uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

CVE-2022-42176

PCSecure V5.0.8.xw - 配置文件中使用硬编码凭据导致管理员面板访问 摘要 厂商: PCTechSoft SAS 产品: PCSecure 受影响版本: 5.0.8.xw 代号: PapiQuieroPollo00 漏洞 类型: 使用硬编码凭据 CWE-798 CVSSv3.1 向量: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 基础评分: 7.8 高危 漏洞利用: 否 CVE ID: CVE-2022-42176 描述 PCSecure V5.0.8.xw 的配置文件 system.bmp...

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

KeePass-CVE-2023-24055

KeePass-CVE-2023-24055 KeePass CVE-2023-24055复现 KeePass CVE-2023-24055复现 1，准备机器：kali（192.168.232.129），windows10（192.168.232.128） 2,keepass版本：2.53 2，原理：通过修改keepass配置文件KeePass.config.xml，添加触发器配置项：导出明文密码并上传到攻击者服务器上；添加触发器的xml代码如下： 其中：c:\Users\Long\AppData\Local\Temp\exploit.xml字段为设置导出明文密码的本机路径...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

azurelinux

Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

foremost

FOREMOST Foremost es un programa de Linux para recuperar archivos basándose en sus cabeceras y pies. Foremost puede trabajar con archivos de imagen, como los generados por dd, Safeback, Encase, etc., o directamente sobre una unidad. Las cabeceras y los pies se especifican mediante un archivo de...

nushell

Nushell 一种新型的 shell。 目录 状态 了解 Nu 安装 配置 设计理念 管道 打开文件 插件 目标 官方支持 贡献 许可证 状态 本项目已达到最小可行产品（MVP）级别的质量。许多人将其作为日常使用的 shell，但对于某些命令可能仍不稳定。随着 Nu 的成熟，其设计可能会发生变化。 了解 Nu Nushell 手册 是 Nushell 文档的主要来源。你可以在手册中找到 Nu 命令的完整列表，并且我们的 cookbook 中有许多使用 Nu 的示例。 我们也活跃在 Discord 上；欢迎来和我们交流！ 安装 快速安装 Nu： Linux and macOS brew...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

CVE-2026-39460

Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be viewed through the CLI or they can be exported from the device through a TFTP transfer from the web interface. A TFTP...

CVE-2026-28745

Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system...

CVE-2026-33272 Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Channel

A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally...

CVE-2026-33367

The Red Lion Controls N-Tron 700 Series is vulnerable to a missing authentication flaw where SNMP can be used to perform administrative actions. Attackers can retrieve configuration files, modify user accounts or device settings, and initiate firmware or bootloader upgrades/downgrades without any...

CVE-2026-28745 Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format

Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system...

EUVD-2026-95811

Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system...

CVE-2026-39460 Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials

Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be viewed through the CLI or they can be exported from the device through a TFTP transfer from the web interface. A TFTP...

CVE-2026-39460

The Red Lion Controls N-Tron 700 Series is vulnerable to insufficiently protected credentials because usernames and passwords, including default factory credentials, are stored in plaintext within the configuration file. An attacker with administrator rights can view this file via the CLI or expo...

EUVD-2026-95805

Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be viewed through the CLI or they can be exported from the device through a TFTP transfer from the web interface. A TFTP...