EUVD-2026-84875

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images...

CVE-2026-15915

IBM Concert versions 1.0.0 through 3.0.0 are susceptible to a vulnerability where a local attacker can obtain sensitive information . This is caused by the recursive copying of build context directories into container images. No specific remediation, exploit details, or in-the-wild exploitation r...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

CVE-2024-24919

CVE-2024-24919 이 프로젝트는 CVE-2024-24919를 더 잘 연구하기 위한 자동화를 만드는 것을 목표로 합니다. api.py : 잠재적인 취약 IP를 수집합니다. CVE-2024-24919.py : IP 파일과 디렉터리 파일을 기반으로 무차별 대입brute force을 수행합니다. worldListLFI.txt : Linux 디렉터리 목록. 사용법 다음 명령어를 사용하여 이 저장소를 머신에 클론하세요: root@kitploit: git clone...

DirDar

DirDar v1.0 Описание 🏴‍☠️ обход запрещённых директорий - найти и определить листинг директорий - также можно использовать как брутфорс директорий Совместимость Этот инструмент совместим со всеми типами операционных систем при условии установки компилятора Go Установка Вы можете использовать эту...

DLLHijackingScanner

Обход UAC - внедрение DLL Описание Это PoC для обхода UAC путем внедрения DLL и злоупотребления проверкой "Trusted Directories". Содержание Генерация заголовочного файла из CSV Аргументы Генерация списка уязвимых PE и DLL DLLHijacking.exe Файл журнала Выполнение Результат test.dll Источники...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

onionscan

What is OnionScan? OnionScan is a free and open source tool for investigating the Dark Web. For all the amazing technological innovations in the anonymity and privacy space, there is always a constant threat that has no effective technological patch - human error. Whether it is operational securi...

CVE-2020-9934

CVE-2020-9934 Это доказательство концепции представляет собой простую программу на Swift, которая выдаёт себе и Терминалу все разрешения kTCCService полученные из tccd, а затем выполняет четыре действия: Создаёт файл с именем «» в каталоге, защищённом TCC Считывает данные из этого файла внутри...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

Camtron CMNC-200 IP Camera - Directory Traversal

The CMNC-200 IP Camera has a built-in web server that is vulnerable to directory transversal attacks, allowing access to any file on the camera file system. id: CVE-2010-4231 info: name: Camtron CMNC-200 IP Camera - Directory Traversal author: daffainfo severity: high description: The CMNC-200 IP...

phpShowtime 2.0 - Directory Traversal

A directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. dot dot in the r parameter to index.php. id: CVE-2012-0981 info: name: phpShowtime 2.0 - Directory Traversal author: daffainfo severity: medium description: A...

PutScanner

🔍 PUT 디렉토리 스캐너 HTTP PUT 메서드를 통해 쓰기 가능한 웹 디렉토리를 식별하는 침투 테스트 도구로, 특히 CVE-2025-24813Apache Tomcat의 임의 파일 업로드을 탐지하도록 설계되었습니다. 📌 특징 스마트 프로토콜 처리 : HTTPS/HTTP 자동 감지 및 대체 포괄적 검사 : 모든 일반적인 Tomcat 디렉토리 테스트 2단계 검증 : PUT + GET 검증으로 거짓 양성 제거 침투 테스터 친화적 출력 : 색상 코드 결과 및 수동 검증 명령어 CVE 중심 : CVE-2025-24813의 전제 조건을...

scout

Scout Scout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage root@kitploit: Usage: scout command Available Commands: help Hel...

dirhunt

.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/v0.2.0/images/dirhunt.png | .. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/pip-rating-badge/pip-rating-badge.svg :target: https://github.com/Nekmo/dirhunt/actions/workflows/pip-rating.yml :alt: Значок pip-rating .. image::...

D-Link

D-Link CVE-2017-12943 Описание уязвимости взлома модема D-Link Уязвимость, недавно опубликованная, позволяет получить доступ к модему без необходимости ввода пароля. Метод очень прост и основан только на вводимых командах. В этом выпуске я помогу вам разобраться, как использовать уязвимость и...

webshell

webshell 简体中文 This is a webshell collection project Give someone a rose, there is a fragrance in your hand if you download this project, please also submit a shell This project covers various common scripts Such as: asp, aspx, php, jsp, pl, py If you submit a webshell, please do not change the na...

CVE-2024-50379

CVE-2024-50379 Доказательство концепции PoC Этот репозиторий содержит сценарий доказательства концепции PoC для эксплуатации CVE-2024-50379 , уязвимости в Apache Tomcat. Уязвимость представляет собой состояние гонки Time-of-Check Time-of-Use TOCTOU, которое может привести к удаленному выполнению...

USN-8779-1: Bubblewrap vulnerabilities

It was discovered that Bubblewrap incorrectly handled certain temporary directories. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2019-12439 It was discovered that Bubblewrap incorrectly handl...