CrushFTP10-Docker-CVE-2024-4040

CrushFTP 10.0 Docker Deployment vulnerabile a CVE-2024-4040 Questo repository fornisce un Dockerfile per creare un'immagine Docker e distribuire un container Linux con un server CrushFTP vulnerabile alla vulnerabilità di fuga dalla sandbox VFS di CrushFTP CVE-2024-4040. ⚠️ Disclaimer Questo...

api-scanner-docker

ماسح واجهات برمجة التطبيقات - نشر ذاتي الاستضافة ماسح واجهات برمجة التطبيقات هو أداة اختبار أمان آلية لواجهات برمجة التطبيقات تقوم بمسح واجهات REST و SOAP بحثًا عن الثغرات باستخدام مواصفات OpenAPI/Swagger وملفات WSDL. المتطلبات الأساسية محرك Docker 20.10+ Docker Compose v2 Python 3.6+ لنص الإعداد...

osint-menace

OSINT Menace Console di Ricognizione Open-Source Costruita per Cacciatori, Non per Browser. OSINT Menace è un Progetto di Pensiero Difensivo. OSINT Menace è un'applicazione web Python Dockerizzata per il triage OSINT passivo e orientato ai casi. Fornisce agli analisti un'interfaccia semplice in...

simple-maven

Damn Vulnerable C Application API Only Erste Schritte Hinweis: Dies ist eine absichtlich verwundbare App, bitte nicht auf Produktions- oder Internet-/öffentlich erreichbaren Servern hosten. Mit Vorsicht verwenden. kk Docker test root@kitploit: docker-compose up tets Manuell Installieren Sie das...

otto-support

Otto Support Server MCP per l'assistenza clienti per assistenti di codifica AI. Un singolo binario Go, autenticazione a livelli, 19 strumenti su 4 livelli di ruolo. Realizzato con mcp-go. Avvio rapido Opzione A: Container Docker consigliata Esegui tutto in un container isolato. Claude Code è...

struts2-rce

Demonstração de Exploit para CVE-2017-5638 Baseado completamente em https://github.com/piesecurity/apache-struts2-CVE-2017-5638 Um cenário realista onde um projeto de referência para um framework é implantado em um container, mas com consequências terríveis. Para se familiarizar, veja o código e...

globalping-probe

Globalping Probe Die Globalping-Plattform basiert auf einem global verteilten Netzwerk von Community-gehosteten Probes, sodass jeder Netzwerktestbefehle wie Ping oder Traceroute von jedem Standort aus ausführen kann. Werden Sie Teil der Globalping Probe-Community Globalping lebt vom Beitrag seine...

dnsmonster

Stiamo esplorando una soluzione SaaS gestita per dnsmonster! Aiuta a plasmare il futuro del monitoraggio passivo DNS condividendo il tuo feedback e le tue esigenze: Partecipa al nostro breve sondaggio Indice Dnsmonster Caratteristiche principali Installazione Linux Container Compilazione manuale...

rekono

Automate the recon, keep your time for the part that actually needs a hacker Think about how an assessment really starts. You gather public information about the target. You discover its hosts, enumerate their ports and identify the services behind them. Then you run a more specific tool against...

Malcolm

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

SecureCodingDojo

सुरक्षित कोडिंग डोजो के बारे में सुरक्षित कोडिंग डोजो सुरक्षित कोडिंग प्रशिक्षण देने के लिए एक प्लेटफॉर्म है। हालांकि इसके साथ अपना स्वयं का कमजोर प्रशिक्षण एप्लिकेशन Insecure.Inc वेबसाइट आता है, प्रशिक्षण पोर्टल का उपयोग अन्य प्रशिक्षण एप्लिकेशनों के साथ भी किया जा सकता है। प्लेटफॉर्म की ताकत इस...

fsociety

fsociety Um Framework Modular de Testes de Penetração Instalação root@kitploit: pip install fsociety Atualização root@kitploit: pip install --upgrade fsociety Utilização root@kitploit: usage: fsociety -h -i -s A Penetration Testing Fr...

cloudsploit

CloudSploit di Aqua - Scansioni di Sicurezza Cloud Avvio rapido Generico root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $...

Log4Shell-CVE-2021-44228-Demo

Log4ShellCVE-2021-44228 Demo Umgebungseinrichtung Client Überall, wo auf den HTTP-Server mit dem curl-Befehlszeilentool zugegriffen werden kann Verwundbare App auf HTTP-Server mit log4j Amazon Linux 2 x86-basiert EC2-Instanz / CentOS Azure Virtual Machine root@kitploit: $ yum install docker -y $...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

gha-lab-227431b300

Kiwi TCMS - Open-Source-Testmanagement .. image:: https://img.shields.io/docker/pulls/kiwitcms/kiwi :target: https://kiwitcms.readthedocs.io/en/latest/installingdocker.html :alt: Downloads from Docker Hub .. image:: https://readthedocs.org/projects/kiwitcms/badge/?version=latest :target:...

CVE-2026-53985

CVE-2026-53985 affects Ground Station prior to version 0.6.0. It describes an unauthenticated denial-of-service in the Socket.IO server’s service_control event handler, allowing an unauthenticated network peer to forcibly terminate the ground-station process by sending a restart_service command. ...

CVE-2026-53975

OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn without any allowlist, blocklist, or...

CVE-2026-53975 OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/exec

OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn without any allowlist, blocklist, or...

CVE-2026-47669 DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE

DbGate is cross-platform database manager. In versions 7.1.8 and prior, the unzipDirectory function in packages/api/src/shell/unzipDirectory.js line 27 does not validate that extracted file paths stay within the output directory. A malicious ZIP with ../ entries writes files anywhere on the...