open-klara

Open KLara Open KLara は、Kaspersky Lab の KLara をコミュニティがフォークしたプロジェクトです。これは、Yara ルールを使用して大規模なマルウェアコレクションをスキャンするための分散システムです。 このプロジェクトはコミュニティによってメンテナンスされており、Kaspersky Lab とは提携していません。 機能 Web インターフェース — メール通知付きの Yara スキャンを実行して忘れる方式 ドキュメント REST API — プログラムによるジョブの送信と結果の取得 ドキュメント 分散スキャン —...

NimbusPWN-CVE-2022-29799-29800

NimbusPwn — networkd-dispatcher !NOTE 他のディストリビューション: dnf install gcc dbus-devel pkgconf（Fedora/RHEL）またはpacman -S gcc dbus pkgconf（Arch）。コンパイル行は同じです。 ⚙️ 使い方 脆弱なホスト上で非特権ユーザーとして実行します。 root@kitploit: ./nimbuspwn -c -s SHELL -c, --check non-breaking vuln check, no exploitation -s, --shell SHELL shell t...

cve-2022-31692

CVE-2022-31692 演示 概述 一个简单的 Spring Boot 应用程序，演示了一种存在 CVE-2022-31692 漏洞的配置。 该漏洞因其严重性而备受关注——它的 CVSS 3.x 基础评分为 9.8，因为它允许身份验证绕过。 本项目的目的是演示安全公告中描述的、导致该漏洞成立的条件。 应用程序期望 Spring Security 对 forward 和 include 调度器类型应用安全机制。 应用程序手动使用 AuthorizationFilter，或通过 authorizeHttpRequests 方法使用。 应用程序将 FilterChainProxy...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

faraday_agent_dispatcher

Faraday Agents Dispatcher ayuda al usuario a desarrollar integraciones con Faraday escritas en cualquier idioma. Instalación Solo ejecuta pip3 install faradayagentdispatcher y deberías ver el comando faraday-dispatcher en tu sistema. Para configurar un entorno de desarrollo es decir, para modific...

Adobe AEM Dispatcher <4.15 - Rules Bypass

Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors. id: CVE-2016-0957 info: name: Adobe AEM Dispatcher 4.15 - Rules Bypass author: geeknik severity:...

CVE-2022-22536

CVE-2022-22536 SAP内存管道（MPI）失同步漏洞 CVE-2022-22536。 描述 - CVE-2022-22536 的 PoC：SAP内存管道（MPI）失同步漏洞。 - 由 antx 于 2022-02-15 创建。 详情 SAP NetWeaver Application Server ABAP、SAP NetWeaver Application Server Java、ABAP Platform、SAP Content Server 7.53 以及 SAP Web Dispatcher...

CVE-2022-22536_SAP_Request_Smuggling_Scanner

CVE-2022-22536 SAP 请求走私扫描器 这是一个快速的、基于套接字的批量扫描器，用于 CVE-2022-22536 ，这是 SAP Internet Communication Manager ICM 和 SAP Web Dispatcher 中的一个严重请求走私漏洞。它并行测试多个主机的协议不同步行为。 CVE-2022-22536 被评为 CVSS 10.0 ，并已知在野外被利用（CISA KEV 列表）。 此工具有助于识别暴露在 HTTP 或 HTTPS 上的潜在易受攻击的 SAP 系统。 🚀 特性 支持从文件扫描 IP:PORT 列表 可选的 SSL/TLS 和证书...

JOP_ROCKET

JOP ROCKET 注意：在 2.15 版本中，我们引入了双 gadget 调度器（two-gadget dispatcher）——这大大扩展了调度器 gadget 的可能性。2021 年 5 月 26 日发布的 2.15 版本增加了很多优化和新的功能。 更新：2021 年 11 月 29 日：我已上传了 @Hack（利雅得）的幻灯片，以及一篇关于无 Shellcode JOP 的白皮书。演讲中使用的无声演示视频可在此处找到：https://www.youtube.com/playlist?list=PLynyJsHgQaJ3AfQGKVkeZJ9cWa7mIqDMV 更新：2022 ...

EUVD-2026-75109

MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execu...

CVE-2026-87927 MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher

MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execu...

CVE-2026-87927

MaxSite CMS through version 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers. By supplying base64-encoded path traversal sequences, unauthenticated attackers bypass path validation checks and execute admin-gated handler actions without authentication...

SAP NetWeaver Information Disclosure (3750721)

The version of the SAP NetWeaver kernel detected on the remote host is affected by an information disclosure vulnerability as referenced in SAP Security Note 3750721: - SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to...

EUVD-2026-56556

Dozzle: SSRF guard bypass via IPv6 transition addresses 6to4/NAT64/Teredo in webhook notification dispatcher...

GHSA-P2W3-6X73-2F6X Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher

Summary The isBlockedIP SSRF guard in Dozzle's webhook notification dispatcher blocks loopback, link-local, multicast, and unspecified addresses but does not recognize IPv6 transition mechanism addresses RFC 3056 6to4, RFC 6052 NAT64, RFC 4380 Teredo that embed arbitrary IPv4 addresses. An...

CVE-2026-73317

XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying an arbitrary job class and actor user ID in the POST body...

EUVD-2026-72754

XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying an arbitrary job class and actor user ID in the POST body...

CVE-2026-73317 XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher

XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying an arbitrary job class and actor user ID in the POST body...

CVE-2026-73317 XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher

XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying an arbitrary job class and actor user ID in the POST body...

CVE-2026-76968

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...