616733 matches found
CVE-2026-105795
The Kiota OpenAPI-based HTTP Client code generator versions 1.25.1 through 1.35.0 are vulnerable to an improper limitation of pathnames (CWE-22 ). The software fails to validate the x-ai-capabilities.response_semantics.oauth_card_path value when copying it from an attacker-controlled or compromis...
installer
概述 安装 mql cnspec 扫描目标平台 软件包信息 Kubernetes 状态 Docker 容器: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: 安装 安装 mql 和 cnspec 最简单的方法是使用安装脚本。 通过 Shell 脚本（Linux 和 macOS） https://install.mondoo.com/shbash bash -c "$curl -sSL https://install.mondoo.com/sh" 通过 PowerShell Windows...
metashield-clean-up-sdk-python
============================== Metashield-clean-up-sdk-python Instalación Instale el paquete metashieldcleanup usando pip:: pip install metashieldcleanup Uso Ejemplo para limpiar un archivo. .. code-block:: python import time import base64 from metashieldcleanup.api import MetashieldCleanUp api =...
BRIntelcollector
BRIntelcollector Overview The BRIntelcollector is a Cyber Threat Intelligence CTI tool focused on Brazilian national threat indicators. The tool allows searching and consolidating information about cyber threats through multiple intelligence sources, facilitating the creation of a centralized...
cve-2022-21907
CVE-2022-21907 This package will detect exploits of CVE-2022-21907 https://corelight.com/blog/detecting-cve-2022-21907 Detection Method: HTTP HTTP data must be = 1750 bytes, and The HTTP/1.1 is not observed at the end of the exploit HTTP request. Usage: $ zeek -Cr your.pcap packages $ cat...
legacy-rails-CVE-2020-5267-patch
legacy-rails-CVE-2020-5267-patch Un parche para CVE-2020-5267 para Rails 4 y Rails 3. Actualizar Rails sería definitivamente mejor, pero mientras tanto si estás atascado en versiones antiguas de Rails, esto proporciona el monkey patch señalado en el aviso de seguridad empaquetado y probado como u...
subparse
subparse Subparse, is a modular framework developed by Josh Strochein, Aaron Baker, and Odin Bernstein. The framework is designed to parse and index malware files and present the information found during the parsing in a searchable web-viewer. The framework is modular, making use of a core parsin...
sh4d0wup
sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...
CVE-2024-22026
CVE-2024-22026 Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core" CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM formerly MobileIron server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1. This vulnerability allows a local attacker to gain root...
Guardrails
Biblioteca NVIDIA NeMo Guardrails ÚLTIMA VERSIÓN / VERSIÓN DE DESARROLLO : La rama develop sigue lo último en desarrollo. La última versión publicada es la 0.24.1. ✨✨✨ 📌 La documentación oficial de la biblioteca NeMo Guardrails está disponible endocs.nvidia.com/nemo/guardrails. ✨✨✨ La biblioteca...
CVE-2024-37084-Poc
CVE-2024-37084-Poc Configuración, análisis, exploit de demostración y PoC sobre CVE-2024-37084 Cómo usar: py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optional arguments: -h...
CVE-2019-12840_POC
CVE-2019-12840POC PoC for Webmin Package Update Authenticated Remote Command Execution An alternative to the metasploit module. All credit goes to Özkan Mustafa Akkuş https://www.pentest.com.tr/exploits/Webmin-1910-Package-Updates-Remote-Command-Execution.html...
hijagger
hijagger - comprueba los registros de paquetes en busca de paquetes secuestrables Esta herramienta comprueba a todos los mantenedores de todos los paquetes en los registros de NPM y Python Pypi en busca de dominios no registrados o registros MX no registrados en esos dominios. Si un dominio no es...
hcaptcha-challenger
hCaptcha Challenger 🚀 Afronta con elegancia el desafío de hCaptcha con un modelo de lenguaje grande multimodal. Introducción No depende de ningún script de Tampermonkey. No utiliza ningún servicio de terceros anti-captcha. Solo implementa algunas interfaces para hacer posible IA vs IA...
tippa-my-tongue
Tippa My Tongue Tippa My Tongue is an exploit that uses CVE-2022-1388 and CVE-2022-41800 to establish a root reverse shell on F5 BIG-IP products. Most CVE-2022-1388 exploits achieve code execution using /mgmt/tm/util/bash. However, this exploit uses /mgmt/shared/iapp/rpm-spec-creator, followed by...
richkit
Richkit Richkit 是一个 Python 3 包，提供以域名为输入并返回该域名附加信息的工具。它可以是对域名本身的分析，从数据库查询，从其他服务检索，或者它们的某种组合。 Richkit 的目的是提供一个可复用的域名分析、查询和检索函数库，这些函数在奥尔堡大学网络安全研究组内部共享，也向公众开放以供复用和修改。 文档可在 https://richkit.readthedocs.io/en/latest/ 找到。 要求 Python = 3.5 安装 要安装 Richkit，只需在终端输入 pip install richkit 用法 以下代码可用于分别检索 TLD 和 URL...
go-rpmdb
go-rpmdb Biblioteca para enumerar paquetes en un archivo Packages de la base de datos RPM sin bindings. package main import "fmt" "log" rpmdb "github.com/knqyf263/go-rpmdb/pkg" func main if err := run; err != nil log.Fatalerr func run error db, err := rpmdb.Open"./Packages" if err != nil return e...
CVE-2024-0044
CVE-2024-0044- CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13 CVE-2024-0044 Exploit Script This Bash script demonstrates how to exploit CVE-2024-0044. For educational and testing purposes only. Prerequisites ADB Android Debug Bridge installed an...
