82 matches found
Apache-Flink-Dashboard-rec
Apache-Flink-Web-Dashboard-RCE Apache Flink Web Dashboard RCE...
mylg
myLG, Command line Network Diagnostic Tool myLG is an open source software utility which combines the functions of the different network probes in one network diagnostic tool. Features Popular looking glasses ping/trace/bgp: Telia, Level3, NTT, Cogent, KPN More than 200 countries DNS Lookup...
meshyface
Meshyface Meshyface ist ein Chat-zentriertes Meshtastic-Dashboard, das als einzelner Python-Dienst läuft und eine Single-Page-Web-UI über HTTP bereitstellt. Aktuelle App-Oberfläche Die aktuelle UI bietet: Chat sowie Direkt-Peer-Gespräche Netzwerkarbeitsbereich für Karte, Übersicht, Verbindungen,...
AutoProber
AutoProber AutoProber ist der Flying-Probe-Automatisierungsstack für Hardware-Hacker, der Ihrem Agenten alles gibt, was er braucht, um von „ein neues Ziel auf dem Teller“ bis zum sicheren Sondieren einzelner Pins zu gelangen. Demovideo: https://gainsec.com/autoprober-demo-mp4/ Ablauf 1. Weisen Si...
Sirius
Sirius Scan Sirius è uno scanner di vulnerabilità open-source con rilevamento automatico, individuazione basata su CVE e una moderna interfaccia web. Clona, esegui quattro comandi, inizia la scansione. Avvio Rapido root@kitploit: git clone https://github.com/SiriusScan/Sirius.git cd Sirius docker...
interactsh
An OOB interaction gathering server and client library Features • Usage • • • •...
cumulus
Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful...
Flink_RCE
Apache Flink Web Dashboard: Unautorisierter Zugriff und Upload einer schädlichen JAR-Datei führen zu Remote-Code-Ausführung msf nc Python-Verwendung: python 02-Flink.py http://10.10.20.100:8081 nc.jar...
PULSE-C2
Framework PULSE C2 Infrastruttura di Comando e Controllo HTTPS con dashboard web per la gestione remota di agenti Windows. ⚠️ Solo per uso educativo - L'uso illegale è di tua responsabilità. Caratteristiche Server C2 HTTPS con crittografia TLS Flask Dashboard web in tempo reale Protocollo...
c-sentinel
C-Sentinel Osservabilità semantica per sistemi UNIX Un probe di sistema leggero e portabile scritto in C che cattura "impronte digitali del sistema" per l'analisi assistita da IA dei rischi non ovvi. Include integrazione con auditd, valutazione del rischio spiegabile e un cruscotto web live con...
cygor
Cygor Panoramica Generale Cygor è un framework modulare di scoperta degli asset che riunisce scansione, parsing ed enumerazione dei servizi in un unico flusso di lavoro. Sostituisce l'insieme eterogeneo di strumenti separati con un processo automatizzato che gestisce senza soluzione di continuità...
pared
Pared Pared è un piano di controllo leggero e sicuro e una dashboard amministrativa web in tempo reale scritta in Crystal per la sicurezza degli host Linux. Fornisce una gestione centralizzata per le interfacce firewalld DBus/CLI e per le connessioni NetworkManager, con TLS reciproco mTLS,...
PYSEC-2026-2512 hermes-agent has an Incorrect Comparison
A security flaw has been discovered in NousResearch hermes-agent 2026.4.23. Affected is the function discoverdashboardplugins of the file hermescli/webserver.py of the component CLI web-dashboard Interface. Performing a manipulation of the argument HERMESENABLEPROJECTPLUGINS results in incorrect...
CVE-2026-49471
Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port, with no authentication, no CSRF protection, and no Host header validation. A D...
CVE-2026-49471
Serena exposes an unauthenticated Flask API on a fixed port prior to v1.5.2, with no authentication, CSRF protection, or Host header validation. A DNS rebinding attack can reach this API from any browser and write arbitrary content to the agent’s persistent memory store, which the agent may read ...
CVE-2026-9029 Stored XSS in the Geomap panel tile-layer attribution
A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard stored cross-site scripting...
Arista Edge Threat Management - Arista Next Generation Firewall 安全漏洞
Arista Edge Threat Management - Arista Next Generation Firewall is a unified network security platform developed by the American company Arista. It integrates next-generation firewalls, intrusion prevention, web filtering, application control, and network threat protection capabilities. There are...
Hermes Agent 安全漏洞
Hermes Agent is an AI agent tool developed by Nous Research, featuring a self-learning mechanism. Version Hermes Agent 2026.4.23 contains a security vulnerability. This vulnerability stems from improper handling of the parameter HERSERENABLEPROJECTPLUGINS in the function discoverdashboardplugins ...
PT-2026-42929
Name of the Vulnerable Software and Affected Versions hermes-agent version 2026.4.23 Description A security flaw exists in the CLI web-dashboard Interface within the discover dashboard plugins function of the hermes cli/web server.py file. A manipulation of the HERMES ENABLE PROJECT PLUGINS...
