded Credentials

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...