hackingtool

보안 연구원 및 침투 테스터를 위한 올인원 해킹 도구...

CVE-2021-27188

CVE-2021-27188 제안된 설명 FX Aggregator 터미널 클라이언트 Sovremennye Delovye Tekhnologii 제품는 공격자가 피해자 계정에 대해 5회의 잘못된 로그인 시도를 통해 서비스 거부5시간 동안 접속 중단를 유발할 수 있습니다. 취약점 유형 기타 DoS 제품 공급업체 OOO Sovremennye Delovye Tekhnologii 영향을 받는 제품 코드 베이스 Fx-agreggator terminal client - 1 영향을 받는 구성 요소 영향을 받는 실행 파일 공격 유형 원격 서비스 ...

cve-scores

CVE 점수 EPSS 및 VEDAS 점수 집계기 CVE용 데이터 제공자 점수| 유지관리자| 목적| 범위| 출처| 갱신 주기 ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| 미래 악용 예측| 1개 식별자 CVE| 데이터 파트너로부터 제공된 독점 데이터| 24시간 Vulnerability & Exploit Data Aggregation System VEDAS| A.R.P. Syndicate| 취약점 보급률 및 익스플로잇 성숙도 추...

PloitKit

PloitKit 해커의 도구 상자 PloitKit는 다른 모든 소프트웨어를 위한 원스톱 솔루션으로 설계된 Python 기반 GUI 도구입니다. 다른 시스템으로 전환하거나 USB를 분실했을 때 이런 문제에 직면했습니다. Google에 가서 모든 도구를 검색하고 다운로드해야 했습니다. 그래서 클릭만 하면 도구가 바로 나오는 도구를 만들기로 결정했습니다. 이 도구에 900개 이상의 도구를 추가했지만, 현재는 400개 이상만 사용할 수 있습니다. 이 도구가 작동하는지 테스트하기 위함이며, 작동하면 모든 사람이 사용할 수 있도록 공개할...

cyber_rss

cyberrss cert 11 ASD ACSC アラート（オーストラリア） CERT-FR（ANSSI） CISA サイバーセキュリティ勧告 CISA ICS 勧告 CISA ICS 医療機器勧告 JPCERT/CC JPCERT/CC ブログ UK NCSC 全RSSフィード UK NCSC ガイダンス UK NCSC ニュース UK NCSC レポート news 11 Bleeping Computer（フォーラム） BleepingComputer CyberScoop Dark Reading...

mihari

mihari OSINT 기반 위협 헌팅을 위한 쿼리 집계기입니다. Mihari는 단일 규칙에서 여러 서비스에 걸친 다중 검색을 집계하고, 발견 결과를 데이터베이스에 저장할 수 있습니다. Mihari는 기본적으로 다음 서비스를 지원합니다. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise HunterHow Onyphe OTX PassiveTotal Pulsedive SecurityTrails Shodan urlscan.io Validin...

CVE-2021-27187

CVE-2021-27187 推奨説明 「Sovremennye Delovye Tekhnologii」によるFX Aggregator ターミナルクライアントは、「パスワードを保存」チェックボックスがオンになっている場合、認証情報を平文で login.sav に保存します。 脆弱性タイプその他 CWE-522 不十分に保護された認証情報 製品ベンダー OOO Sovremennye Delovye Tekhnologii 影響を受ける製品コードベース Fx-agreggator terminal client - 1 影響を受けるコンポーネント 影響を受けるファイル「login.sa...

Malicious code in etoro-aggregator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d5f0fb8c06c23afad28686a3d3d689dfc5a3786c73bff2c569fd8b55f2b4ad The package's preinstall.js lifecycle script executes automatically on npm install and performs reconnaissance on the installer host. It collects...

MAL-2026-16111 Malicious code in etoro-aggregator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d5f0fb8c06c23afad28686a3d3d689dfc5a3786c73bff2c569fd8b55f2b4ad The package's preinstall.js lifecycle script executes automatically on npm install and performs reconnaissance on the installer host. It collects...

Aggressor-Aggregator

Aggressor 聚合器 描述 这是一个辅助脚本，用于将 Aggressor Script 和 Beacon 对象文件（BOF）仓库整合为单个 CNA 文件，供 Cobalt Strike 使用。专为红队 CTF 环境中频繁搭建/销毁操作员客户端的自动化而设计。该脚本本质上是 @am0nsec 所著 Cobalt Strike Aggressor Scripts-Ception 博客文章的一个封装。已在 Windows 10、Linux 和 macOS 上测试通过。 使用方法 1. 克隆此仓库 2. 创建一个文本文件，写入你常用的 BOF/Aggressor 仓库 URL（或单个 .c...

hosts v3.16.111

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

CVE-2026-81094

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

EUVD-2026-67022

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

CVE-2026-81094 mcp-router CLI before 0.6.3 Binds the MCP Aggregator to All Interfaces Without Requiring Authentication

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

CVE-2026-81094

CVE-2026-81094 affects the mcp-router CLI (prior to version 0.6.3). The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port and enforced authentication only when an explicit token flag was supplied. A default invocation therefore expose...

CVE-2026-81094 mcp-router CLI before 0.6.3 Binds the MCP Aggregator to All Interfaces Without Requiring Authentication

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

CVE-2026-81094 mcp-router CLI before 0.6.3 Binds the MCP Aggregator to All Interfaces Without Requiring Authentication

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

PT-2026-82567

Name of the Vulnerable Software and Affected Versions mcp-router versions prior to 0.6.3 Description The CLI serves its MCP aggregator on every network interface by default and only enforces authentication if explicitly requested by the operator. In the serve command located in...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: platform/surface: aggregator: Add a missing call to ssamrequestsyncfree Although rare, ssamrequestsyncinit can fail. In that case, the request should be freed using ssamrequestsyncfree. Currently, the request is instead leaked. F...

CVE-2026-18934

The RSS Aggregator by Feedzy WordPress plugin before 5.2.6 does not verify that the requesting user owns or is allowed to edit the import job named in the request, allowing users with author-level access and above to permanently delete the posts created by another user's import job, reset its...