PT-2026-104436

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description Armatura One stores database and message-broker credentials in an installation configuration file. When protection is enabled, these credentials are encrypted using AES-128-CBC Advanced...

webhook-cve-2022-0811

webhook-cve-2022-0811 This is a really simple webhook that just blocks pod creation if malicious sysctl values are configured. Build go test CGOENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build Build image an deploy in Minikube Start minikube: minikube start minikube addons enable registr...

CVE-2022-48311

CVE-2022-48311 HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B HTTP configuration page Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number...

CVE-2020-26733

CVE-2020-26733 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their...

cve-2025-31651

CVE-2025-36701 — Apache Tomcat - Rewrite rule bypass Discoverer: gregk4sec https://github.com/gregk4sec/cve Discovery Date: 2025-02-28 Affected Vendor: Apache Affected Product: Tomcat 9.0.x / 10.1.x / 11.0.x Severity: Critical / High CWE: CWE-116 Status: Under Review / Fixed / Public ✅ / Private...

CVE-2022-41678

Apache ActiveMQ CVE-2022-41678 Exploit Tool Vulnerability Overview Reference document: https://app.nextcyber.cn/courses/41/tasks/580 CVE-2022-41678 is a remote code execution vulnerability in Apache ActiveMQ. This vulnerability allows an attacker to modify Log4j configuration or JFR Java Flight...

autochrome

autochrome Этот инструмент загружает, устанавливает и настраивает новенькую копию Chromium. Он включает полезные функции, такие как: Отключение всех этих надоедливых автообновлений! Яркие цветные темы для высокой видимости! Без XSS-аудитора! Автоматическая настройка прокси! использует...

cowcloud

CowCloud a serverless solution to distribute work-loads in AWS CowCloud was originally created to run recon tools and vulnerability scans in a distributed way; for example, one use case might be by bug bounty hunters. This solution is intended to abstract end users from the underlying work requir...

go-pillage-registries

go-pillage-registries This project takes a Docker registry and pillages the manifest and configuration for each image in its catalog. It uses Google's crane command's package, which should follow docker's keychain semantics. If you would like to override this, just change authn.DefaultKeychain as...

behat-config-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install behat-config-leaks Run bellow command to check behat-config-leaks -h Configurations 2. We integrated with the Telegram API to...

GO-2026-6493 RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go

RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go...

CVE-2026-102628

The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled APPDEBUG=true, APPENV=local in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel to expose the entire server environment,...

Packages_wpa_supplicant8_CVE-2021-0326

wpasupplicant and hostapd Copyright c 2002-2019, Jouni Malinen [email protected] and contributors All Rights Reserved. These programs are licensed under the BSD license the one with advertisement clause removed. If you are submitting changes to the project, please see CONTRIBUTIONS file for...

Apache-Solr-Arbitrary-File-Read

Apache Solr Arbitrary File Read Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and client libraries for many programming languages such...

CVE-2025-32463

CVE-2025-32463: Sudo Privilege Escalation chroot This repository contains information and/or a proof of concept PoC about the vulnerability CVE-2025-32463 , a critical local privilege escalation flaw in the sudo utility. 📌 Description The vulnerability allows a local user to gain root access by...

EUVD-2026-91033

The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled APPDEBUG=true, APPENV=local in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel to expose the entire server environment,...

CVE-2026-30225-OliveTin-RCE

OliveTin — выполнение действий без аутентификации → RCE + CVE-2026-30225 PoC для повышения привилегий / удалённого выполнения кода против экземпляров OliveTin, работающих с поставляемыми настройками гостевого доступа по умолчанию. Проверено на OliveTin 3000.10.0, работающем от root HTB: Enigma, г...

CVE-2026-12948

CVE-2026-12948 Сводка об уязвимости В веб-интерфейсе управления Digi PortServer TS 4 H MEI была обнаружена уязвимость хранимого межсайтового скриптинга XSS. Специально сформированный аутентифицированный запрос позволяет навсегда записать скрипт-полезную нагрузку в хранилище конфигурации устройств...

CVE-2026-12352

CVE-2026-12352 Краткое описание В Digi PortServer TS 4 H MEI обнаружен неаутентифицированный обход аутентификации, вызванный нагрузкой, позволяющий получить локальный файл конфигурации устройства без действительных учётных данных. При повышенной нагрузке от одновременных запросов веб-сервер...

sparty

Sparty - Sharepoint/Frontpage Auditing Tool ! Authored by: Aditya K Sood |[email protected] | 2013 Twitter: @AdityaKSood Powered by: SecNiche Security Labs ! Sparty is an open source tool written in python to audit web applications using sharepoint and frontpage architecture. The motivation...