7804 matches found
ToRat
Goで書かれたクロスプラットフォームのリモート管理ツール。Torをトランスポート機構として使用し、現在Windows、Linux、MacOSのクライアントをサポートしています。 免責事項 教育目的のみに使用してください。 Wiki ToRat Docker イメージの使い方 プレビュー クライアントコマンド サーバーコマンド 現在の機能 アーキテクチャ RPC（リモートプロシージャコール）ベースの通信により、新しい機能の追加が容易 自動UPXにより、Torを埋め込んだ状態でクライアントバイナリは約6MB gormを介したsqliteでクライアント情報を保存 クライアントはgarbleで難...
Lime-RAT
Obsoleto. Archívelo en lugar de eliminarlo LimeRAT v0.1.9 Herramienta de Administración Remota para Windows Descripción RAT simple pero potente para máquinas Windows. Este proyecto es simple y fácil de entender, debería darte un conocimiento general sobre los malware dotNET y cómo se comportan...
RAT-via-Telegram
RAT-via-Telegram 基于Telegram的Windows远程管理工具（现已支持Python 3.7！）| 原作者 Ritiek 为什么又一个？ 当前市场上的远程管理工具面临两大问题： 缺乏加密。 需要端口转发才能从千里之外进行控制。 本RAT通过使用Telegram bot API克服了这两个问题。 完全加密。交换的数据无法通过MITM工具被窃听。 Telegram消息应用提供了一种简单方式与目标通信，无需事先在目标上配置端口转发。 功能特点： 键盘记录器，包含窗口标题记录 获取目标PC的Windows版本、处理器等信息 获取目标PC的IP地址信息及地图上的近似位置...
Aurora
Aurora RAT Acerca de Aurora RAT o Herramienta de Administración Remota está escrita en Go. Este proyecto se inició para aprender redes en Go y adentrarme en el campo de la seguridad. Uso Compila y ejecuta Main.go y luego ejecuta el stub en cualquier computadora que desees controlar. Stub El stub ...
pace
PACE Una elegante herramienta de administración remota para Windows Acerca de Administra equipos remotos con facilidad, mediante una interfaz sencilla de usar, funciones claras e integración perfecta con el sistema. Este proyecto se encuentra actualmente en una etapa temprana de desarrollo; las...
Kibana 8.x < 8.19.17 / 9.0.x < 9.3.6 / 9.4.x < 9.4.3 Path Traversal (ESA-2026-159)
The version of Kibana installed on the remote host is 8.x prior to 8.19.17, or 9.0.x prior to 9.3.6, or 9.4.x prior to 9.4.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-159 advisory. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
XWiki – Stored Cross-Site Scripting (XSS)
XWiki through version 17.3.0 contains stored cross-site scripting caused by improper sanitization of inputs in the Administration interface's Presentation section, letting authenticated administrators inject JavaScript that executes in visitors' browsers, exploit requires administrator...
PT-2026-88510
Impact The Elasticsearch and ElasticSecurity nodes built REST endpoints by interpolating user-provided identifiers straight into the request path. A value containing path separators or dot segments changed which endpoint the request actually reached, so an operation intended for one document coul...
CVE-2026-79588
U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...
EUVD-2026-71218
It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface...
CVE-2026-14466
Stormshield SNS is vulnerable to a stored XSS in its web administration panel. An SNS administrator with appropriate permissions can inject a malicious script into a group's comments within the webservices administration interface , leading to execution in the context of other users. The CVSS v3....
CVE-2026-15933
OptimiDoc Server (On-Premise) stores credentials for external services in cleartext, allowing an authenticated administrator to view previously configured passwords—SMTP , FTP (scan delivery), Active Directory (user list import), and SharePoint —in cleartext through the web administration panel p...
EUVD-2026-70062
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of resources via Path Traversal CAPEC-126. A low-privileged user could cause a subsequent action taken by a higher-privileged user in the Fleet...
CVE-2026-78591 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource Deletion
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of resources via Path Traversal CAPEC-126. A low-privileged user could cause a subsequent action taken by a higher-privileged user in the Fleet...
CVE-2026-78591 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource Deletion
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of resources via Path Traversal CAPEC-126. A low-privileged user could cause a subsequent action taken by a higher-privileged user in the Fleet...
CVE-2024-7953
CVE-2024-7953 is a Missing Authorization (CWE-862) vulnerability in Rockwell Automation DataMosaix Private Cloud versions 7.07 and prior . A threat actor with low privileges can remotely create a project and become its administrator , then create, modify, or delete that project. The CISA advisory...
CVE-2026-51681
Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to expose WAN-side administration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
EUVD-2026-68544
Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to expose WAN-side administration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51681
An incorrect access control flaw in the setRemoteCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) allows an unauthenticated attacker to send a crafted POST request to /cgi-bin/cstecgi.cgi , thereby exposing the device's WAN-side administration interface. The vulnerability i...