BackupOperatorToolkit

BackupOperatorToolkit Usage The BackupOperatorToolkit BOT has 4 different mode that allows you to escalate from Backup Operator to Domain Admin. Use "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" before running the tool. Service Mode The SERVICE mode creates a service on the...

CVE-2018-16509

CVE-2018-16509 Campo de pruebas Docker "Se descubrió un problema en Artifex Ghostscript anterior a la versión 9.24. La comprobación incorrecta de la «restauración de privilegios» durante el manejo de excepciones /invalidaccess podría ser utilizada por atacantes capaces de proporcionar PostScript...

chaos-operator

Litmus chaos-operator for injecting chaos experiments on Kubernetes Codacy Badge...

sliver-gui

Sliver GUI Una consola de operador de escritorio para el framework Sliver C2 en el espíritu de Cobalt Strike y Havoc. Diseñada y desarrollada por Raj Kumar Mullapudi Sliver GUI es un frontend ligero de Wails v2 Go + HTML/CSS/JS plano sobre el servicio gRPC rpcpb.SliverRPC existente de Sliver. No...

CVE-2026-73747 Local Privilege Escalation Vulnerability in HPE Networking Fabric Composer

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system...

CVE-2026-73747

CVE-2026-73747 is a local privilege-escalation vulnerability in HPE Networking Fabric Composer . An authenticated low-privilege operator user with local access can elevate privileges and make limited modifications on the affected system. The CVSS 3.1 score is 2.5 (LOW) , reflecting a local attack...

EUVD-2026-69473

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system...

CVE-2026-73746 Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer API

A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

EUVD-2026-69471

A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to disrupt the availability of the affected...

EUVD-2026-69469

A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...

EUVD-2026-69451

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

CVE-2026-73714

CVE-2026-73714 is an authenticated sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can access data beyond what their existing privilege level authorizes, potentially leading to further unauthorized access. ...

renovate-operator

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

nebula

Nebula AI Powered Pentesting The Zero Layer workbench Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop surface: terminal, code, browser,...

trivy-operator

Kubernetes 原生安全工具包。（文档）...

trivy-operator

Kubernetes-native security toolkit. Documentation...

CVE-2025-51401

Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Operator Chat Name Field Triggers on Chat Owner Transfer Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage:...

CVE-2025-51397

Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Operator Surname Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software Link:...

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

Windmill < 1.603.3 - Operator Authorization Bypass

Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...