SessionView

SessionView A lightweight C console application for enumerating and displaying all user sessions on Windows Server, including session GUIDs. Features Complete Session Enumeration : Lists all active sessions on the Windows server Detailed Session Information : Displays Session ID, Station Name,...

RemoteSessionEnum

Blog: https://0xv1n.github.io/posts/sessionenumeration/ このプロジェクトの目的は、大部分が未ドキュメント化されているWindowsステーション（WinSta）APIを利用して、qwinsta /server: の機能を再現しようと試みることでした。...

Invoke-SessionHunter

Invoke-SessionHunter Retrieve and display information about active user sessions on remote computers. No admin privileges required. The tool leverages the remote registry service to query the HKEYUSERS registry hive on the remote computers. It identifies and extracts Security Identifiers SIDs...

PowerShell-Suite

PowerShell-Suite 優れたツールやリソースがオンラインにあり、PowerShellでほとんどすべてのタスクを達成できます。しかしながら、特定の目的のためにユーティリティをスクリプトでまとめたり、存在論的なギャップを埋める必要がある場合もあります。これは、私が楽しみのため、または特定の用途を念頭に置いてまとめたPowerShellユーティリティのコレクションです。 したがって、それらから得られる成果は人それぞれ異なるかもしれませんが、遠慮なく問題を投稿したり、フォークして適用したりしてください！ Windows API PowerShellからWindows...

netview

= netview Netview は列挙ツールです。（-d を付けると）現在のドメイン、または（-d domain で）指定したドメインを使用してホストを列挙します。代わりにホストのリストを含むファイルを指定したい場合は、-f を使用することもできます。除外したいホスト名は、-e を使用してリストで指定できます。ドメイングループを照会し、それらのユーザーがどこからログオンしているかを強調表示したい場合は、-g でグループを指定します。 情報:...

Debian dla-4780 : python-urwid-doc - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4780 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4780-1 [email protected] https://www.debian.org/lts/security/...

CVE-2026-55604 @arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key

DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.7.0, the process-global SessionStore accepts caller-supplied sessionid values without binding them to any authenticated principal or transport session. An attacker can enumerate active session I...

GHSA-5QFP-32CF-69JH SurrealDB: HTTP /rpc `sessions` method leaks attached session UUIDs, enabling full session hijack by anonymous callers

The HTTP /rpc sessions method returned every attached session UUID without authentication, and the /rpc handler accepted an arbitrary session field with no ownership check. An anonymous caller could enumerate UUIDs and impersonate any authenticated session. "Attached" means sessions registered vi...

EUVD-2026-39526

Kanboard through 1.2.52, fixed in commit 928c68a, UserViewController::removeSession fails to validate the session id parameter before passing it to RememberMeSessionModel::remove, allowing authenticated users to delete other users' Remember Me sessions. Attackers can enumerate sequential session...

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.20 contained security vulnerabilities. These vulnerabilities stemmed from improper authorization in device pairing management, allowing limited session enumeration and processin...

Exploit for Path Traversal in Apache Http_Server

🔥 LFI-Destroyer – Authorized Penetration Testing Framework LFI-D...

EUVD-2016-3096

Malware in sbrugna...

EUVD-2016-5924

Malware in sbrugna...

CVE-2016-20008

The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...

CVE-2016-20008

The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...

CVE-2016-20008

The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...

Design/Logic Flaw

The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...

Drupal Security Vulnerabilities

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal REST/JSON project 7.x-1.x that allows session enumeration...

CVE-2016-20008

The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...

CVE-2016-20008

CVE-2016-20008 affects the Drupal REST/JSON project 7.x-1.x, with a session enumeration vulnerability (SA-CONTRIB-2016-033). Public references (NVD, Red Hat, CVE lists) describe it as a session-enumeration issue; no exploitation details or root cause are explicitly provided in the connected docum...