discover

Discover 사용자 정의 Bash 및 Python 스크립트로, Metasploit을 사용한 정찰, 스캐닝, 열거 및 악성 페이로드 생성 등 다양한 침투 테스트 작업을 자동화합니다. Ubuntu용입니다. Kali Linux는 제한적으로 지원합니다. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 설정 및 사용법 홈 디렉터리에 다운로드하세요. cd git clone https://github.com/leebaird/discover cd discover/...

Azure

Azure 공격적 보안 툴킷 Azure 보안 평가를 위한 Bash 및 PowerShell 스크립트 모음으로, IAM 권한 상승, 컨테이너 보안, Key Vault 노출, Entra ID 구성 등을 다룹니다. Azure Cloud Shell 또는 인증된 모든 터미널에서 실행하도록 설계되었습니다. 스크립트 IAM / ID 스크립트| 셸| 설명 ---|---|--- IAMPrivz.sh| Bash| 테넌트 전체의 모든 RBAC 역할 정의와 할당을 감사하여 위험한 권한 상승 권한인 roleAssignments/write,...

Bheem

Project Bheem Project Bheem은 반복적으로 실행되어 다양한 도구와 정찰Recon 프로세스를 수행하고 출력물을 체계적으로 저장하는 작은 bash 스크립트들의 간단한 모음입니다. 이 프로젝트는 처음에 개인 용도로 정찰을 자동화하기 위해 만들어졌으며, 특별한 기능이 없기 때문에 공개할 의도는 없었으나 커뮤니티의 요청으로 현재 공개되었습니다. 어떤 방식으로든 개선해 주시기 바랍니다. 특별한 비법은 없으며, 간단한 정찰 자동화를 위해 bash 스크립트로 작성된 명령어와 기존 도구들의 집합일 뿐입니다. Project...

CVE-2025-54306

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration parameters through administrative...

EUVD-2025-201177

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration parameters through administrative...

CVE-2025-54306: Improper Input Validation

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration parameters through administrative...

PT-2025-49043

Name of the Vulnerable Software and Affected Versions Thermo Fisher Torrent Suite Django application version 5.18.1 Description A remote code execution issue exists in the network configuration functionality due to inadequate input validation when handling network configuration parameters via...

CVE-2025-54306

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration parameters through administrative...

CVE-2025-54306

A remote code execution (RCE) vulnerability exists in the Thermo Fisher Torrent Suite Django application 5.18.1 . The flaw stems from insufficient input validation within the network configuration functionality, specifically at the /admin/network endpoint. The application accepts user-supplied fo...

📄 Ilevia EVE X1/X5 Server 4.7.18.0.eden Root Privilege Escalation

Ilevia EVE X1/X5 Server version 4.7.18.0.eden has a misconfiguration in the sudoers file that permits passwordless execution of specific Bash shell scripts via sudo, exposing a critical privilege escalation vulnerability. When such scripts are writable by a web-facing user www-data or accessible...

EUVD-2024-49244

Malicious code in bioql PyPI...

CVE-2025-34187

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads...

CVE-2025-34187

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads...

CVE-2025-34187 Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads...

CVE-2025-34187 Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads...

PT-2025-38077

Name of the Vulnerable Software and Affected Versions Ilevia EVE X1/X5 Server versions prior to 4.7.18.0.eden Description The software contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or...

CVE-2025-34187: Improper Privilege Management

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads...

📄 Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

Ilevia EVE X1/X5 Server version 4.7.18.0.eden reverse rootshell exploit. A misconfiguration in the sudoers file permits passwordless execution of specific Bash shell scripts via sudo, exposing a critical privilege escalation vulnerability. When such scripts are writable by a web-facing user...

CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

CVE-2024-8531

CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root...