KismetMobileDashboard

KismetMobileDashboard 此工具已过时。新版 Kismet 已支持 WebSocket，构建类似功能会更加简单。 这是移动端 UI 的一次重大重写。理想情况下我希望多测试一下，但 hackersummercamp 近在眼前，实在没有时间。 主要功能更新： 1. 设备现在可点击查看详细内容。 示例：AP → AP 列表 → 具体 AP 及其客户端 → 客户端详情。 2. 现可通过移动端仪表盘登录。 3. 可暂停/重启数据源（无法直接启动/停止接口自身）。 限制： 1. 不能启动/停止接口。 2. 无法处理非英文 SSID。 这是一个非常早期的 Alpha...

log4j_RCE_CVE-2021-44832

Log4j 2.17.0 RCE -- CVE-2021-44832 复现 1. 启动恶意jndi server java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "/System/Applications/Calculator.app/Contents/MacOS/Calculator" -A "127.0.0.1" 2. 修改config/log4j2.xml中的DataSource部分为你生成的jndi地址 配置文件部署到自己的http服务器上 3. 修改Poc 修改为http服务器上的部署的配置文件 4. 执行...

CVE-2026-31816-rshell

Exploit de Reverse Shell CVE-2026-31816 Descripción General Esta herramienta explota CVE-2026-31816 para establecer una conexión de reverse shell en un servidor Budibase objetivo. Cadena de Ataque : Bypass de Autenticación → Subida de Plugin DATASOURCE → Ejecución de Código en el Servidor → Rever...

DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002

fofa语法：title="DataEase" poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like...

CVE-2026-71183

An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized to access through the /unauth-datasource and /authed-datasource endpoints. These endpoints fail to enforce the required data source access controls...

EUVD-2026-94808

An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized to access through the /unauth-datasource and /authed-datasource endpoints. These endpoints fail to enforce the required data source access controls...

CVE-2026-71183

An authorization vulnerability in Apache DolphinScheduler (versions before 3.4.3 ) allows authenticated users to access data sources they are not authorized to view. The /unauth-datasource and /authed-datasource endpoints fail to enforce proper access controls, potentially leaking sensitive conne...

CVE-2026-71183 Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords

An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized to access through the /unauth-datasource and /authed-datasource endpoints. These endpoints fail to enforce the required data source access controls...

GO-2026-6638 Nightingale exposes datasource credentials to low-privilege users in github.com/ccfos/nightingale

Nightingale exposes datasource credentials to low-privilege users in github.com/ccfos/nightingale...

CVE-2026-54350-Budibase-NoSQL-Injection

CVE-2026-54350 — Budibase 未认证 NoSQL 运算符注入 在 Budibase 中发现的未认证 JSON/NoSQL 运算符注入漏洞。任何匿名访问已发布 Budibase 应用的用户，只要该应用暴露一个由文档数据源（MongoDB、CouchDB、Elasticsearch、DynamoDB-PartiQL 或带有 JSON 主体的 REST）支持的 PUBLIC 查询，就可以通过一个未认证的 HTTP 请求 读取底层集合中的每一个文档 ；如果存在公开的写查询，甚至可以 修改每一个文档 。 | ---|--- CVE| CVE-2026-54350 安全公告|...

Quartz-1

Para compilar: % mvn install -DskipTests Nota: a. el jar final de Quartz se encuentra en quartz/target b. si no tienes los jars de bibliotecas de terceros de Oracle y/o Weblogic necesarios para la compilación no se pueden encontrar en los repositorios públicos de Maven debido a las licencias,...

Grafana-CVE-2024-9264

Grafana-CVE-2024-9264 POST /api/ds/query?dstype=expr&expression=true&requestId=Q100 HTTP/1.1 Host: 127.0.0.1:3000 Content-Type: application/json Cookie: grafanasession=a739fa9aeb235f2790f17de00fefe528 Content-Length: 368 "from": "1696154400000", "to": "1696345200000", "queries": "datasource":...

CVE-2026-75786

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...

EUVD-2026-90600

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...

PT-2026-103769

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...

Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux (ALMALINUX9.6:CLSA-2026:1780478536)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780478536 advisory. - Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to...

AlmaLinux 9.6 [TuxCare] Security Update: grafana / grafana-selinux (ALMALINUX9.6:CLSA-2026:1780478536)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780478536 advisory. - Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to...

CVE-2026-75786: Improper Neutralization of Special Elements used in an SQL Command

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...

CVE-2026-84842

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

CVE-2026-84842 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...