D-RAT_VB.NET_MySQL_PHP

D-RATVB.NETMySQLPHP D-RAT VB.NET+MySQL+PHP Проект состоит из сервера "D-RAT" и клиента "D-STUB" Языки программирования для клиента и сервера: "VB.NET Framework 2" База данных: "MySQL" Веб-страница: "PHP" https://www.youtube.com/watch?v=opBbmQ5BRFk...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - SQL-инъекция в Online Shopping System Advanced Краткое описание Критическая уязвимость SQL-инъекции обнаружена в проекте Online Shopping System Advanced от PuneethReddyHC. Дефект находится в action.php, который не выполняет должную санитизацию пользовательского вво...

wifipumpkin3

Wifipumpkin3 Framework puissant pour attaque par point d'accès rogue. Aperçu wifipumpkin3 est un framework puissant pour l'attaque par point d'accès rogue, écrit en Python, qui permet et offre aux chercheurs en sécurité, aux red teamers et aux ingénieurs en rétro-ingénierie de monter un réseau sa...

derailed

derailed CVE-2021-40875: Некорректный контроль доступа в версиях Gurock TestRail give it the url of the target without the md5 path https://foo.com Запустите dirsearch или ваш любимый инструмент фаззинга против этого списка...

CVE-2022-22077

✅ CVE-2022-22077 framework d'exploitation RTCore64.sys : Ce document fournit un aperçu complet du framework d'exploitation CVE-2022-22077, une boîte à outils sophistiquée d'attaque BYOVD Bring Your Own Vulnerable Driver qui cible la vulnérabilité du pilote RTCore64.sys. Ce framework démontre des...

CVE-2021-3560

CVE-2021-3560 Polkit - 로컬 권한 상승 kevinbackhouse의 GitHub Security Lab에서 최초 발견 참조 https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ https://www.youtube.com/watch?v=QZhz64yEd0g https://ubuntu.com/security/CVE-2021-3560 블로그...

spyrat

SpyRat простой Python RAT v 1.0 Автор: Mascerano Bachir dev-labs Правовой дисклеймер: Автор не несёт никакой ответственности за нецелевое использование этого инструмента, помните, что это только для образовательных целей. Описание: SpyRat — это троян удалённого доступа, написанный на Python, с...

openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy

A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...

corsair_scan

Bienvenue sur Corsairscan Corsairscan est un outil de sécurité pour tester les mauvaises configurations de Cross-Origin Resource Sharing CORS. CORS est un mécanisme qui permet à des ressources restreintes d'une page web d'être demandées depuis un autre domaine que celui à partir duquel la premièr...

CVE-2024-6387-how-to-fix

CVE-2024-6387-how-to-fix Устранение уязвимости и смягчение последствий CVE-2024-6387 CVE-2024-6387: критическая уязвимость RCE в OpenSSH «regreSSHion» Моя статья в LinkedIn Сведения о CVE Описание Группа исследования угроз Qualys TRU подробно описала серьёзную уязвимость безопасности под название...

CVE-2022-38694_unlock_bootloader

CVE-2022-38694 Злоумышленник, имеющий физический доступ к устройству, может перезаписать указатель на функцию в разделе данных BootROM или адрес возврата, сохраненный в стеке, и выполнить свой собственный код с привилегиями BootROM. Подробную информацию читайте в статье NCC Group. Быстрая...

SonicWall GMS and Analytics Web Services - Shell Injection

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions id: CVE-2023-34124 info: name: SonicWall GMS and Analytics Web...

Branda WordPress plugin - Privilege Escalation

Branda WordPress plugin = 3.4.24 contains a privilege escalation caused by improper user identity validation in password update functionality, letting unauthenticated attackers change arbitrary user passwords, including administrators, exploit requires crafted request. id: CVE-2025-14998 info:...

CrushFTP - Authentication Bypass

CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability that may result in unauthenticated access. Remote and unauthenticated HTTP requests to CrushFTP may allow attackers to gain unauthorized access. id: CVE-2025-31161 info: name: CrushFTP - Authenticati...

Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload

Cisco ISE and Cisco ISE-PIC contain an unrestricted file upload vulnerability caused by lack of file validation in an internal API, letting unauthenticated remote attackers upload and execute files as root, exploit requires crafted file upload. id: CVE-2025-20282 info: name: Cisco ISE 3.4P2 -...

Flowise - Path Traversal

Flowise = 2.2.8 contains a path traversal vulnerability caused by missing validation of chatflowId and chatId parameters in file handling, letting unauthenticated attackers read and write arbitrary files, exploit requires no authentication. id: CVE-2025-71334 info: name: Flowise - Path Traversal...

CData API Server < 23.4.8844 - Path Traversal

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...

WordPress Simple Job Board - Unauthorized Data Access

The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to insufficient authorization checking in the fetchquickjob function in all versions up to and including 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be...

LearnPress < 4.2.6.8.1 - Information Disclosure

LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by incorrect implementation of getitemspermissionscheck function in all versions up to 4.2.6.8, letting unauthenticated attackers extract user emails and basic information. id: CVE-2024-5483 info: name: LearnPress...