sqlmate

sqlmate Il y a certaines fonctionnalités que nous pensons que SQLMap devrait avoir. Comme trouver le panneau d'administration de la cible, un meilleur craquage de hash, etc. Si vous pensez la même chose, SQLMate est fait pour vous. Qu'est-ce qu'il fait ? Fournissez-lui un dork d'injection SQL via...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

Tenda-F3-V4

Exploit du routeur Tenda F3 et téléchargeur de fichiers Ce projet est un outil pour télécharger divers fichiers du routeur Tenda F3 v3/v4 via une vulnérabilité non authentifiée CVE-2020-35391. Il vous permet d'obtenir le fichier de configuration, le journal système et le dump de la mémoire flash ...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

CVE-2023-6329

CVE-2023-6329 — Contournement d'authentification Control iD iDSecure Un proof-of-concept en Python pour CVE-2023-6329 , une vulnérabilité de contrôle d'accès inapproprié dans Control iD iDSecure versions 4.7.43.0 et inférieures. La faille permet à un attaquant distant non authentifié de...

CVE-2025-2563

CVE-2025-2563 — Регистрация пользователей и членство | Полная цепочка повышения привилегий до администратора ██╗ ██╗███████╗███████╗██████╗ ██████╗ ███████╗ ██████╗ ██║ ██║██╔════╝██╔════╝██╔══██╗ ██╔══██╗██╔════╝██╔════╝ ██║ ██║███████╗█████╗ ██████╔╝ ██████╔╝█████╗ ██║ ███╗ ██║ ██║╚════██║██╔══...

LearnDash

LearnDash Sqli LearnDash = 4.25.6 - SQL-инъекция уровня Admin+ Описание Версия плагина LearnDash для WordPress ниже 4.25.6 уязвима к SQL-инъекции уровня Admin+. Детали Тип : плагин Slug : sfwd-lms Затронутая версия : Оценка CVSS : 9.8 Уровень CVSS : Критический Вектор CVSS :...

CVE-2018-6606

CVE-2018-6606 Это завершает любой PID. Протестировано на Windows 10 64-bit, Flare VM. Требуются права администратора. Возможно, потребуются некоторые корректировки — см. resource.rc. Инструментарий Скачать:...

SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition

SAP NetWeaver AS JAVA LM Configuration Wizard, versions 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an...

EyesOfNetwork - Hardcoded API Key

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key hardcoded as EONAPIKEY in include/apifunctions.php for API version 2.4.2 by default for all installations, hence allowing an attacker to calculate/guess the admin access token. id: CVE-2020-8657 info: name:...

FORTIWEB_CVE-2025-64446-58034

Simulation d'exploitation de FortiWeb CVE-2025-64446 & CVE-2025-58034 Remarque : Ce document est uniquement destiné à des fins d'apprentissage et de recherche en sécurité. Ne pas utiliser pour attaquer un système sans autorisation. 1. Aperçu FortiWeb est un pare-feu d'applications Web WAF utilisé...

f609-brute

f609-brute f609-brute est un outil simple de force brute pour les routeurs ZTE F609 de Telkom Indonesia. Comme Telkom Indonesia implémente TR-069 sur les modems ZTE F609, ils mettent régulièrement à jour le mot de passe administrateur. f609-brute est écrit en Python 2.7. Utilisation usage: python...

Rocky Linux 10.2 [CIQ] Security Update: gvfs / gvfs-client / gvfs-client-debuginfo / gvfs-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_73998)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202673998 advisory. gvfs: SFTP: heap-based buffer overflow in readreply CVE-2026-84268 gvfs: gvfs-admin socket ownership race permits local root CVE-2026-88924 Tenable has...

PT-2026-104157

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2026-104156

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

PT-2026-104065

A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file admin reservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

MiracleLinux 9 : gvfs-1.48.1-8.el9_8.1 (AXSA:2026-1955:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1955:04 advisory. gvfs: SFTP: heap-based buffer overflow in readreply CVE-2026-84268 gvfs: gvfs-admin socket ownership race permits local root CVE-2026-88924 Tenable...

PT-2026-104103

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability (cisco-sa-sdwan-webauth-xr8beuuU)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - An authentication bypass vulnerability exists in the API session-based authentication management of Cisco Catalyst SD-WAN Manager due to improper handling of URI encoding hex encoding in HTTP...

PT-2026-104478

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...