SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()

Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...

Vtiger CRM v7.2.0 - Directory Listing

Vtiger CRM v7.2.0 contains a directory traversal vulnerability caused by improper access controls in /libraries and /layout directories, letting attackers display hidden files and list directories, exploit requires no authentication. id: CVE-2020-19363 info: name: Vtiger CRM v7.2.0 - Directory...

ADTrapper

ADTrapper - Active Directory 安全分析平台 专业 Active Directory 安全分析与威胁检测平台 将 Windows 身份验证日志转化为可操作的安全洞察，配备高级威胁检测和交互式可视化 概述 ADTrapper 是一个全面的安全分析平台，专为网络安全专业人员设计，用于分析 Windows Active Directory 身份验证日志。该平台提供高级威胁检测、异常分析和交互式可视化，帮助识别和调查安全事件。 主要功能 54+ 检测规则 - 暴力破解、密码喷洒、权限提升、ADCS 攻击等 交互式可视化 - 用于网络关系的力导向图 SharpHound...

tplink-smartplug

TP-Link WiFi SmartPlug Client and Wireshark Dissector For the full story, see Reverse Engineering the TP-Link HS110 tplinksmartplug.py A python client for the proprietary TP-Link Smart Home protocol to control TP-Link HS100, HS110 and KP115 WiFi Smart Plugs. The SmartHome protocol runs on TCP por...

tiktok-scraper

TikTok Scraper & Downloader 从TikTok抓取并下载有用的信息。 无需登录或密码 这不是官方API支持等。这只是一个使用TikTok Web API来抓取媒体和相关元信息的爬虫。 内容 功能 待办事项 贡献 安装 使用 在终端中 终端示例 管理下载历史 批量抓取和下载 输出文件示例 Docker 构建 运行 模块 方法 选项 使用Promise 使用事件 如何获取/设置会话值 如何访问/下载视频 输出示例 视频流方法 getUserProfileInfo getHashtagInfo getVideoMeta getMusicInfo 重要说明...

accfly

你的“安全”摄像头有多安全？ 执行摘要 2020年初，在我之前的工作单位，我有机会参加了一次内部pwn2own风格的活动。有几个可用的目标，但我最感兴趣的是 Accfly 无线安全摄像头。不幸的是，我没能在实际活动中完成我的研究，但由于没有其他人尝试攻击这个设备，我继续进行了下去。 研究的主要焦点是可能导致远程代码执行（RCE）的漏洞。这种漏洞允许攻击者完全控制设备，对于视频摄像头来说，可能导致所有者隐私的完全泄露。不幸的是，该设备的固件被发现存在许多此类问题。...

CVE-2026-89250

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFile.php endpoint that streams recorded FLV files from the temporary directory. Attackers can request the endpoint with a known or guessed stream key to downlo...

CVE-2026-89250 WWBN AVideo Unauthenticated File Read via getRecordedFile.php

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFile.php endpoint that streams recorded FLV files from the temporary directory. Attackers can request the endpoint with a known or guessed stream key to downlo...

twint

TWINT - Twitter 情报工具 无需身份验证。无需 API。无限制。 Twint 是一个用 Python 编写的先进 Twitter 抓取工具，允许在不 使用 Twitter API 的情况下抓取 Twitter 个人资料中的推文。 Twint 利用 Twitter 的搜索运算符，让您可以抓取特定用户的推文、抓取与特定主题、话题标签和趋势相关的推文，或者从推文中筛选出 敏感 信息，如电子邮件和电话号码。我发现这非常有用，而且您也可以发挥创意，实现更多功能。 Twint 还会向 Twitter 发送特殊查询，使您能够无需 任何身份验证、API、Selenium 或浏览器模拟，即可...

CVE-2026-25130-Cybersecurity-AI-CAI-Framework-0.5.10

CVE-2026-25130 – Inyección de Argumentos / Inyección de Comandos del Sistema Operativo en el Framework de IA de Ciberseguridad CAI – PoC Autor: Mohammed Idrees Banyamer País: Jordania GitHub: https://github.com/yourusername Instagram: @banyamersecurity Resumen Este repositorio contiene una Prueba...

CVE-2026-22812-exploit

Herramienta de Explotación CVE-2026-22812 Kit de explotación completo para CVE-2026-22812 - RCE no autenticado en OpenCode 🎯 Descripción general La Herramienta de Explotación CVE-2026-22812 es un framework de explotación integral para la vulnerabilidad de ejecución remota de código no autenticada...

CVE-2026-23744-POC

CVE-2026-23744 — RCE no autenticado en servidores MCP Prueba de concepto PoC pord3vn0mi Resumen CVE-2026-23744 es una vulnerabilidad de Ejecución Remota de Código RCE no autenticada en servidores compatibles con MCP expuestos en el puerto 6274. El endpoint /api/mcp/connect acepta un objeto...

CVE-2026-80087

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-12940-Langflow-Unauth-RCE

CVE-2026-12940 — Langflow OSS ≤ 1.10.1 RCE no autenticado inyección de variables de entorno en MCP stdio Ejecución remota de código no autenticada en Langflow OSS hasta 1.10.1. La lista negra de variables de entorno que protege la configuración del servidor MCP stdio DANGEROUSENVVARS omite...

CVE-2025-47812

CVE-2025-47812 — Wing FTP服务器未授权远程代码执行 root@kitploit: ██╗ ██╗██╗███╗ ██╗ ██████╗ ███████╗████████╗██████╗ ██║ ██║██║████╗ ██║██╔════╝ ██╔════╝╚══██╔══╝██╔══██╗ ██║ █╗ ██║██║██╔██╗ ██║██║ ███╗ █████╗ ██║ ██████╔╝ ██║███╗██║██║██║╚██╗██║██║ ██║ ██╔══╝ ██║ ██╔═══╝ ╚███╔███╔╝██║██║ ╚████║╚██████╔╝ ██║...

CVE-2026-52774

YesWiki (a PHP wiki system) is vulnerable to reflected XSS (CWE-79) in its Bazar widget handler prior to version 4.6.6. The id GET parameter is reflected into the data-formid and data-iframeUrl HTML attributes using only strip_tags(), which does not escape double quotes. An unauthenticated attack...

CVE-2026-52774 Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWiki

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using striptags only. Because striptags does not escape double quotes, an attacker can break out of the attribute value, inject an event handler such ...

CVE-2026-79391

Trueview 6.0.23.4 contains an unauthenticated MQTT broker that accepts client connections on TCP port 1883 without requiring any authentication. A remote attacker with network access can establish an MQTT session and perform unauthorized publish or subscribe operations , impacting confidentiality...

CVE-2026-79391

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...