55 matches found
Breacher
Breacher A script to find admin login pages and EAR vulnerabilites. Features Multi-threading on demand Big path list 482 paths Supports php, asp and html extensions Checks for potential EAR vulnerabilites Checks for robots.txt Support for custom patns Usages Check all paths with php extension...
wordlists
Wordlists Listas de palabras reales de seguridad informática, actualizadas periódicamente Listas de palabras actuales Tecnologías Estas listas de palabras se basan en el código fuente de los CMS/servidores/frameworks enumerados aquí. Las listas de palabras actuales incluyen: Wordpress Joomla Drup...
ThreatMapper
ThreatMapper - Gestión de amenazas en tiempo de ejecución y enumeración de rutas de ataque para Cloud Native !NOTE Este proyecto es mantenido por https://threatmapper.org Deepfence ThreatMapper busca amenazas en tus plataformas de producción y las clasifica según su riesgo de explotación. Descubr...
dirstalk
Dirstalk Dirstalk es una aplicación multi-hilo diseñada para realizar fuerza bruta de rutas en servidores web. La herramienta contiene funcionalidades similares a las ofrecidas por dirbuster y dirb. Aquí puedes verla en acción: Contenido Cómo usarlo Escaneo Recursos útiles Generador de diccionari...
rbuster
Rbuster otro rastreador de directorios Opciones comunes de línea de comandos -a - especificar una cadena de agente de usuario para enviar en la solicitud -c - usar esto para especificar cualquier cookie que pueda necesitar simulando autenticación. encabezado. -f - forzar el procesamiento de un...
CVE-2024-45440
Herramienta de enumeración para CVE-2024-45440 por DividesByZer0 & c0d3Ninja CVE-2024-45440 - PoC de Divulgación de Ruta Completa en Drupal 11.x-dev opciones: -h, --help muestra este mensaje de ayuda y sale -u URL, --url URL URL única para escanear. -f FILE, --file FILE Archivo que contiene URLs...
EUVD-2026-86251
LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated call...
CVE-2026-47680
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
CVE-2026-47680 Source controller: Improper path handling allows traversal
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
CVE-2026-47680: Relative Path Traversal
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
PT-2026-82672
Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system directory the application code is running by sending a GET request to the endpoint...
CVE-2026-73244
kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...
CVE-2026-12624
Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...
CVE-2026-12624
Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...
EUVD-2026-55677
Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...
CVE-2026-56671 ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...
CVE-2026-56671
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...
CVE-2026-56671: Improper Limitation of a Pathname to a Restricted Directory
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...
CVE-2026-65713 Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension
Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...