SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery

SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...

LocalAI - Partial Local File Read

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery SSRF and partial Local File Inclusion LFI. The endpoint supports both https-// and file-// schemes, where the latter can lead to LFI. However, the output is limited due to the...

McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting

McAfee Network Data Loss Prevention User-Agent 9.3.x contains a cross-site scripting vulnerability which allows remote attackers to get session/cookie information via modification of the HTTP request. id: CVE-2017-4011 info: name: McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting...

Netgear-WN604 downloadFile.php - Information Disclosure

There is an information leakage vulnerability in the downloadFile.php interface of Netgear WN604. A remote attacker using file authentication can use this vulnerability to obtain the administrator account and password information of the wireless router, causing the router's background to be...

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 contains a remote code execution caused by unauthenticated access via T3, IIOP, letting attackers take over the server, exploit requires network access. id: CVE-2021-2135 info: name: Oracle WebLogic Server - Remote Code Execution author:...

WAVLINK WN535 G3 - Improper Access Control

WAVLINK WN535 G3 M35G3R.V5030.180927 is susceptible to improper access control. A vulnerability in /cgi-bin/ExportAllSettings.sh allows an attacker to execute arbitrary code via a crafted POST request and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized...

Oracle E-Business Suite - Blind SSRF

Oracle E-Business Suite, Application Management Pack component User Monitoring subcomponent, is susceptible to blind server-side request forgery. An attacker with network access via HTTP can gain read access to a subset of data, connect to internal services like HTTP-enabled databases, or perform...

Gradio - Server Side Request Forgery

An SSRF Server-Side Request Forgery vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter in a GET request, an attacker can discern the status of internal ports based on the...

VMware Aria Operations for Logs - Unauthenticated Remote Code Execution

VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root. id: CVE-2023-20864 info: name: VMware Aria Operations for Logs - Unauthenticated Remo...

evillimiter-ng

Evil Limiter Next Generation Software-blue 물리적 또는 관리자 접근 권한 없이 로컬 네트워크에 연결된 장치의 대역폭업로드/다운로드을 모니터링, 분석 및 제한하는 도구입니다. evillimiter-ng는 ARP 스푸핑과 트래픽 셰이핑을 사용하여 네트워크에 있는 호스트의 대역폭을 제한합니다. 버전 3.0의 새로운 기능: CLI 대신 라이브러리로 코드 사용하기 요구 사항 nftables가 설치된 Linux 배포판 Python 3.10 이상 설치 과정에서 누락된 Python 패키지가 있을 경우 자동으...

TransparentTorProxy

A Linux CLI tool that transparently routes all system traffic through the Tor network using nftables. Features • Requirements • Installation • Usage • How It Works • Verification • Contribute No per-application setup needed - just sudo ttp start and every connection goes through Tor. !CAUTION TTP...

Network_Assessment

Оценка сети С помощью Wireshark или TCPdump можно определить, присутствует ли вредоносная активность в сетевом трафике, записанном на наблюдаемой сети. Этот скрипт на Python анализирует сетевой трафик в заданном .pcap-файле и пытается обнаружить следующие подозрительные сетевые активности и атаки...

CVE-2026-106242

A flaw was found in the Omnibox address bar component of Google Chrome. A remote attacker leveraging social engineering techniques could exploit this flaw by transmitting crafted network traffic. Successful exploitation results in information disclosure, potentially exposing sensitive user data...

proxychains

ProxyChains ver. 4.3.0 README ProxyChains는 UNIX 프로그램으로, 동적으로 링크된 프로그램에서 미리 로드된 DLL을 통해 네트워크 관련 libc 함수를 후킹hook하고 SOCKS4a/5 또는 HTTP 프록시를 통해 연결을 리디렉션합니다. 경고: 이 프로그램은 동적으로 링크된 프로그램에서만 작동합니다. 또한 proxychains와 호출할 프로그램 모두 동일한 동적 링커즉, 동일한 libc를 사용해야 합니다. 현재 버전의 알려진 제한 사항 프로세스가 fork를 수행하고, 자식 프로세스에서 DNS...

DELTA

DELTA: СИСТЕМА ОЦЕНКИ БЕЗОПАСНОСТИ SDN Теперь мы управляем DELTA в новом репозитории https://github.com/seungsoo-lee/DELTA. Пожалуйста, посетите наш новый репозиторий, и надеемся увидеться там снова. Спасибо! С наилучшими пожеланиями, -- Команда DELTA...

attack_monitor

Attack Monitor Attack Monitor is Python application written to enhance security monitoring capabilites of Windows 7/2008 and all later versions workstations/servers and to automate dynamic analysis of malware. Current modes mutually exclusive: Endpoint detection ED Malware analysis on dedicated...

eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner — это сетевой сканер для эксплойта Eternal Blue CVE-2017-0144 и Eternal Romance именованный канал CVE-2017-0145 . Скриншоты Версия 2.2 Новые реализации Проверка уязвимости Eternal Romance escan -er Разделенные результаты базы данных Escan escan -l Видео Eternal...

eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner is an network scanner for Eternal Blue exploit CVE-2017-0144 & Eternal Romance named pipe CVE-2017-0145 . Screenshots 2.2 Version New Implementations Eternal Romance Vulnerability check escan -er Escan Database Splited Results escan -l Video Eternal Scanner 2.0...

Dshell

Dshell Расширяемый фреймворк для сетевого криминалистического анализа. Позволяет быстро разрабатывать плагины для анализа сетевых пакетов. Ключевые особенности: Глубокий анализ пакетов с помощью специализированных плагинов Надёжная сборка потоков Поддержка IPv4 и IPv6 Несколько выбираемых...

python-hacklib

hacklib Инструментарий для энтузиастов хакинга, использующих Python. hacklib — это модуль Python для энтузиастов хакинга, интересующихся сетевой безопасностью. Он больше не находится в активной разработке. Установка Чтобы получить hacklib, просто выполните в командной строке: pip install hacklib...