9311 matches found
bluewall
BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...
bluewall
BLUEWALL Bluewall es un framework de firewall diseñado para profesionales del ciberespacio ofensivo y defensivo. Este framework permite a los profesionales de la ciberseguridad configurar rápidamente su entorno mientras se mantienen dentro de su alcance. Créditos Inspirado en el script de...
Exploits + Shellcode + GHDB
The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...
pacbot
Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...
Ruby On Rails - Local File Inclusion
Ruby On Rails is vulnerable to local file inclusion caused by secondary decoding in Sprockets 3.7.1 and lower versions. An attacker can use %252e%252e/ to access the root directory and read or execute any file on the target server. id: CVE-2018-3760 info: name: Ruby On Rails - Local File Inclusio...
Moodle LTI module Reflected - Cross-Site Scripting
A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...
patch-openssl-CVE-2014-0291_CVE-2015-0204
patch-openssl-CVE-2015-0291CVE-2015-0204 Patch openssl with ansible Usage : pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2015-0291CVE-2015-0204 yourinventoryfile just need to contain your server list : 192.168.0.10 webserver1.example.com webserver2.example.com...
FEP3370-advanced-ethical-hacking
DynoRoot CVE-2018-1111 Final project for the course Advanced Ethical Hacking at KTH, Stockholm This project demonstrates a known vulnerability of Fedora and RedHat machines related to an unsafe client-side implementation of the Dynamic Host Configuration Protocol DHCP. A rogue DHCP server can cra...
CVE-2021-3754
CVE-2021-3754 Este repositorio documenta los detalles de vulnerabilidad y el exploit para CVE-2021-3754 descubierto y reportado por mí mismo el 21 de agosto de 2021 Métricas CWE-20: Validación de entrada incorrecta CVSS: 5.3 MEDIUM Descripción Se encontró una falla en Apache Keycloak y Redhat SSO...
Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure
Red Hat JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 is susceptible to sensitive information disclosure. A remote attacker can obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true...
Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)
Keycloak 12.0.1 and below allows an attacker to force the server to request an unverified URL using the OIDC parameter requesturi. This allows an attacker to execute a server-side request forgery SSRF attack. id: CVE-2020-10770 info: name: Keycloak = 12.0.1 - requesturi Blind Server-Side Request...
CVE-2016-3113
CVE-2016-3113 PoC Una prueba de concepto para explotar la vulnerabilidad XSS reflejado en la interfaz web de oVirt RedHat. En esta PoC, se inicia una máquina virtual en el entorno IaaS de oVirt a través de la sesión del navegador de la víctima. El código JS se ha mantenido simple debido a la pris...
Jboss Application Server - Remote Code Execution
Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2 is susceptible to a remote code execution vulnerability because the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization, thus allowing a...
bash-fix-exploit
bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk... Read about the exploit here: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're...
CVE-2026-19267
IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...
CVE-2026-19179
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression...
CVE-2026-18505
IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to open redirect in the PMP HostHeaderFilter HostHeaderFilter.java:151. An unauthenticated attacker can craft a request with a manipulated Host header to redirect authenticated operators to attacker-controlled sites, enablin...
CVE-2026-18872
IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to stored cross-site scripting CWE-79 in the FTM UI NetworkAcknowledgement React component NetworkAcknowledgement.jsx:42. A malicious actor can inject script into stored network acknowledgement data that executes in...