dufflebag

Dufflebag Dufflebag is a tool that searches through public Elastic Block Storage EBS snapshots for secrets that may have been accidentally left in. You may be surprised by all the passwords and secrets just laying around! The tool is organized as an Elastic Beanstalk "EB", not to be confused with...

ReconCat

Recon Cat ========================================= Introduction A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose. This...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Unauthenticated Install Grab Repo $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Setup Note: Install the latest version of node $ npm init $ npm i axios cheerio yargs Usage ┌─✗─v37r1x@7h3B14ckKn1gh75─/Documents/Code/CVE-2023-26035 └──╼ $nod...

CVE-2019-15043

CVE-2019-15043 POC Description Proof of concept scan to check if a Grafana server is vulnerable to CVE-2019-15043. Checks the Grafana server version number and checks to see if the snapshot API allows for unauthenticated requests. CVE-2019-15043 CVE-2019-15043 is a Denial-of-service vulnerability...

zoneminder_CVE-2023-26035

Exploit - ZoneMinder CVE-2023-26035 There is a Unauthenticated Remote Code Execution RCE affecting ZoneMinder Snapshots. This is an exploit for CVE-2023-26035. Affected versions ZoneMinder 1.36.33 and ZoneMinder 1.37.33. Usage Check if the target is vulnerable: python3 zoneminder.py http://target...

zoneminder-snapshots-rce-poc

Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035 POC This is a script written in Python that allows the exploitation of the Zoneminder's security flaw described in CVE-2023-26035. The system is vulnerable in versions preceding 1.36.33 and 1.37.33. Usage Clone the repository to your...

Node.js Crypto Entropy Cache Duplication Checker

Node.js versions 22.x, 24.x, and 26.x contain a crypto entropy cache duplication issue in snapshots and single executable applications. This Python tool compares operator-supplied runtime versions against fixed releases...

Exploit for CVE-2026-106074

node-cve-2026-106074-check Standalon...

LXC Incus permission and access control issue vulnerability

Versions prior to LXC Incus 7.0.2—specifically 7.0.1 and versions prior to 7.5.0 but including 7.2.0—are affected by a permission and access control vulnerability stemming from authorization bypass. Restricted clients can exploit this by omitting “source.type” in their POST requests directed at...

TRACE: Data-Free Text Reconstruction Attacks against Approximate Unlearning in LLMs

As large language models LLMs face growing demands for data removal driven by regulatory compliance, copyright concerns, and privacy protection, approximate unlearning has emerged as a practical alternative to expensive full retraining. In practice, pre- and post-unlearning model snapshots are...

Node.js < 22.23.4, < 24.22.1, < 26.12.1 - Use of Insufficiently Random Values via Entropy Caches Retained in Startup Snapshots and SEAs

Use of Insufficiently Random Values via Entropy Caches Retained in Startup Snapshots and SEAs vulnerability discovered by gesposito in WordPress npm Node.js versions 22.23.4...

PT-2026-120749

Name of the Vulnerable Software and Affected Versions Node.js versions 26.x Node.js versions 24.x Node.js versions 22.x Description A flaw in the HTTP Agent connection reuse mechanism allows a client to accept a response as valid even if it was sent before the client issued the request. This occu...

CVE-2026-19197

A flaw was found in Grafana. This broken access control vulnerability allows a user with organization administrator permissions to delete dashboard snapshots belonging to other organizations on the same Grafana instance. Furthermore, the flaw enables the recovery of a snapshot's secret delete key...

BIT-VAULT-2026-105816 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

Astra Linux – Vulnerability in libvirt

A flaw was discovered in libvirt. External inactive snapshots of shut-down virtual machines are created as being accessible to everyone on the network, allowing unprivileged users to inspect the contents of the guest operating systems. This leads to an information disclosure vulnerability...

Swann Communications SWIFI-SE2KIC Authorization Issue Vulnerability

Swann Communications SWIFI-SE2KIC 2.0.22 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of authentication for critical functions, allowing local network attackers to obtain real-time screen snapshots without being authenticated...

Security Bulletin: Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...

CVE-2026-105816 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2026-105816

Vault and Vault Enterprise are vulnerable to arbitrary code execution on the host because the software does not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. If Vault utilizes Shamir seals and an external plugin directory , a pri...