Breacher

Breacher A script to find admin login pages and EAR vulnerabilites. Features Multi-threading on demand Big path list 482 paths Supports php, asp and html extensions Checks for potential EAR vulnerabilites Checks for robots.txt Support for custom patns Usages Check all paths with php extension...

ThreatMapper

ThreatMapper - Runtime Threat Management and Attack Path Enumeration for Cloud Native !NOTE This project is maintained by https://threatmapper.org...

rbuster

Rbuster また別のディレクトリバスター 共通コマンドラインオプション -a - リクエストで送信するユーザーエージェント文字列を指定します -c - 認証をシミュレートするために必要なクッキーを指定します。ヘッダー。 -f - ワイルドカード結果を持つドメインの処理を強制します。 -l - レスポンスの長さを表示します。 -r - リダイレクトを追跡します。 -s - 「ポジティブ」とみなされるステータスコードのリストのカンマ区切りセット（デフォルト: 200,204,301,302,307）。 -u - 完全なURL（スキームを含む）、またはベースドメイン名。 -v...

wordlists

Wordlists 真实世界信息安全字典，定期更新 当前字典 技术 这些字典基于 此处 所列 CMS/服务器/框架的源代码。当前字典包括： Wordpress Joomla Drupal Magento Ghost Tomcat 每个字典有 2 个版本： 基础版（示例 tomcat.txt）：列出仓库中每个文件的完整路径 root@kitploit: webapps/examples/WEB-INF/classes/websocket/echo/servers.json 全层级版（示例 tomcat-all-levels.txt）：包含基础版中文件的所有目录层级——如果你尝试过...

dirstalk

Dirstalk Dirstalk は、Web サーバー上のパスをブルートフォースするために設計されたマルチスレッドアプリケーションです。 このツールには、dirbuster や dirb が提供するものと同様の機能が含まれています。 実際の動作はこちらでご覧いただけます: 目次 使い方 スキャン 便利なリソース 辞書生成 ダウンロード 開発 ライセンス ↑ 使い方 このアプリケーションは自己文書化されており、dirstalk -h と実行すると、すべての利用可能なコマンドと簡単な説明が表示されます。各コマンドのヘルプは dirstalk -h で取得できます。 例: dirstalk...

CVE-2024-45440

DividesByZer0 & c0d3Ninja による CVE-2024-45440 用列挙ツール CVE-2024-45440 - Drupal 11.x-dev 完全パス開示 PoC オプション: -h, --help このヘルプメッセージを表示して終了 -u URL, --url URL スキャンする単一のURL。 -f FILE, --file FILE スキャンするURLを含むファイル（1行に1つ）。 -t THREADS, --threads THREADS スレッド数（デフォルト: 5）。 -v, --verbose 脆弱でない対象とエラーを表示。...

CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-73244

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

CVE-2026-12624

Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...

CVE-2026-12624

Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...

CVE-2026-56671

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...

CVE-2026-56671 ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...

CVE-2026-65713 Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

EUVD-2026-47898

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-53422

A flaw was found in Erlang OTP's Secure Shell SSH component, specifically within the SSH File Transfer Protocol SFTP daemon's sshsftpd module. An authenticated SFTP user can exploit an observable response discrepancy in the REALPATH handler to enumerate the existence of files and directories...

EUVD-2026-41410

Observable Response Discrepancy vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory. The SSHFXPREALPATH handler in sshsftpd calls relatefilename/3 with Canonicalize=false, unlik...

Security update for nodejs22

This update for nodejs22 fixes the following issues: Update to version 22.22.2. CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request bsc1260494. CVE-2026-21716: incomplete fix for CVE-2024-36137...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through improper validation of user-supplied paths in the prefixed function. An attacker can read or write arbitrary files, create directories, and enumerate files outside the intended root directory by sending...

EUVD-2026-17178

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...