ReconCat

Recon Cat ========================================= Introduzione Una piccola applicazione Php per recuperare gli snapshot di URL di archivio da archive.org. Usandola puoi recuperare l'elenco completo degli URL degli snapshot di qualsiasi anno o l'elenco completo di tutti gli anni possibili...

ir-rescue

ir-rescue ir-rescue è composto da due script gemelli che raccolgono una miriade di dati forensi da sistemi Windows a 32 e 64 bit ir-rescue-win e da sistemi Unix ir-rescue-nix. Gli script rispettano l'ordine di volatilità e gli artefatti che vengono modificati con l'esecuzione ad es. , file prefet...

dufflebag

Dufflebag Dufflebag è uno strumento che cerca tra gli snapshot pubblici di Elastic Block Storage EBS eventuali segreti accidentalmente lasciati al suo interno. Potresti sorprenderti di quante password e segreti sono sparsi in giro! Lo strumento è organizzato come un'applicazione Elastic Beanstalk...

CVE-2019-15043

CVE-2019-15043 POC Descrizione Scansione proof of concept per verificare se un server Grafana è vulnerabile a CVE-2019-15043. Controlla il numero di versione del server Grafana e verifica se l'API degli snapshot consente richieste non autenticate. CVE-2019-15043 CVE-2019-15043 è una vulnerabilità...

CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Non autenticato Installazione Scarica la repo root@kitploit: $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Configurazione Nota: installa l'ultima versione di node root@kitploit: $ npm init $ npm i axios cheerio yargs Utilizzo root@kitploit...

CVE-2026-48751

A flaw was found in Incus, a container and virtual machine manager. Instance snapshots do not enforce container restriction settings, allowing a user to execute arbitrary commands on the server through lowlevel hooks. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat produ...

CVE-2026-19197

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

CVE-2026-19197 Broken access control in dashboard snapshots

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

EUVD-2026-66377

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

CVE-2026-19197

CVE-2026-19197 is a broken access control vulnerability in Grafana 's dashboard snapshots feature. An organization administrator on a shared Grafana instance can delete snapshots belonging to other organizations and recover a snapshot's secret delete key using only its public share key , enabling...

CVE-2026-19197 Broken access control in dashboard snapshots

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

Broken access control in dashboard snapshots

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot’s secret delete key using only its public share key broken access control...

zoneminder-snapshots-rce-poc

POC per RCE non autenticata in Zoneminder tramite Snapshots CVE-2023-26035 Questo è uno script scritto in Python che consente lo sfruttamento della falla di sicurezza di Zoneminder descritta in CVE-2023-26035. Il sistema è vulnerabile nelle versioni precedenti a 1.36.33 e 1.37.33. Utilizzo Clona ...

Astra Linux – Vulnerability in libvirt

A flaw was discovered in libvirt. External inactive snapshots of shut-down virtual machines are created as being accessible to everyone on the network, allowing unprivileged users to inspect the contents of the guest operating systems. This leads to an information disclosure vulnerability...

zoneminder_CVE-2023-26035

Exploit - ZoneMinder CVE-2023-26035 Esiste una Esecuzione di codice in remoto non autenticata RCE che colpisce gli Snapshot di ZoneMinder. Questo è un exploit per CVE-2023-26035. Versioni affette ZoneMinder 1.36.33 e ZoneMinder 1.37.33. Utilizzo Verifica se il target è vulnerabile: root@kitploit:...

CVE-2026-48751

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...

CVE-2026-48751 Incus has a restricted project bypass leading to arbitrary command execution

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...

CVE-2026-48751

Incus (a system container and virtual machine manager) prior to version 7.2.0 contains a restricted project bypass: instance snapshots ignore the restricted.containers.lowlevel=block setting, allowing an attacker with low privileges to abuse lowlevel hooks such as raw.lxc and raw.qemu to achieve ...

CVE-2026-48751

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...

CVE-2026-48751 Incus has a restricted project bypass leading to arbitrary command execution

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...