15723 matches found
Joomblah
Joomblah Joomla 3.7.0 CVE-2017-8917 のエクスプロイト 脆弱性の説明: https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html コードの修正 46行目の修正 ... result += value.decode'utf-8' ... 使い方 joomblah.py スクリプトを脆弱な Joomla 3.7.0 インストール先に向けて実行してください。時間がかかる場合がありますが、ユーザーテーブルとセッションテーブルをダンプします。 $ python...
CVE-2026-93788
A flaw was found in the Linux kernel's iwlwifi wireless driver. When processing Advanced Configuration and Power Interface ACPI data, the driver does not properly validate the revision index of the WiFi Global Dynamic SAR WGDS table before performing a bit-shift calculation. An invalid revision...
CVE-2020-2978
CVE-2020-2978 CVE-2020-2978 refrence link for PoC: https://databasesecurityninja.wordpress.com/2020/12/01/cve-2020-2978-rman-audit-table-point-in-time-recovery-not-logged/...
unlicense
Unlicense A Python 3 tool to dynamically unpack executables protected with Themida/WinLicense 2.x and 3.x. Warning: This tool will execute the target executable. Make sure to use this tool in a VM if you're unsure about what the target executable does. Note: You need to use a 32-bit Python...
CVE-2026-101046 Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...
CVE-2026-101046 Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...
EUVD-2026-87977
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...
CVE-2026-101046 Fleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints GET /api/v1/fleet/activities and GET /api/v1/fleet/hosts/id/activities. The deprecated cursor-pagination helper appendListOptionsWithCursorToSQL interpolated the caller-supplied sort/order key into the SQL...
ExportDumper
ExportDumper A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying. Usage .\ExportDump dllpath e.g. .\ExportDump C:\Windows\System32\version.dll Dumping all 17 exported functions from C:\windows\system32\version.dll. + Dumping done...
CVE-2025-22964
CVE-2025-22964: Time-based blind SQL injection in DDSN Interactive cm3 Acora CMS version 10.1.1 DDSN Interactive cm3 Acora CMS version 10.1.1 has a time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows...
reverse-engineering-browser
逆向工程浏览器 查看指纹、请求、脚本和运行时行为背后的浏览器证据。 一款本地优先的研究浏览器和 macOS 工作区，用于检查已获授权的 网络应用程序。 v0.2.1 已发布 Origin Trace Traffic 现在拥有全宽、DevTools 风格的请求表格。路径 和主机更易阅读，并设有独立的状态、类型、方法和计时 列。实时请求跟随列表底部；向上滚动会保留 你的位置，并提供跳转到新请求的功能。选中某个请求会显示其 完整 URL，并提供复制 URL 操作。v0.2.0 的会话隐私和启动 改进仍然可用。 下载 Origin Trace v0.2.1 · 发布说明 · 完整变更日志...
ida-efiutils
用于 IDA Pro 的 EFI 脚本 一些用于辅助逆向工程 EFI 可执行文件的 IDA 脚本。 该包包含以下文件： 1. efiutils.py - 包含一些辅助函数的 IDAPython 模块 2. efiguids.py - 用于 EFI 协议的已知 GUID 集合 3. efiguidsami.py - 用于 AMI BIOS 中使用的协议的已知 GUID 集合 4. behemoth.h - 一个巨大的头文件，包含 EFI 的类型和结构定义集合 5. structs.idc - 包含一些结构定义的 IDC 脚本（已被 behemoth.h 取代） 6...
ghidra-firmware-utils
Ghidra Firmware Utilities Various modules for Ghidra to assist with PC firmware reverse engineering. This was accepted as a coreboot project for GSoC 2019. Features PCI option ROM loader Implements a FS loader for PCI option ROMs handles hybrid ROMs with multiple images, e.g. legacy x86 + UEFI...
CVE-2018-15473-py3
CVE-2018-15473-py3 https://github.com/r3dxpl0it/CVE-2018-15473 is the original I got this from. All I did was make this a little more friendly for python3. fixed the print statements and changed ".handlertable" to ".clienthandlertable" so paramiko doesnt complain. It may not for you but on the...
CVE-2026-36670
CVE-2026-36670 A time-based blind SQL injection exploit for the OpenSIPS Control Panel. This exploit abuses an authenticated sql injection vulnerability within the aliasmanagement.php module of opensips. The table GET parameter is improperly sanitized, allowing an attacker to inject a crafted...
CVE-2026-100710
Froxlor versions through 2.3.10 are vulnerable to a sensitive data exposure issue because the application fails to filter specific columns from API responses. Specifically, the functions Domains::get(), Domains::listing(), SubDomains::get(), and the admin branch of SubDomains::listing() perform a...
CVE-2026-100710 Froxlor before 2.3.12 DKIM Private Key Disclosure via API
Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get, Domains::listing, SubDomains::get, and the admin branch of SubDomains::listing perform a wildcard SELECT over the paneldomains table and return the row unmodified, including the paneldomains.dkimprivkey...
EUVD-2026-87683
Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get, Domains::listing, SubDomains::get, and the admin branch of SubDomains::listing perform a wildcard SELECT over the paneldomains table and return the row unmodified, including the paneldomains.dkimprivkey...
CVE-2026-100687 Budibase Server before 3.45.0 Credential Exposure via External Table Broadcast
Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasting external table updates to the Builder collaboration websocket room. Attackers with Builder access can intercept unredacted datasource objects containing database passwords and API keys by observing...