retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

cve-2025-2945-poc

pgAdmin4 查询工具认证后 RCE 漏洞利用 PoC 独立的 Python 脚本，用于利用 pgAdmin4 8.10 - 9.1 版本中查询工具的认证后 RCE 漏洞（CVE-2025-2945）。 从 Metasploit 模块移植而来：pgadminquerytoolauthenticated.rb 参考： https://vulners.com/cve/CVE-2025-2945 https://nvd.nist.gov/vuln/detail/CVE-2025-2945 https://github.com/advisories/GHSA-g73c-fw68-pwx3...

cq

cq Code Query，一个通用的代码安全扫描工具。 CQ 扫描代码中的安全漏洞以及安全导向的代码审查人员感兴趣的其他项目。 它将包含所发现问题引用的文本文件输出到一个输出目录。这些输出文件随后可以被审查， 通过 unix 命令行工具（如 grep）进行过滤，或者作为一种“跳转”到代码库中指定 file:line 引用的手段。 一种流行的用法是将输出文件视为“待办事项”列表：在审查过程中删除那些被认为是误报的引用， 或者将引用复制到某个报告文件中，以便详细审查或作为 bug 报告的基础。 该工具极其基础，主要依靠手动操作，并假定使用者对应用程序安全漏洞和代码审查有深入了解。...

MAL-2026-17344 Malicious code in @bellaxchuu/familyxtrx (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17349 Malicious code in @bellaxchuu/velvetry (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17384 Malicious code in @xayz/baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

MAL-2026-17385 Malicious code in albert-anitabaileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17390 Malicious code in cantarella-baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

ko7demo

Docker化した https://github.com/koseven/kosevenkoseven のハローワールドアプリケーションで、3.3.10未満のバージョンに影響するSQLインジェクション脆弱性 CVE-2019-8979 を試すためのものです。 このハローワールドは実際には https://koseven.dev/documentation/orm/examples/simpleドキュメント から持ってきたもので、Docker部分とPoCエクスプロイトを追加しただけです。 = CVE-2019-8979 このSQLインジェクション問題は、元々第三者によって...

The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

MAL-2026-17371 Malicious code in @nyzzpediaa/baileys-new (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

reconerator

概要 これは、様々な状況認識アクティビティを実行するカスタム .NET アセンブリです。現在、以下の機能セットがあります: BASIC - ディスクとレジストリから情報を取得します。 LDAP - カスタマイズされたAD LDAPクエリを実行できます。 RESOLVEHOST - DNSルックアップクエリを実行します。 INDEXSEARCH - Windows インデックスサービスでローカルファイルと電子メール（ファイル名と内容）を検索します。 PROXYCHECK - 指定されたURLにアクセスする際に使用されるプロキシサーバーを表示します。...

yeti

Yeti プラットフォーム Yetiは、CTIとDFIRの実践者間のギャップを埋めることを目的としており、DFIRチーム向けのフォレンジックインテリジェンスプラットフォームとパイプラインを提供します。これは、「以前にこのアーティファクトをどこで見たのか？」や「タイムライン上でこの脅威（またはすべての脅威？）に関連するIOCをどのように検索すればよいのか？」という質問に答える必要性に対するフラストレーションから生まれました。 ドキュメントリンク： メインウェブサイト：https://yeti-platform.io/ ドキュメント ガイド Yetiとは？...

CVE-2026-22599

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-22599 CVE-2026-22599 Strapi 5.33.1 - Strapi 我是 @abraxasnull。Loopback 实验环境。客户端为 CVE-2026-22599-Abraxas-Labs.py。 Content-Type Builder 写入 API 数据库查询注入。Yup 会进行校验，但不会剥离未知的 column.defaultTo。Schema builder 将 value,...

CVE-2025-30208-Vite

CVE-2025-30208 | Vite脚本 本工具用于检测目标系统是否存在 CVE-2025-30208 漏洞。该漏洞允许攻击者通过特定路径读取服务器上的敏感文件（如 /etc/passwd 或 C:\windows\win.ini）。工具支持单个 URL 检测和批量检测，并可选使用 HTTP/HTTPS 代理。 这里介一下payload ?raw??和?import?raw??的关系。第一个payload适用于读取不带后缀的文件，第二个随意了。 功能特性 批量检测：支持从文件中读取多个目标 URL 进行批量检测。 安装依赖 在运行工具之前，请确保已安装 Python 3 和...

CVE-2019-7642

CVE-2019-7642 具有mydlink功能的D-Link路由器存在一些无需认证的Web界面。攻击者可远程获取用户的DNS查询日志和登录日志。 受影响的目标包括但不限于以下最新固件版本：DIR-817LW A1-1.04、DIR-816L B1-2.06、DIR-850L A1-1.09 和 DIR-868L A1-1.10。 PoC1: http://target/mydlink/getLogDnsQuery.asp PoC2: http://target/mydlink/getTriggedEventHistory.asp...