Lucene search
+L

208 matches found

Kitploit
Kitploit
added 2026/09/01 7:09 a.m.2 views

h0neytr4p

Adjusted for T-Pot This fork of h0neytr4p was revised for T-Pot with the following features: Add Docker support Dockerfile, docker-compose.yml Use a single logfile instead of two Log to JSON instead of CSV Enrich JSON log file with additional info i.e. Cookies, Headers, Destination Port, etc...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 4:27 a.m.67 views

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

5.9AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/08/31 10:53 p.m.2 views

tpotce

T-Pot - 一体化多蜜罐平台 T-Pot 是一个一体化、可选分布式、多架构(amd64、arm64)的蜜罐平台,支持20多种蜜罐和无数可视化选项,使用 Elastic Stack、动态实时攻击地图以及大量安全工具来进一步提升欺骗体验。 TL;DR 1. 满足系统要求。T-Pot 安装需要至少 8-16 GB RAM、128 GB 可用磁盘空间以及可用(出站非过滤)互联网连接。 2. 下载或使用正在运行的支持的发行版。 3. 使用尽可能少的包/服务安装 ISO(需要 ssh)。 4. 安装 curl:如果尚未安装,运行 $ sudo apt, dnf, zypper install...

5.8AI score
SaveExploits0References54
Kitploit
Kitploit
added 2026/08/31 6:23 p.m.2 views

PoT

Phishing on Twitter Generate tweet automatically like him/her How it works? 1- Collect data from target's twitter account 2- Find target's friend and copy her/him account 3- Generate tweet automatically with markov chain algorithm and send it Installation root@kitploit: git clone...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 4:07 a.m.57 views

honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

5.4AI score
SaveExploits0References3
EUVD
EUVD
added 2026/02/27 9:30 a.m.14 views

EUVD-2025-208134

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS5.8AI score0.00167EPSS
SaveExploits0References7
NVD
NVD
added 2026/02/27 8:17 a.m.13 views

CVE-2025-9909

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS0.00167EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/02/27 7:30 a.m.6 views

CVE-2025-9909 Aap-gateway: improper path validation in gateway allows credential exfiltration

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS5.8AI score0.00167EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/02/27 7:30 a.m.20 views

CVE-2025-9909

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS5.8AI score0.00167EPSS
SaveExploits0References7
CVE
CVE
added 2026/02/27 7:30 a.m.29 views

CVE-2025-9909

The CVE-2025-9909 issue affects Red Hat Ansible Automation Platform Gateway route creation: improper gateway_path handling allows an attacker with admin privileges to create misleading routes (double-slash prefix) to intercept credentials, potentially enabling persistent backdoors. It is describe...

6.7CVSS5.8AI score0.00167EPSS
SaveExploits0References6Affected Software3
Cvelist
Cvelist
added 2026/02/27 7:30 a.m.37 views

CVE-2025-9909 Aap-gateway: improper path validation in gateway allows credential exfiltration

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS0.00167EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/02/27 12:00 a.m.21 views

PT-2025-54839

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gateway path. A malicious or socially engineered administrator can configure a...

6.7CVSS5.8AI score0.00167EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2025/12/10 6:00 p.m.16 views

aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS5.7AI score0.00167EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2025/11/19 3:51 p.m.10 views

aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS5.7AI score0.00167EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/11/18 9:30 a.m.10 views

EUVD-2025-197934

The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage function. This makes it possible for unauthenticated attackers to update setting...

6.1CVSS4.9AI score0.00145EPSS
SaveExploits0References5
NVD
NVD
added 2025/11/18 9:15 a.m.26 views

CVE-2025-12406

The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage function. This makes it possible for unauthenticated attackers to update setting...

6.1CVSS0.00145EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.9 views

WordPress plugin Project Honey Pot Spam Trap 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin i...

6.1CVSS6.3AI score0.00145EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/11/17 10:44 p.m.11 views

WordPress Project Honey Pot Spam Trap plugin <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Project Honey Pot Spam Trap versions = 1.0.1...

6.1CVSS5.9AI score0.00145EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/11/11 7:26 a.m.2 views

EUVD-2025-80148

Malicious code in val-soluble-pot npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 7:26 a.m.4 views

EUVD-2025-81174

Malicious code in mooney-soluble-pot npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder