644 matches found
policymaker
policymaker Generate a real vulnerability-disclosure policy — VDP, safe harbor, security.txt & DNS Security TXT — in minutes. No lawyer required...
bbrecon
This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...
CVE-2019-16097
CVE-2019-16097 Harbor Unauthorized Admin Creation Vulnerability Principle docker and poc based on pocsuite framework...
CVE-2019-16097
CVE-2019-16097-batch Descargo de responsabilidad Solo para uso en investigación de seguridad. No lo utilice para pruebas ilegales. ¡¡¡Las consecuencias son bajo su propia responsabilidad!!! CVE-2019-16097-batch Script de explotación de vulnerabilidad en lote Agregue direcciones objetivo en lote e...
CVE-2019-16097
CVE-2019-16097 This program is only for security research, do not use it illegally! Vulnerability Impact Attackers can create an administrator account, upload malicious images, and infect clients using the repository. Affected Component Harbor Affected Versions 1.7.0-1.8.2 Remediation Upgrade to...
harbor
Introducción del equipo El equipo de seguridad Chongqing Jiugongge se dedica a compartir herramientas de seguridad de código abierto. Sus líneas de investigación cubren múltiples áreas como red team/blue team, seguridad web, seguridad móvil, desarrollo seguro, construcción de seguridad empresaria...
CVE-2019-16097-batch
CVE-2019-16097-batch Disclaimer For security research purposes only. Do not use for illegal testing. Bear all consequences yourself!!! CVE-2019-16097-batch Batch exploit script Add target URLs in bulk in the url.txt file http://1.1.1.1 http://2.2.2.2 Run this script with Python. The verification...
harbor-give-me-admin
harbor管理者追加脆弱性検出ツール 0x00 概要 2019年9月、harborに登録機能を利用して管理者を追加できる脆弱性が発覚しました。登録API api/users を使用し、POSTパラメータに"hasadminrole":true を設定すると、直接管理者を追加できます。 本ツールは単一URLまたは一括検出をサポートします。 0x01 要件 python2.7 pip install requests 0x02 クイックスタート 使用法: python harbor-give-me-admin.py -h 単一URL検出: python...
Harbor <=1.82.0 - Privilege Escalation
Harbor 1.7.0 through 1.8.2 is susceptible to privilege escalation via core/api/user.go, which allows allows non-admin users to create admin accounts via the POST /api/users API when Harbor is setup with DB as an authentication backend and allows user to do self-registration. id: CVE-2019-16097...
CVE-2022-46463
CVE-2022-46463 Harbor public image download Harbor is an open-source image hosting platform. This script enumerates all public images and supports dump operations similar to docker pull, making it easy to find sensitive leaked information from publicly exposed images. Usage root@kitploit: $ pytho...
boatcrash
boatcrash Exploit for CVE-2019-19030 that affects Harbor versions Use this script on Harbor instances running versions under 1.10.3 or 2.0.1 to enumerate all projects present in the platform. It can also be used to enumerate projects on higher versions but you will only be able to enumerate publi...
CVE-2022-46463
CVE-2022-46463 CVE-2022-46463POC Harbor Unauthorized For vulnerability details, see Stack Community Use root@kitploit: python3 cvve-2022-46463.py -u https://127.0.0.1:5003 Options root@kitploit: -u URL, --url URL Target URL e.g. http://example.com -h, --help Show help message and exit Directly...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login-fips, flux, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-aws-vpclattice, request-1279, cloudbeat-fips, crossplane-provider-aws-appflow-fips, kustomize-fips, go-licenses, external-dns-fips, nri-elasticsearch,...
GO-2025-3607 vulnerabilities
Vulnerabilities for packages: tailscale, harbor, harbor-fips, zitadel...
GO-2025-3460 vulnerabilities
Vulnerabilities for packages: harbor, zot, harbor-fips, kots...
GO-2024-2958 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy-fips, zot, harbor-scanner-trivy...
GO-2024-3016 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
GO-2024-3331 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
