1617 matches found
solarflare
solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...
solarflare
solarflare Инструмент для дампа учётных данных SolarWinds Orion Пост в блоге: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Благодарности @asolino, @gentilkiwi и @skelsec за помощь в разборе DPAPI. root@kitploit:...
CVE-2019-11287
CVE-2019-11287: DoS через переполнение кучи в плагине веб-управления RabbitMQ Pivotal RabbitMQ, версии 3.7.x до 3.7.21 и 3.8.x до 3.8.1, а также RabbitMQ для Pivotal Platform, версии 1.16.x до 1.16.7 и 1.17.x до 1.17.4, содержат плагин веб-управления, который уязвим для атаки типа «отказ в...
Medusa
Medusa Medusa는 Python 3.8과 Python 2.7을 모두 지원하는 크로스플랫폼 에이전트입니다. 설치 Medusa를 설치하려면 원격 컴퓨터에 Mythic v3가 설치되어 있어야 합니다. Mythic 설치 방법은 Mythic 프로젝트 페이지에서 확인할 수 있습니다. Mythic 설치 루트에서 다음 명령을 실행합니다: ./mythic-cli install github https://github.com/MythicAgents/Medusa.git 설치가 완료되면 새 에이전트를 빌드하기 위해 Mythic을 다시 시작합니...
RabbitMQ Management - OAuth 2 Client Secret Disclosure
RabbitMQ 3.13.15, 4.0.20, 4.1.11, and 4.2.6 contains an information disclosure caused by the obsolete GET /api/auth endpoint exposing OAuth 2 client secrets when management.oauthclientsecret is configured, letting unauthenticated attackers access sensitive credentials, exploit requires management...
Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File Read
Amazon rabbitmq-aws versions 0.1.0 through 0.2.0 contain active debug code in the ARN resolver. An authenticated RabbitMQ user with management API access can submit an arn:aws-debug:file ARN to the validation endpoint and read arbitrary files accessible to the RabbitMQ process. id: CVE-2026-9133...
wavecrack
Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...
EUVD-2026-75785
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges due to improper authorization...
CVE-2026-80436
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges due to improper authorization...
CVE-2026-80436
IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an improper authorization flaw that allows a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges . The vulnerability requires low privileges, is exploitable over the network with no user...
CVE-2026-80436 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges due to improper authorization...
CLEANSTART-2026-CT24188 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-XP64749 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : rabbitmq-c vulnerabilities (USN-8724-1)
The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8724-1 advisory. It was discovered that the rabbitmq-c...
ROOT-APP-GOBINARY-CVE-2026-79921 CVE-2026-79921 in github.com/rabbitmq/amqp091-go - Patched by Root
Root has patched CVE-2026-79921 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...
USN-8724-1: rabbitmq-c vulnerabilities
It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line, making them visible to other local users through the process list. An attacker could possibly use this to obtain sensitive credentials. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04...
Linux Distros Unpatched Vulnerability : CVE-2026-59272
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of...
CLEANSTART-2026-PJ87430 Security fixes in rabbitmq-messaging-topology-operator 1.2.1-r1
Package rabbitmq-messaging-topology-operator version 1.2.1-r1 fixes 8 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...
CLEANSTART-2026-CW06250 Security fixes in rabbitmq-cluster-operator 2.22.4-r0
Package rabbitmq-cluster-operator version 2.22.4-r0 fixes 8 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...