katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

beacon_health_check

비콘 상태 점검 어그레서 스크립트 Joe Vest 트위터: @joevest 설명 이 어그레서 스크립트는 비콘의 노트 필드를 사용하여 비콘의 상태를 표시합니다. 이는 다음과 같은 방법으로 수행됩니다. 각 비콘의 현재 슬립/지터 시간 추적 '최대 예상 체크인 시간'을 기준으로 상태 계산 이벤트 heartbeat1m을 사용하여 매분마다 적절한 아이콘으로 노트 필드 업데이트 새 비콘을 도착 시간과 함께 'NEW'로 레이블 지정 초기 비콘 이벤트 로그 메시지에 비콘 ID와 PID 추가 데모 YouTube 데모 상태 점검 및 아이콘 ☑ ...

CVE-2021-21985

CVE-2021-21985 vSphere Client（HTML5）には、vCenter Serverでデフォルトで有効になっているVirtual SAN Health Checkプラグインの入力検証の欠如により、リモートコード実行の脆弱性が存在します。VMwareは、この問題の重大度をCriticalレンジと評価しており、最大CVSSv3基本スコアは9.8です。 ポート443へのネットワークアクセスを持つ悪意のある攻撃者は、この問題を悪用して、vCenter Serverをホストする基盤となるオペレーティングシステム上で無制限の権限を持つコマンドを実行する可能性があります。...

GyoiThon

GyoiThon : 차세대 침투 테스트 도구 일본어 페이지는 여기에 있습니다. 발표 2018년 1월 25일: JANOG41 2018년 3월 23일: Black Hat ASIA 2018 Arsenal 2018년 8월 12일: DEFCON26 DemoLabs 2018년 10월 24일: OWS in CSS2018 2018년 11월 3일: AV TOKYO 2018 HIVE 2018년 12월 22-23일: SECCON YOROZU 2018 2019년 3월 28일: Black Hat ASIA 2019 Arsenal 문서 설치 사용법 팁 ...

CVE-2021-21985_PoC

CVE-2021-21985 漏洞代码 可用的CLASS/METHOD，用于PoC的简单示例：com.vmware.vsan.client.services.capability.VsanCapabilityProvider ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported getIsLocalDataProtectionSupportedOnVc...

CVE-2026-59734-POC

ハッカーグリッチ 🚨 CVE-2026-59734 — Coolify RCE エクスプロイト ヘルスチェックにおけるOSコマンドインジェクション → リモートコード実行 Coolifyのヘルスチェック設定におけるOSコマンドインジェクションの概念実証エクスプロイトです。 認証されたユーザーは、デプロイされたコンテナ内で任意のコマンドを実行できました。 🎯 脆弱性について Coolify は人気のオープンソース、セルフホスト型デプロイプラットフォーム（GitHubスター30,000以上）で、Heroku、Vercel、Netlifyの無料代替です。...

HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11 are susceptible to server-side request forgery. When redirects are returned by HTTP health check endpoints, Consul follows these HTTP redirects by default. An attacker can possibly obtain sensitive information, modify data,...

health-check

health-check Health Check & Troubleshooting daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin sys:x:3:3:sys:/dev:/usr/sbin/nologin sync:x:4:65534:sync:/bin:/bin/sync games:x:5:60:games:/usr/games:/usr/sbin/nologin man:x:6:12:man:/var/cache/man:/usr/sbin/nologin...

SUSE CVE-2022-29224

Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them uses gRPC. Envoy also has a feature which can "hold" prevent removal upstrea...

CVE-2026-84712

A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ ApiV2PingView, AllowAny over-serializes RBAC-gated automation-mesh data into its anonymous response, exposing the full instance inventory node hostnames, node types, UUIDs, heartbeats,...

CVE-2026-84712

A flaw in the automation-controller API allows an unauthenticated attacker to access the /api/v2/ping/ health-check endpoint. This endpoint over-serializes RBAC-gated automation-mesh data into an anonymous response, exposing the full instance inventory, including node hostnames, types, UUIDs, hea...

EUVD-2026-85609

A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ ApiV2PingView, AllowAny over-serializes RBAC-gated automation-mesh data into its anonymous response, exposing the full instance inventory node hostnames, node types, UUIDs, heartbeats,...

CVE-2026-84712

A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ ApiV2PingView, AllowAny over-serializes RBAC-gated automation-mesh data into its anonymous response, exposing the full instance inventory node hostnames, node types, UUIDs, heartbeats,...

CVE-2026-16895

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

CVE-2026-16895

CVE-2026-16895 is a fail-open logic vulnerability in the Metasploit Framework 's JSON-RPC web service interface. When an exception occurs during the database health check (db.check) and the environment variable MSF_WS_JSON_RPC_API_TOKEN is not explicitly set, the internal flag msf.auth_initialize...

CVE-2026-16895 Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

Important: Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.12.1 security update

This is an updated version of the Node Health Check Operator. This Operator is delivered by Red Hat Workload Availability RHWA. The Node Health Check Operator deploys the Node Health Check controller. The controller identifies unhealthy nodes and uses a remediation provider to remediate the...

Important: Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.7.1 security update

This is an updated version of the Machine Deletion Remediation Operator. This Operator is delivered by Red Hat Workload Availability RHWA. The Machine Deletion Remediation MDR Operator works with the Node Health Check NHC Operator to reprovision unhealthy nodes using the Machine API. The MDR...

CVE-2026-17596

Nexus Repository 3 was found to be vulnerable to stored cross-site scripting XSS. A user with the nexus:blobstores:create or nexus:blobstores:update permission could set a blob store name containing malicious script content, which would later execute in the browser of another user viewing system...

CVE-2026-17596

Nexus Repository 3 was found to be vulnerable to stored cross-site scripting XSS. A user with the nexus:blobstores:create or nexus:blobstores:update permission could set a blob store name containing malicious script content, which would later execute in the browser of another user viewing system...