day03-jenkins-23897

Dia 3 — Leitura arbitrária de arquivos via CLI do Jenkins CVE-2024-23897 Ideia: Jenkins ≤ 2.441 LTS ≤ 2.426.2 expande @/path dentro de argumentos da CLI. Usuários não autenticados podem fazer o Jenkins ler arquivos locais e refletir suas primeiras linhas através da saída de ajuda da CLI. Corrigid...

CVE-2021-41773

Scanner CVE-2021-41773 Este script testa a vulnerabilidade de path traversal e inclusão local de arquivos no Apache versão 2.4.29. Este script não retorna arquivos locais, apenas verifica o servidor web e informa se ele é vulnerável ou não. Uso: python3 cve-2021-41773-scanner.py Endereço IPv4...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

CVE-2024-28995

Эксплойт для CVE-2024-28995 5 июня 2024 года компания SolarWinds опубликовала уведомление об уязвимости CVE-2024-28995 — высокоопасной уязвимости обхода каталогов, затрагивающей их решение для передачи файлов Serv-U. Уязвимость была обнаружена исследователем Хусейном Дахером из Web Immunify...

hblock

Migliora la tua sicurezza e privacy bloccando domini di pubblicità, tracciamento e malware. A cosa serve? hBlock è uno script shell conforme a POSIX che ottiene un elenco di domini che servono pubblicità, script di tracciamento e malware da diverse fonti e crea un file hosts, tra gli altri format...

wa-crypt-tools

WhatsApp Crypt Tools Decrittografa e crittografa facilmente i file .crypt12, .crypt14 e .crypt15 di WhatsApp e WA Business! Per la decrittazione, ti serve il file della chiave o la chiave di 64 caratteri. Il file della chiave si chiama "key" se il backup è crypt14 o "encryptedbackup.key" se il...

Nemesis

Panoramica Nemesis è una piattaforma centralizzata open-source per l'elaborazione dei dati che acquisisce, arricchisce e consente l'analisi collaborativa con umani e IA dei file raccolti durante le valutazioni di sicurezza offensive. Nemesis 2.0 è basato su Docker con una forte integrazione Dapr...

multiscanner

MultiScanner Introduction MultiScanner is a file analysis framework that assists the user in evaluating a set of files by automatically running a suite of tools for the user and aggregating the output. Tools can be custom built Python scripts, web APIs, software running on another machine, etc...

snallygaster

snallygaster Encontra vazamentos de arquivos e outros problemas de segurança em servidores HTTP. o quê? snallygaster é uma ferramenta que procura por arquivos acessíveis em servidores web que não deveriam ser públicos e podem representar um risco de segurança. Exemplos típicos incluem repositório...

Malicious code in pybitjs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611713d33cb9efee440b0a416812cbb2ceda3d43c0cdc73c1f8b353400209df5 The package's setuptools cmdclasses BuildPy, Develop invoke node pybitjs/js/main.js during pip install, and write a pybitjs.pth file containing impor...

MAL-2026-14545 Malicious code in pybitjs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611713d33cb9efee440b0a416812cbb2ceda3d43c0cdc73c1f8b353400209df5 The package's setuptools cmdclasses BuildPy, Develop invoke node pybitjs/js/main.js during pip install, and write a pybitjs.pth file containing impor...

CVE-2025-63298

CVE-2025-63298 È stata identificata una vulnerabilità di path traversal in SourceCodester Pet Grooming Management System 1.0, che interessa il componente admin/managewebsite.php. Un utente autenticato con privilegi amministrativi può sfruttare questa falla inviando una richiesta POST appositament...

CVE-2023-4220-Exploit

CVE-2023-4220-Exploit LMS Chamilo 1.11.24 CVE-2023-4220 Эксплойт Эксплойт для CVE-2023-4220 использует ошибку программирования в LMS Chamilo, которая позволяет загрузить файл на сервер без каких-либо ограничений. Этот эксплойт был написан для нашей машины Easy permX с HTB, с любовью для CTF-игрок...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

CVE-2026-63179

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

CVE-2025-61165

An arbitrary file upload vulnerability in the /v1/mydrive/batchupload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file...

strelka

Lançamentos | Documentação | Pull Requests | Issues !Pull...

strelka

Releases | Documentation | Pull Requests | Issues !Pull...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...