4547 matches found
cve-2022-22954
CVE-2022-22954 This package detects a subset of CVE-2022-22954 attempts and exploits, generates a notice, and also includes the exploit URI and the first 4KB of the data that was sent back to the attacker as a response. While detecting this attack is more straightforward from log analysis, this...
ch55x_firmware_extractor
CH55x firmware extractor The CH55x firmware extractor is used to read out firmware from CH55x integrated circuits. There is no in-built support in the devices for directly reading out the firmware through the bootloader. However, there is a functionality to verify the firmware contents 8 bytes at...
jarm
JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check
A flaw was found in golang.org/x/crypto/ssh. The Verify method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially...
PoC--CVE-2019-10149_Exim
PoC-CVE-2019-10149Exim MNEMO-CERT 开发了一个 PoC，可利用影响 Exim 多个版本（4.87 - 4.91）的漏洞 CVE-2019-10149，以提升权限执行命令。 要本地利用该漏洞，需要定义要执行的命令。对于远程场景，仅考虑了 Exim 未使用 ACL "verify= recipient" 的情况，此时除了命令外还需指定服务的 IP 地址和端口。 MNEMO-CERT 开发此 PoC 仅出于教育目的，并用于执行能够复现 CVE-2019-10149 所述漏洞的伦理测试。此 PoC 应仅在受控环境或获得必要授权的情况下使用。...
CVE-2022-22954
CVE-2022-22954 注意 このツールは自己責任で使用してください。このリポジトリは教育目的のみであり、違法な意図には厳しく反対します。このリポジトリに関連する違法行為について一切の責任を負いません。倫理的に行動してください！ 例 root@kitploit: python3 CVE-2022-22954.py -t target.com python3 CVE-2022-22954.py -t 10.10.10.10 Shodan クエリ root@kitploit: shodan search "http.favicon.hash:-1250474341" --limit...
CVE-2023-28432
CVE-2023-28432 MiniO verify インターフェースの機密情報漏洩脆弱性 CVE-2023-28432 日本語名: MinIO verify インターフェースの機密情報漏洩脆弱性（CVE-2023-28432） 説明 : MinIOは、Amazon S3...
cve-2024-7646
CVE-2024-7646 説明 デフォルトでは nginx.ingress.kubernetes.io/server-snippet は無効ですが、本CVEにより nginx.ingress.kubernetes.io/auth-tls-verify-client を使用してカスタムスニペットを挿入したり、Luaコードを含めることが可能です。 修正バージョン ingress-nginx controller v1.11.2 - kubernetes/ingress-nginx11719 および kubernetes/ingress-nginx11721 によって修正されました...
CVE-2026-12358
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
CVE-2026-11928
IBM Verify Identity Access is vulnerable to a buffer overflow attack...
CVE-2026-11934
IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input...
CVE-2026-11927
IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services...
CVE-2026-11929
IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...
CVE-2026-12101
IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests...
CVE-2026-11926
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
CVE-2026-11921
IBM Verify Identity Access containers may not apply management password change operations correctly...
EUVD-2026-78897
IBM Verify Identity Access containers may not apply management password change operations correctly...
CVE-2026-11921
IBM Verify Identity Access containers may not apply management password change operations correctly...