GitMonitor

GitMonitor GitMonitor One way to continuously monitor sensitive information that could be exposed on Github Summary I know that there are many other tools available for finding sensitive information currently leaked on Github, I myself still use some of them. However, I think they still lack some...

teatime

Teatime - Un Framework de Ataque RPC para Blockchain .. image:: https://img.shields.io/pypi/v/teatime.svg :target: https://pypi.python.org/pypi/teatime .. image:: https://img.shields.io/travis/dmuhs/teatime.svg :target: https://travis-ci.com/dmuhs/teatime .. image::...

extrude

extrude Analiza binarios en busca de características de seguridad faltantes, divulgación de información y más. 🚧 Extrude se encuentra en las primeras etapas de desarrollo y actualmente solo admite binarios ELF y MachO. Los binarios PE Windows serán compatibles pronto. Uso root@kitploit: Usage:...

RastLeak

RastLeak Herramienta para filtrar información automáticamente mediante búsquedas con motores de hacking Google y Bing. Cómo instalar root@kitploit: git clone https://github.com/n4xh4ck5/RastLeak.git Instalar dependencias con pip: root@kitploit: pip install -r requirements.txt Para instalar wget:...

CVE-2017-16994

/ disablemapminadd.c / / / include include include include include include include / los offsets pueden diferir, el kernel fue compilado personalizado puedes leer vmlinux y calcular el offset al probar / / define OFFSETKERNELBASE 0x000000 / define MMAPMINADDR 0x1101de8 define DACMMAPMINADDR...

cve-2022-21877

POC CVE-2022-21877 Este repositorio contiene un POC para el CVE-2022-21877, encontrado por Quang Linh, trabajando en STAR Labs. Se trata de una fuga de información encontrada dentro del controlador spaceport.sys. Se puede encontrar una publicación de blog adjunta en esta dirección. Uso Para...

CVE-2000-0649

CVE-2000-0649 CVE-2000-0649 es una vulnerabilidad de bajo riesgo que puede revelar las direcciones IP internas del servidor. Los detalles oficiales están aquí: Rapid7 CVE NIST Esta vulnerabilidad en particular me interesó porque parece afectar también a las configuraciones actuales de NGINX y a...

CVE-2024-7339

CVE-2024-7339: Vulnerabilidad de fuga de información en dispositivos DVR. Exploiter es una herramienta de detección y explotación de vulnerabilidades para CVE-2024-7339, una vulnerabilidad de fuga de información en dispositivos DVR. Más de 400,000+ dispositivos filtran información como el modelo...

dp_cryptomg

dpcryptomg Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler. Exploitation leads to access to a file manager utility capable up uploading arbitrary files, usually leading to remote code execution. The vulnerability is caused by an...

freebsd-dirent-info-leak-bugs

¿Cómo encontré los bugs? 1. Decido aleatoriamente auditar los sistemas de archivos en FreeBSD 2. Investigo un poco y descubro que el sistema de archivos predeterminado es una combinación de FFS y UFS 3. Dedico un tiempo a auditar ufscreate y encuentro 0 bugs 4. Ve aquí y revisa el historial de...

SIDECHANNEL-CVE-2022-38029

Big fire collab with @cof123 on SIDECHANNEL info leak + CVE-2022-38029 chainKALPC UAF+ carrotc4k3 sidechannel Under Construction... Please come back later... Not finished yet...

CVE-2018-4901

CVE-2018-4901 PoC de crash y PoC de fuga de información Detalles en: https://bigric3.blogspot.com/2018/03/cve-2018-4901-analysisadobe-acrobat.html...

USN-8826-1: LXC vulnerabilities

Maher Azzouzi discovered that LXC did not correctly handle logging certain failure messages. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2022-4795...

AntD Admin - Sensitive Information Disclosure

AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...

LearnPress < 4.2.6.8.1 - Information Disclosure

LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by incorrect implementation of getitemspermissionscheck function in all versions up to 4.2.6.8, letting unauthenticated attackers extract user emails and basic information. id: CVE-2024-5483 info: name: LearnPress...

vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak

vLLM = 0.23.0 incompletely fixes CVE-2026-22778. The original fix added sanitizemessage to the OpenAI router but the Anthropic-compatible router /v1/messages echoes strexc directly. id: CVE-2026-54236 info: name: vLLM = 0.23.0 - Anthropic Router Heap Address Information Leak author: kenlacroix...

CyberPanel 2.4.3-2.4.5 - AI Scanner Debug Disclosure

CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...

TrakSYS 11.x.x - Sensitive Data Exposure

A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. The attack may be initiated remotely. The exploit has been...

Event Monster <= 1.4.3 - Information Exposure Via Visitors List Export

The Event Monster Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.3 via the Visitors List Export file. During the export, a CSV file is created in the wp-content folder with a hardcoded filename...

User Profile Picture < 2.5.0 - Sensitive Information Disclosure

The REST API endpoint getusers in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less...