SecurityManageFramwork

SecurityManageFramwork-SeMF README English | 中文 Introduction SEMF is a security management platform for enterprise intranet, which includes functions of asset management, vulnerability management, account management, knowledge base management and security scanning automation. It can be used for...

iox

iox English | 中文 Tool for port forward & intranet proxy, just like lcx/ew, but better Why write? lcx and ew are awesome, but can be improved. When I first used them, I can't remember these complicated parameters for a long time, such as tran, slave, rcsocks, sssocks.... The work mode is clear, wh...

Ladon

Ladon Large-scale Intranet Penetration Scanner Cobalt Strike Plugin Memory Loading Program Introduction Ladon is a large-scale intranet penetration scanner, domain penetration, and lateral movement tool, featuring PowerShell modules, Cobalt Strike plugins, memory loading, and fileless scanning. I...

zscan

Zscan a scan blasting tool set 📄中文文档 Result output format -A partial screenshot of the output Introduce🎉 ​ Zscan is an open source collection of Intranet port scanners, blasting tools, and other utilities. Based on host discovery and port scanning, you can blow up mysql, MSSQL, Redis, Mongo,...

Yasso

Yasso Powerful intranet penetration auxiliary toolset - let Yasso be like the wind. Supports brute-forcing of RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, MySQL, WinRM and other services, fast port scanning, powerful web fingerprint recognition, one-click exploitation of various built-in services...

Venom

Venom - A Multi-hop Proxy for Penetration Testers 简体中文 ｜ English Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet, and easily manage intranet nodes. This tool is limited to security research and...

CVE-2026-102337

Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untrusted users with access to the File Manager or Upload and Download modules can direct Webmin's server-side URL download functionality to non-public network addresses because download destinations are not...

CVE-2026-102337 Webmin: SSRF exploit in Upload and Download and File Manager modules

Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untrusted users with access to the File Manager or Upload and Download modules can direct Webmin's server-side URL download functionality to non-public network addresses because download destinations are not...

CVE-2026-102337

Webmin, a web-based system administration tool for Unix-like servers, is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 2.652 . An attacker with access to the File Manager or Upload and Download modules can exploit the server-side URL download functionality because download...

PT-2026-137225

Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untrusted users with access to the File Manager or Upload and Download modules can direct Webmin's server-side URL download functionality to non-public network addresses because download destinations are not...

CVE-2026-95722

A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a local attacker with low privileges to execute arbitrary commands with elevated privileges on the underlying operating system...

CVE-2026-95723

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-95724

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access VIA. Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information...

CVE-2026-95728

An arbitrary file write vulnerability exists in the Virtual Intranet Access VIA client. Successful exploitation could allow a local attacker with low privileges to escalate privileges on the affected system...

EUVD-2026-116205

An arbitrary file write vulnerability exists in the Virtual Intranet Access VIA client. Successful exploitation could allow a local attacker with low privileges to escalate privileges on the affected system...

CVE-2026-95728

An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client for Linux. A local attacker with low privileges could successfully exploit this flaw to achieve privilege escalation on the affected system. Specific details regarding the root cause, impacted versions, or av...

CVE-2026-95728 Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux

An arbitrary file write vulnerability exists in the Virtual Intranet Access VIA client. Successful exploitation could allow a local attacker with low privileges to escalate privileges on the affected system...

CVE-2026-95724

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA) . This flaw could allow an unauthenticated remote attacker to bypass authentication mechanisms, potentially leading to the disclosure of sensitive information . No specific affected versions, r...

EUVD-2026-116201

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access VIA. Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information...

CVE-2026-95724 Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access VIA. Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information...