ThreatMapper

ThreatMapper - Runtime Threat Management and Attack Path Enumeration for Cloud Native !NOTE This project is maintained by https://threatmapper.org...

wordlists

Wordlists 실무 기반 인포섹 워드리스트, 정기적으로 업데이트 현재 워드리스트 기술 이 워드리스트들은 여기에 나열된 CMS/서버/프레임워크의 소스 코드를 기반으로 합니다. 현재 워드리스트는 다음과 같습니다: Wordpress Joomla Drupal Magento Ghost Tomcat 각 워드리스트에는 2가지 버전이 있습니다: 기본예: tomcat.txt: 저장소에 있는 각 파일의 전체 경로를 나열합니다. root@kitploit:...

Breacher

Breacher A script to find admin login pages and EAR vulnerabilites. Features Multi-threading on demand Big path list 482 paths Supports php, asp and html extensions Checks for potential EAR vulnerabilites Checks for robots.txt Support for custom patns Usages Check all paths with php extension...

dirstalk

Dirstalk Dirstalk은 웹 서버에서 경로를 무차별 대입brute force하도록 설계된 멀티 스레드 애플리케이션입니다. 이 도구는 dirbuster 및 dirb에서 제공하는 기능과 유사한 기능을 포함합니다. 여기서 실제 동작을 확인할 수 있습니다: Contents 사용 방법 스캔 유용한 리소스 사전 생성기 다운로드 개발 라이선스 ↑ 사용 방법 애플리케이션은 자체 문서화되어 있으며, dirstalk -h를 실행하면 사용 가능한 모든 명령어와 간단한 설명이 출력됩니다. 각 명령어에 대한 도움말은 distalk -h를 통...

rbuster

Rbuster 또 다른 dirbuster 일반적인 명령줄 옵션 -a - 요청에 보낼 사용자 에이전트 문자열을 지정합니다. -c - 필요한 쿠키를 지정하는 데 사용합니다 인증 시뮬레이션. 헤더. -f - 와일드카드 결과가 있는 도메인을 강제로 처리합니다. -l - 응답 길이를 표시합니다. -r - 리디렉션을 따릅니다. -s - '긍정'으로 간주할 상태 코드 목록의 쉼표로 구분된 집합 기본값: 200,204,301,302,307. -u - 전체 URL 스킴 포함 또는 기본 도메인 이름. -v - 자세한 출력 모든 결과...

CVE-2024-45440

DividesByZer0 & c0d3Ninja의 CVE-2024-45440 열거 도구 CVE-2024-45440 - Drupal 11.x-dev 전체 경로 공개 PoC 옵션: -h, --help 이 도움말 메시지를 표시하고 종료합니다. -u URL, --url URL 스캔할 단일 URL입니다. -f FILE, --file FILE 스캔할 URL이 포함된 파일입니다줄당 하나씩. -t THREADS, --threads THREADS 스레드 수기본값: 5. -v, --verbose 취약하지 않은 대상과 오류를 표시합니다...

CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-73244

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

CVE-2026-12624

Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...

CVE-2026-12624

Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...

CVE-2026-56671

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...

CVE-2026-56671 ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...

CVE-2026-65713 Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

EUVD-2026-47898

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-53422

A flaw was found in Erlang OTP's Secure Shell SSH component, specifically within the SSH File Transfer Protocol SFTP daemon's sshsftpd module. An authenticated SFTP user can exploit an observable response discrepancy in the REALPATH handler to enumerate the existence of files and directories...

EUVD-2026-41410

Observable Response Discrepancy vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory. The SSHFXPREALPATH handler in sshsftpd calls relatefilename/3 with Canonicalize=false, unlik...

Security update for nodejs22

This update for nodejs22 fixes the following issues: Update to version 22.22.2. CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request bsc1260494. CVE-2026-21716: incomplete fix for CVE-2024-36137...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through improper validation of user-supplied paths in the prefixed function. An attacker can read or write arbitrary files, create directories, and enumerate files outside the intended root directory by sending...

EUVD-2026-17178

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...