T24 Web Server - Local File Inclusion

T24 web server is vulnerable to unauthenticated local file inclusion that permits an attacker to exfiltrate data directly from server. id: CVE-2019-14251 info: name: T24 Web Server - Local File Inclusion author: 0xAkoko severity: high description: T24 web server is vulnerable to unauthenticated...

Linear eMerge E3 - Cross-Site Scripting

Linear eMerge E3-Series devices are vulnerable to cross-site scripting via the 'layout' parameter. id: CVE-2019-7255 info: name: Linear eMerge E3 - Cross-Site Scripting author: arafatansari severity: medium description: | Linear eMerge E3-Series devices are vulnerable to cross-site scripting via...

FlatnuX CMS - Directory Traversal

A path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action. id: CVE-2012-4878 info: name: FlatnuX CMS - Directory Traversal author: daffainfo severity:...

SmarterTools SmarterTrack - Cross-Site Scripting

Cross-site Scripting XSS vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010. id: CVE-2022-24384 info: name: SmarterTools SmarterTrack - Cross-Site Scripting author: E1A severity: medium description: | Cross-site Scripting XSS vulnerability in...

Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting

Mitel ShoreTel 19.46.1802.0 devices and their conference component are vulnerable to an unauthenticated attacker conducting reflected cross-site scripting attacks via the PATHINFO variable to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page. id:...

HyperComments <= 1.2.2 - Arbitrary Options Update

The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to...

Xinuo Openserver 5/6 - Cross-Site scripting

Xinuo formerly SCO Openserver versions 5 and 6 allows remote attackers to inject arbitrary web script or HTML tag via the parameter 'section' and is vulnerable to reflected cross-site scripting. id: CVE-2020-25495 info: name: Xinuo Openserver 5/6 - Cross-Site scripting author: 0xAkoko severity:...

RedCloud-OS

⚠️ RedCloud OS 项目已迁移 🚚 该项目已迁移至新位置：https://github.com/RedCloudOS 👉 访问我们的网站了解更多信息：https://redcloud.training/ 此仓库现已归档，将不再接收更新。...

GhostESP

The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

CVE-2022-36446-Webmin-Software-Package-Updates-RCE

Un script de Python para explotar CVE-2022-36446 Software Package Updates RCE Authenticated en Webmin 1.997. Características Soporta HTTP y HTTPS incluso con certificados autofirmados con --insecure. Ejecución de un solo comando con la opción --command. Consola interactiva con la opción...

skiptracer

帐户已迁移至：https://gitlab.com/illwill 目前不再提供支持。 Python 3 迁移正在进行中，请暂时不要报告问题，因为代码和源文件还需要大量升级。 项目已迁移至 https://gitlab.com/illwill/skiptracer...

CVE-2022-36446-Webmin-RCE

CVE-2022-36446 — Webmin 1.997 RCE 已认证 用于利用 Webmin 1.997 之前版本中通过 Software Package Updates 模块存在的远程代码执行漏洞的 Exploit。 工作原理？ Webmin 的 Software Package Updates 模块在将 u 参数传递给系统之前未能正确进行清理。拥有该模块访问权限的已认证用户可以注入任意命令，这些命令将以 root 身份执行。 前提条件 在运行 Exploit 之前安装依赖项： pip3 install requests beautifulsoup4 lxml urllib3 参...

webvulscan

WebVulScan Synopsis WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These...

CVE-2019-12840

CVE-2019-12840 已验证的远程代码执行：Webmin 1.910 - ‘软件包更新’ 使用方法： 1- 设置一个netcat监听器。 2- python3 exploit.py 注意： 提供URL，例如：http://:port 请从浏览器复制'sid' cookie并提供给exploit以使其工作...

needrestart

needrestart О проекте needrestart проверяет, какие демоны необходимо перезапустить после обновления библиотек. Он вдохновлён checkrestart из пакета debian-goodies. В каталоге ex/ есть несколько скриптов-хуков для использования с apt и dpkg. Эти скрипты вызывают needrestart после установки или...

CVE-2019-12840.py

CVE-2019-12840.py POC Fake Shell: CVE-2019-12840 RCE Autenticado - Actualizaciones de Paquetes de Webmin...

gssapi-abuse

gssapi-abuse gssapi-abuse 是作为我在 DEF CON 31 演讲的一部分发布的。关于该滥用向量的完整文章可在此处找到： A Broken Marriage: Abusing Mixed Vendor Kerberos Stacks 该工具具有两项功能。第一项是枚举已加入 Active Directory 且通过 SSH 提供 GSSAPI 身份验证的非 Windows 主机。 第二项功能是能够对缺少正确前向和/或反向 DNS 查找条目的、可被 GSSAPI 滥用的主机执行动态 DNS 更新。基于 GSSAPI 的身份验证在匹配服务主体名称时非常严格，因此 DNS...

Microsoft SharePoint - Remote Code Execution

Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source markup of an application package. id: CVE-2020-16952 info: name: Microsoft SharePoint - Remote Code Execution author: dwisiswant0 severity: high description: Microsoft SharePoint is vulnerabl...