CVE-2023-23752

CVE-2023-23752 这是CVE-2023-23752漏洞的利用证明代码。它允许攻击者从目标应用程序中提取敏感信息，例如用户名、密码和数据库名称。 使用方法 要使用此代码，可以按照以下步骤操作： 1. 克隆此仓库或下载CVE-2023-23752.py文件。 2. 确保您的系统上已安装Python 3和所需的软件包（argparse和requests）。 3. 打开终端或命令提示符，导航到CVE-2023-23752.py文件所在的目录。 4. 使用以下命令运行脚本： python CVE-2023-23752.py -u -o...

CVE-2020-8163

CVE-2020-8163 CVE-2020-8163 的环境与漏洞利用：Rails 5.0.1 和 4.2.11.2 中用户提供的本地名称导致的盲远程代码执行 创建环境 1. 创建 docker 容器，将端口 4000 映射到 8001 sudo docker run --rm -it -p 8001:4000 ruby:2.3 bash 2. 在容器中更新并安装一些工具 apt update && apt install unzip libz-dev libiconv-hook1 libiconv-hook-dev net-tools nodejs -y 3. 获取容器 id sud...

wordlistgen

wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...

CVE-2019-14322

CVE-2019-14322 针对 faisalfs10x 漏洞利用的修改：CVE-2019-14322 概念验证：路径名到受限目录的限制不当（“路径遍历”） https://www.acunetix.com/vulnerabilities/web/odoo-lfi-cve-2019-14322/ https://nvd.nist.gov/vuln/detail/CVE-2019-14322 描述 在 Pallets Werkzeug 0.15.4 及之前版本中发现了一个漏洞，已被评为严重级别。该漏洞影响 Windows 组件的 SharedDataMiddleware...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

phishing_catcher

Phishing Catcher Catch possible phishing domains in near real time by looking for suspicious TLS certificate issuances reported to the Certificate Transparency Log CTL via the CertStream API. "Suspicious" issuances are those whose domain name scores beyond a certain threshold based on a...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

weape

wEAPe Weape-Wireless-EAP-Extractor Script ============================================ Auto extracts EAP 802.1x user names Developed by Daniel Compton at Info-Assure Ltd https://github.com/commonexploits/weape.git Installing git clone https://github.com/commonexploits/weape.git How To Use...

CrossLinked

CrossLinked CrossLinkedは、検索エンジンのスクレイピングを利用して組織から有効な従業員名を収集するLinkedIn列挙ツールです。この手法は、APIキーや認証情報を使用せず、LinkedInに直接アクセスすることなく正確な結果を提供します！ 目次 インストール 前提条件 命名形式 高度な書式設定 検索 使用例 スクリーンショット 解析 使用例 スクリーンショット 追加オプション プロキシローテーション コマンドライン引数 貢献 インストール PyPi PyPiから最新の安定版をインストール: pip3 install crosslinked Poetry...

pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

spyse.py

spyse.py Python API wrapper and command-line client for the tools hosted on spyse.com. "Spyse is a developer of complete DAAS Data-As-A-Service solutions for Internet security professionals, corporate and remote system administrators, SSL / TLS encryption certificate providers, data centers and...

Blinko <= 1.8.3 - User Information Leak

Blinko = 1.8.4 contains an information disclosure caused by a publicly accessible endpoint exposing user information including usernames, roles, and account creation dates, letting remote attackers access sensitive user data, exploit requires no special privileges. id: CVE-2026-23486 info: name:...

WeGIA <= 3.6.4 - Remote Code Execution

WeGIA = 3.6.5 contains a remote code execution caused by improper validation of backup file names in the database restoration functionality, letting attackers with administrative access execute arbitrary OS commands id: CVE-2026-28409 info: name: WeGIA = 3.6.4 - Remote Code Execution author:...

PraisonAI AgentOS - Information Disclosure

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

拭目以待 针对 ZoneMinder 事件导出功能（web/includes/downloadfunctions.php）中 OS 命令注入漏洞的概念验证。 监控器名称通过手动单引号包裹的方式直接插入到 shell 命令中，而非使用 escapeshellarg。能够创建监控器的攻击者可以注入任意 shell 命令，当任何用户触发事件导出时，这些命令将以 www-data/进程运行用户身份执行。 根本原因 2023 年 10 月 4 日的提交 44c5c3c 引入了 downloadfunctions.php...

CVE-2026-9806

CVE-2026-9806 CVE-2026-9806 是一个影响 CTI Transmute 已修复版本之前版本的存储型跨站脚本（Stored XSS）漏洞。该缺陷存在于通知面板中，包含用户可控转换名称的通知消息通过 innerHTML 在通知铃铛下拉框中渲染，未经过适当的清理。如果攻击者能够创建或影响通知中出现的转换名称，则当已认证用户打开通知面板时，其浏览器中可能会执行任意 JavaScript。 受影响软件 属性 值 产品 CTI Transmute 受影响版本 已修复版本之前的版本 受影响组件 通知面板 漏洞类型 存储型跨站脚本 Stored XSS 漏洞类型...

CVE-2026-107589

Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to generate arbitrary account names...

CVE-2026-107589

Jacamar CI versions prior to v0.30.0 are vulnerable to insufficient job validation for service accounts. This flaw allows authenticated CI users to generate arbitrary account names , potentially facilitating an authentication bypass by spoofing. The documents do not provide specific exploit infor...

CVE-2026-105828

Parse Server versions 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 are vulnerable to an information disclosure vulnerability via GraphQL errors. Even when public introspection is disabled, unauthenticated attackers possessing a public Application Id can send crafted operations to trigger ...

EUVD-2026-95015

Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send...