CVE-2025-5815-Nuclei-Template

📄 CVE-2025-5815 的 Nuclei 模板 🚀 概述 此仓库包含一个专门用于检测 Traffic Monitor WordPress 插件中 未经认证的机器人日志禁用漏洞（CVE-2025-5815） 的 Nuclei 模板。该漏洞允许未经认证的攻击者通过一个脆弱的 AJAX 操作远程禁用机器人日志。 🔍 漏洞描述 CVE-2025-5815 源于 WordPress 的 Traffic Monitor 插件 中 tfcmsetbotflags AJAX 操作缺少身份验证和授权检查。这使得远程攻击者能够篡改插件设置，无需登录凭据即可禁用机器人日志——导致受影响 WordPre...

Burp2Malleable

Burp2Malleable Utilidad rápida en Python que escribí para convertir peticiones HTTP de Burp Suite en perfiles Malleable C2 de Cobalt Strike. Permite tomar peticiones capturadas o creadas en BurpSuite o ZAP, POSTMAN, etc. con el aspecto que quieras darle a tu tráfico o con el que quieras...

CVE-2025-15556-Notepad-WinGUp-Updater-RCE

Software afectado: Versiones de Notepad++ anteriores a la 8.8.9 que usan el actualizador WinGUp. Tipo de vulnerabilidad: Omisión de la verificación de integridad de actualización que conduce a la ejecución arbitraria de código. Descripción: El actualizador WinGUp no verifica adecuadamente la...

netwatch v0.30.0

NetWatch A network monitor for the terminal that helps identify the process behind connections, reads TLS you hold the keys to, and tells you what is wrong and how to fix it. netwatch --view dense. Four boxes, no chrome, every keybind on a border. Download grows up from the axis, upload grows dow...

PacketPirate

PacketPirate Un proxy MITM sin interfaz gráfica, programable y basado en la línea de comandos, diseñado para la interceptación, análisis y modificación de tráfico de red en sistemas Windows. Funciona de manera similar a los proxies GUI estándar de la industria, pero está optimizado para entornos ...

PoC-CVE-2026-46331

本仓库包含 CVE-2026-46331 的概念验证 PoC 漏洞利用程序，这是一个 Linux 内核中流量控制子系统的本地提权漏洞。 漏洞概述 该缺陷存在于 actpedit 数据包编辑操作中，内核在完全获知所有运行时数据包偏移量之前，可能会错误计算写时复制 COW 的可写范围。在特定的本地条件下，这可能导致向共享页缓存内存执行写入操作。 影响 无特权的本地用户可利用此行为毒化 /bin/su 等 setuid-root 二进制文件的内存缓存副本。 原始磁盘文件未被修改，因此文件完整性检查可能仍显示正常。 执行已缓存二进制文件可导致获取 root shell。 受影响系统...

CVE-2026-46331-pedit-cow

CVE-2026-46331-pedit-cow 针对 pedit COW 漏洞（CVE-2026-46331）的撰写和利用步骤。 概述 该挑战演示了 pedit COW，这是 Linux 内核流量控制子系统中数据包编辑动作（actpedit）的一个缺陷。该漏洞允许非特权用户覆盖内存中 setuid-root 二进制的副本，从而在不触及磁盘文件的情况下有效获取 root shell。 利用步骤 1. 初始设置 环境以非特权用户（karen）身份启动。 root@kitploit: id cd /packeteditmeme make packeteditmeme 2...

CVE-2026-86091 ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler

ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-administrators to delete all host pools and member bindings. Attackers can issue POST requests to the delete pools endpoint to irreversibly destroy every host pool, removing traff...

CVE-2017-7358

creationtimestamp| type| source ---|---|--- 2026-09-04 18:00:03+00:00| seen| Telegram/lpcaxohlevWOQxYAX9XUMgFve84tVn0viR4d8tnkij6ww 2026-09-05 01:00:21+00:00| published-proof-of-concept| Telegram/lpcaxohlevWOQxYAX9XUMgFve84tVn0viR4d8tnkij6ww...

[SECURITY] Fedora 44 Update: mrtg-2.17.10-14.fc44

The Multi Router Traffic Grapher MRTG is a tool to monitor the traffic load on network-links. MRTG generates HTML pages containing PNG images which provide a LIVE visual representation of this traffic...

Linux Distros Unpatched Vulnerability : CVE-2026-85043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic...

The vulnerability of the tcf_ct_flow_table_get() function in the net/sched/act_ct.c module of the net/sched/traffic management subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcfctflowtableget function in the net/sched/actct.c module of the net/sched/traffic management subsystem of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

CVE-2026-85433

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARECMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARECMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary address...

CVE-2026-85433 MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARECMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARECMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary address...

DEBIAN-CVE-2026-85043

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...

CVE-2026-85043

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...

EUVD-2026-70704

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...

CVE-2026-85043

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: High...

org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Server impersonation via improper TLS hostname verification

A flaw was found in the asynchronous version of Apache HttpComponents Client. This improper Transport Layer Security TLS hostname verification vulnerability allows a remote attacker to intercept and modify network traffic. By presenting a valid certificate for a different domain, an attacker can...

GHSA-FM8W-2M5W-9J7R Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match

Impact Standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule under specific cluster configurations. When Cilium deployment is configured with a specific custom clusterName rather than...