CVE-2024-7956

CVE-2024-7956 is an Incorrect Authorization (CWE-863) vulnerability in Rockwell Automation DataMosaix Private Cloud , versions 7.07 and prior . A threat actor with basic user privileges can gain unauthorized access to other users' projects and modify or delete them. The CVSS v3.1 base score is 8....

CVE-2024-7956 Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud

A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the project...

CVE-2024-7956 Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud

A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the project...

debianopenssl

debianopenssl 受Debian OpenSSL漏洞（CVE-2008-0166）影响的私钥 2008年，Debian和Ubuntu的OpenSSL包中的一个漏洞导致私钥可预测。 虽然受影响的密钥数量有限，但需要一些考虑才能生成所有可能受影响密钥的完整列表。 本仓库包含badkeys工具中用于黑名单的密钥。 关于Debian OpenSSL漏洞的说明： 密钥依赖于进程ID（PID）。有效的PID范围为0到32767。使用PID 0创建的密钥不太可能，但仍包含在内。在64位平台上，可以配置内核允许更大的PID，但这不太可能。...

JKS-private-key-cracker-hashcat

JKS秘密鍵クラッカー - JKSの棺桶に打ち込む釘 Java Key Store JKS...

confused

Confused 依存関係設定で参照されているプライベートパッケージ名の未使用の名前空間をチェックするツール。 Python pypi の requirements.txt、JavaScript npm の package.json、PHP composer の composer.json、MVN maven の pom.xml に対応。 これは何ですか？ 2021年2月9日、セキュリティ研究者のAlex Birsan氏が記事を公開し、複数のプログラミング言語エコシステムの依存関係管理ツールにおける異なる解決順序の欠陥について触れました。...

mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program root@kitploit: mallory -config...

m365_groups_enum

テナント内のMicrosoft 365グループをメタデータと共に列挙する 説明 allgroups.py スクリプトを使用すると、Azure ADテナント内のすべてのMicrosoft 365グループをそのメタデータと共に列挙できます: 名前 可視性: 公開または非公開 説明 メールアドレス 所有者 メンバー Teams有効? SharePoint URL 例: Teams共有ファイル用 これらすべて、非公開グループでも可能です！ 詳細については、私のブログ記事「Microsoft TeamsとMicrosoft 365グループのリスク」をご覧ください。 reporting.py...

CVE-2014-2734

CVE-2014-2734 Ruby OpenSSL CA 私钥伪造 ============= Ruby openssl 存在一个漏洞：当公钥在写入私钥之前被签发，并在脚本中重新打开时，它会伪造 CA 私钥。 PoC 脚本 https://gist.github.com/10446549 Mitre: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-2734 SecurityFocus: http://www.securityfocus.com/bid/66956...

CVE-2026-34160

CVE-2026-34160 — Chamilo LMS 中通过 PENS 插件（pens.php）实现未认证 SSRF 严重性 ：高（CVSS 7.5） CWE ：CWE-918（服务端请求伪造） 受影响版本 ：chamilo/chamilo-lms 2.x（提交 af6b7002 及更早版本） 安全公告 ：GHSA-g2xj-4cch-j276 NVD ：https://nvd.nist.gov/vuln/detail/CVE-2026-34160 摘要 PENS（包交换通知服务）插件端点 public/plugin/Pens/pens.php 无需认证即可访问，并接受用户控制的 U...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

CVE-2024-31497-POC

CVE-2024-31497 POC 此漏洞利用了 ecc-ssh.c 文件中偏置的 ECDSA nonce 生成。Nonce 通过 $sha512ID\ ||\ sha512privKey\ ||\ sha1data\ mod\ q$ 生成，导致最高 9 位为零。要恢复私钥，我们需要 60 个签名，但拥有 58 个时仍有 50% 的成功概率。 漏洞由 Bäumer 和 Marcus Brinkmann 发现。 依赖 要使用此漏洞利用，您必须安装 sagemath 和 requirements.txt 中列出的 Python 依赖项。 攻击面 1. 从 60 个使用 PuTTy 或...

CVE-2020-13277

CVE-2020-13277 CVE-2020-13277 靶场： Gitlab 逻辑漏洞 - 任意用户越权访问私有仓库 0x10 靶场环境 0x20 目录结构 root@kitploit: CVE-2020-13277 ├── README.md ............... 此 README 说明 ├── imgs .................... 辅助 README 说明的图片 ├── gitlab .................. Gitlab 容器的挂载目录 │ ├── Dockerfile .......... Gitlab 的 Docker 构建文件 │ ├─...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

WordPress <= 5.2.4 - Unauthenticated View Private/Draft Posts

WordPress before 5.2.4 contains an information disclosure caused by mishandling of the static query property, letting unauthenticated users view certain content, exploit requires no authentication. id: CVE-2019-17671 info: name: WordPress = 5.2.4 - Unauthenticated View Private/Draft Posts author:...

WordPress Simple Job Board - Unauthorized Data Access

The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to insufficient authorization checking in the fetchquickjob function in all versions up to and including 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be...

PrivateGPT < 0.5.0 - Open Redirect

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. id: CVE-2024-5936 info: name:...

Gitea Container Registry - Unauthorized Private Image Access

Gitea = 1.26.2. As a temporary workaround, set REQUIRESIGNINVIEW=true in gitea app.ini, though this blocks all anonymous access including public repos. reference: - https://blog.gitea.com/release-of-1.26.2/ - https://github.com/go-gitea/gitea/pull/37290 -...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

YMC Filter WordPress - Unauthenticated Post Disclosure

YMC Filter WordPress plugin 3.11.3 contains a broken access control vulnerability caused by improper authorization and lack of validation in a REST API endpoint, letting unauthenticated attackers retrieve private and non-public post content, exploit requires no authentication. id: CVE-2026-10823...