Intelbras WIN 300/WRN 342 - Credentials Disclosure

Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code. id: CVE-2021-3017 info: name: Intelbras WIN 300/WRN 342 - Credentials Disclosure author: pikpikcu severity: high description:...

Kyocera TASKalfa printer - Path Traversal

CCRX has a Path Traversal vulnerability. Path Traversal is an attack on web applications. By manipulating the value of the file path, an attacker can gain access to the file system, including source code and critical system settings. id: CVE-2023-34259 info: name: Kyocera TASKalfa printer - Path...

chall.stypr.com

chall.stypr.com chall.stypr.com をプレイしていただきありがとうございます。 最初にウォーゲームをセットアップしてホストしてから9年が経ちました。 現在では多くのCTFがすでに同様のチャレンジを再利用または作成しているため、チャレンジインフラのホストに使用された全チャレンジのソースコードと設定を共有することにしました。 インフラストラクチャ web/: https://chall.stypr.com/ のソースコード challenges/: https://.eagle-jump.org/ の設定とソースコード データベース スコアボードのバックアップ...

osed-scripts

osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...

Sub7

Sub7 SubSeven は、mobman によって Delphi で書かれたバックドアプログラム、または R.A.T.（リモート管理ツール）であり、ネットワーク接続を介して Windows 9X システムへの完全なアクセスを他の者に許可するものでした。これは Sub7 2.1.2 のソースコードであり、悪意のある HDDKiller バッチファイルが 2.1.3 BONUS エディションに追加される直前の 2000年4月にリリースされました。 私は、mobman を見つけるための過去5年間の広範な OSINT を経て、このソースコードを mobman...

cgiemail-exploit

Cgiemail - ソースコード開示/ローカルファイルインクルードエクスプロイト cgiemail に含まれるスクリプト cgiecho は、ウェブサイトのドキュメントルート配下の任意のファイルを返します。ただし、そのファイルに角括弧が含まれており、括弧内のテキストが推測可能である場合に限ります。 cgiemail は現在 cPanel に同梱されており、デフォルトで有効です。 例 ページの場合: root@kitploit: Success Processed form looks like this: ?php // http://hostname/login.php if$GET...

CVE-2025-36076

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system...

CVE-2025-36076

IBM Cognos Analytics versions 12.1.0 through 12.1.3 FP1 and 12.0.4 through 12.0.4 FP2 are affected by a vulnerability where sensitive information is stored in source code (CWE-540). An authenticated user can access this information, potentially using it in further attacks against the system. The ...

EUVD-2025-210957

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system...

CVE-2025-36076 IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system...

obridge

OBridge OBridge provides a simple Java source code generator for calling Oracle PL/SQL package procedures. Supported input, output parameters and return values are: BINARYINTEGER BOOLEAN CHAR CLOB BLOB DATE NCHAR NUMBER NVARCHAR2 OBJECT - Oracle Object Type PLSINTEGER TABLE - Table of Oracle Obje...

flareon2023

Flare-On 10 の解法 Flare-On10 challenge のタスクに対する私の解答のソースコードです。...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

raptor

Raptor는 웹 기반웹 서비스 + UI GitHub 중심 소스 취약점 스캐너입니다. 즉, GitHub 저장소 URL만 입력하면 해당 저장소를 스캔합니다. 웹훅을 설정하여 커밋이나 풀 리퀘스트를 머지할 때마다 자동으로 스캔되도록 할 수 있습니다. 스캔은 비동기적으로 수행되며, 결과는 스캔을 시작한 사용자만 볼 수 있습니다. Raptor의 몇 가지 기능은 다음과 같습니다. 플러그인 아키텍처 외부 도구를 플러그 앤 플레이 방식으로 통합하고 통합 보고서 생성 웹 서비스는 UI 없이도 사용자 정의 자동화에 활용 가능 새로운 취약점...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

LeakLooker

LeakLooker - Powered by Binaryedge.io Find open databases/services GUI https://www.offensiveosint.io/leaklooker-gui-discover-browse-and-monitor-database-source-code-leaks/ https://github.com/woj-ciech/LeakLooker-X New version supports: Elasticsearch CouchDB MongoDB Gitlab Rsync Jenkins Sonarqube...

Leaktopus

Deprecation Notice Dear Leaktopus Users, We want to inform you that the Leaktopus project will be officially deprecated. After careful evaluation, we have decided to discontinue active development and maintenance of this library. What Does This Mean for You? No New Features or Updates: We will no...

DevAudit

Note : DevAudit uses the OSS Index database, which has some rate limiting. If you notice you are hitting the limit please raise an issue. Authenticated users get a higher limit, and we am implementing authentication into DevAudit soon. Most non-authenticated users probably won't notice the limit...

dnSpy

dnSpy - Latest release dnSpy is a debugger and .NET assembly editor. You can use it to edit and debug assemblies even if you don't have any source code available. Main features: Debug .NET and Unity assemblies Edit .NET and Unity assemblies Light and dark themes See below for more features Binari...

CVE-2010-2075

CVE-2010-2075 - UnrealIRCd 3.2.8.1 Backdoor Bash PoC Description Bash PoC for the backdoor introduced in the UnrealIRCd 3.2.8.1 source tarball. The compromised binary executes arbitrary commands prefixed with AB; sent to the IRC port. Usage root@kitploit: chmod +x exploit.sh ./exploit.sh Example:...