228 matches found
cheetah
English description | 中文说明 0x00 介绍 Cheetah是一款基于字典的webshell密码爆破工具，Cheetah的工作原理是能根据自动探测出的web服务设置相关参数一次性提交大量的探测密码进行爆破，爆破效率是其他普通webshell密码暴力破解工具上千倍。 本版本可能以后会很少进行更新，请使用Cheetah图形用户界面版本！ 0x01 特点 速度极快 支持批量爆破 自动伪造请求 自动探测web服务设置相关参数 支持读取和去重超大密码字典文件 支持python 2.x和3.x 目前支持php、jsp、asp、aspx webshell 0x02 参数说明 /...
CVE-2020-17519
CVE-2020-17519 CVE-2020-17519 Cheetah语言版，支持批量扫描。 将ip.txt复制到/script/漏洞探测/Apache/文件夹下，打开Wker主程序...
CVE-2026-15823
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wpajaxbacheetahdisable AJAX handler is registered without any capability or nonce...
CVE-2026-15823 Builderall for WordPress <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'ba_cheetah_data[post_id]' Parameter
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wpajaxbacheetahdisable AJAX handler is registered without any capability or nonce...
EUVD-2026-75236
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wpajaxbacheetahdisable AJAX handler is registered without any capability or nonce...
PT-2026-89265
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wp ajax ba cheetah disable AJAX handler is registered without any capability or nonce...
CVE-2026-15823: Missing Authorization
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wpajaxbacheetahdisable AJAX handler is registered without any capability or nonce...
PYSEC-2026-794 Cobbler is vulnerable to code injection
templateapi.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a...
CVE-2026-22390
Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...
CVE-2026-22390: Improper Control of Generation of Code
Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...
CVE-2005-1632
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...
Malicious code in interior_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f4a0da19a02ce09191d24fc0f6c82a3e21eb0dc7a4d2ec0172ee3d0dcac20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in early_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8312ccd88140f4df3c550d05a635504bdd7245cad8ee52a74e30773e270a605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bored_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d214af96ab428c3a76669e0004c438c1755a0158601f91e5493e2b441478812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-102092
Malicious code in spottycheetahz3n npm...
EUVD-2025-98062
Malicious code in inappropriatecheetahz3n npm...
EUVD-2025-97541
Malicious code in joyouscheetahz3n npm...
MAL-2025-130313 Malicious code in spotty_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a14d4a1e4bc38e13bd3b13759457796cb9a5cf897866d2030f09f94915bf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-125216 Malicious code in bored_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d214af96ab428c3a76669e0004c438c1755a0158601f91e5493e2b441478812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...