CypherDog

CypherDog4.3 PoSh BloodHound Hundeflüsterer a.k.a. PowerShell-Cmdlets zur Interaktion mit BloodHound-Daten über die Neo4j-HTTP-API Kompatibel mit Bloodhound 4.3+ und neo4j 4.4+...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. ANALISI DEL SISTEMA Identificazione della superficie d'attacco dall'ambiente Docker Partiamo da ciò che è in esecuzione nell'ambiente. Elenchiamo tutti i container attivi: root@kitploit: docker ps Risultato: Il container p1/lab10:latest è in esecuzione ed espone 2 porte...

OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection

OpenTSDB contains a command injection caused by insufficient validation of parameters passed to the legacy HTTP query API, letting attackers inject crafted OS commands and execute malicious code, exploit requires sending crafted parameters. id: CVE-2023-25826 info: name: OpenTSDB = 2.4.1 -...

Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS Wrapper per massimizzare le capacità dell'app iSH iOS senza jailbreak. Cosa Fa API HTTP + dashboard integrata su http://127.0.0.1:8088 Streaming in tempo reale WebSocket su ws://127.0.0.1:8089 Auto-rilevamento degli strumenti SynChan Huginn, OmnINT, Daedalus, Argus,...

CVE-2019-20933

LAB 5-CVE-2019-20933 I. ANALISI DEL SISTEMA Identificazione della Superficie d'Attacco Iniziando con ciò che è in esecuzione nell'ambiente. Elenco tutti i container attivi: root@kitploit: docker ps La vittima espone una singola porta:8086. Attualmente, non ho informazioni dettagliate sul target...

burp-cc-bridge

CC-Bridge Un'estensione di Burp Suite API Montoya che espone i primitive più utili di Burp tramite un'API HTTP su localhost, così che una shell di coding agente Claude Code, OpenAI Codex, ecc. possa guidare Burp da curl. Funziona su Burp Community. Download Prendi l'ultimo JAR della release —...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

CVE-2026-76313

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:43+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-21 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtmrhqaepp2y...

BIT-CONSUL-2026-19113 Unauthenticated denial of service via unbounded request body processing

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

CVE-2026-49989

CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any blob whose SHA-1 digest they know, and can plant new blobs unconditionally, in any blob table, regardless of GRANTs. CrateDB has two ways to access blob storage: SQL SELECT...

EUVD-2026-58717

CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any blob whose SHA-1 digest they know, and can plant new blobs unconditionally, in any blob table, regardless of GRANTs. CrateDB has two ways to access blob storage: SQL SELECT...

CVE-2026-49989

CrateDB prior to 6.2.8 and 6.3.2 exposes an authorization bypass in the HTTP blob API. The HTTP path (GET/PUT/DELETE /_blobs/{table}/{digest}) authenticates requests but does not enforce privileges via AccessControl, unlike the SQL path. As a result, any authenticated user who knows a blob’s SHA-...

CVE-2026-49989 CrateDB's Blob HTTP handler bypasses authorization

CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any blob whose SHA-1 digest they know, and can plant new blobs unconditionally, in any blob table, regardless of GRANTs. CrateDB has two ways to access blob storage: SQL SELECT...

CVE-2026-19113

A flaw was found in Consul. A remote, unauthenticated attacker could exploit several agent HTTP API endpoints by sending a request with an unbounded body. This could cause the agent to consume substantial memory, leading to a denial of service DoS condition...

Linux Distros Unpatched Vulnerability : CVE-2026-19113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A...

Security Bulletin: Unauthenticated denial of service via unbounded request body processing

Summary Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability,...

UBUNTU-CVE-2026-19113

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

CVE-2026-19113

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

CVE-2026-19113 Unauthenticated denial of service via unbounded request body processing

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

CVE-2026-19113

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...