3903 matches found
fake-mailer
Fake Mailer + Disclaimer : Fake Mailer is tool to Send Mail Anonymously from a different Email.This process can take upto 5 mins. This tool is created for Educational Purpose Only !! I am not responsible for any Misuse of this tool !! Installation : apt update apt install git python2 -y git clone...
CVE-2018-17873
CVE-2018-17873 运行固件版本 7.0.8rc3 及更早版本的 WiFiRanger 室内路由器（Core、GoAC）及其室外配对路由器（Sky Pro、EliteAC、EliteAC FM）允许匿名 FTP 读写访问，并且 SSH 私钥以明文形式保留——这使得查看/复制密钥并以 root 权限登录变得轻而易举。 利用此漏洞需要相邻网络访问。 漏洞利用： 极其简单的 shell 脚本，可获取私钥并以 root 身份登录。 使用方法： ./wifiRangerPwn.sh...
EUVD-2026-57465
SiYuan: Missing publish-access check on getBlockBreadcrumb, getRefText, and getBlockTreeInfos discloses content and metadata of protected/forbidden documents...
EUVD-2026-58625
SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents publish mode...
EUVD-2026-58626
SiYuan: SQL injection in backlink/mention search via unescaped stored and client input publish mode: first-order client keyword and second-order stored document title breakout on read-write handle...
EUVD-2026-58627
SiYuan: Missing authorization on refreshBacklink allows anonymous readers to trigger persistent server-side writes and unauthenticated resource amplification publish mode...
EUVD-2026-52273
SiYuan: Cross-boundary metadata disclosure via getBlockInfo publish mode: reader-reachable document title/root info for publish-forbidden docs; sibling getDocInfo is filtered...
EUVD-2026-52275
SiYuan: Full-content disclosure of publish-disabled documents via getHeadingTransaction endpoints publish mode: reader-reachable rendered DOM with no publish-access check...
EUVD-2026-52279
SiYuan: Path Traversal via unvalidated avID in RenderAttributeView/AV read endpoints : reader-reachable cross-scope attribute-view disclosure...
EUVD-2026-52277
SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock publish mode : reader-reachable raw statement on read-write handle, cross-notebook read/write...
awesome-jenkins-rce-2019
awesome-jenkins-rce-2019 There is no pre-auth RCE in Jenkins since May 2017, but this is the one! It chains CVE-2018-1000861, CVE-2019-1003005 and CVE-2019-1003029 to a more reliable and elegant pre-auth remote code execution! Affect list ANONYMOUSREAD disable Jenkins version 2.138 ANONYMOUSREAD...
CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation
CVE-2026-21017 – LDAP 匿名绑定权限提升 程序代码（Python ldap3 模拟） root@kitploit: ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server = Server'ldap://localhost:389', getinfo=ALL conn =...
dyen
dyen dyen 使用 macOS 自带的 Python 在内存中加载 Mach-O dylib，并在不调用 dlopen 的情况下调用该 dylib 的导出入口点。其目标是使映像永远不会以独立文件的形式出现在目标上，也永远不会注册到 dyld。 作者：cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/dyen Summary dyen 是一个仅使用标准库的 Mach-O 内存加载器（loader.py），适用于 macOS 上自带的 /usr/bin/python3。它读取普通...
POC-2020-8559
POC-2020-8559 CVE-2020-8559的利用。我们使用iptables劫持所有到kubelet的连接，然后将101或302响应重写为307。101用于现代Kubernetes版本，302用于较旧版本。 我们无法访问kube-apiserver的x509证书，因此kubelet webhook认证可能成为问题。使用这个kubelet配置片段就没有问题，它基本上重新启用了旧式的kubelet利用： root@kitploit: authentication: anonymous: enabled: true authorization: mode: AlwaysAllow...
Mongodb-Redis-scan
Mongodb-Redis-scan Script de escaneo anónimo de mongodb-redis, compatible con el escaneo anónimo de mongodb y redis Script de escaneo anónimo de mongodb-redis, compatible con el escaneo anónimo de mongodb y redis; fue escrito anteriormente por una necesidad puntual y ahora lo comparto con todos...
CVE-2026-82652 SiYuan before v3.8.1 Information Disclosure via Publish Access
SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-view backlinks in publish mode. Anonymous readers can enumerate invisible content through these three listing mechanisms despite admin configuration marking content unlisted...
CVE-2026-82652 SiYuan before v3.8.1 Information Disclosure via Publish Access
SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-view backlinks in publish mode. Anonymous readers can enumerate invisible content through these three listing mechanisms despite admin configuration marking content unlisted...
EUVD-2026-67323
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...
EUVD-2026-67327
The static resource interface /api/static/deployKey/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root...
