BlobHunter

BlobHunter Azure ब्लॉब स्टोरेज खातों में सार्वजनिक रूप से खुले ब्लॉब्स को स्कैन करने के लिए एक ओपन-सोर्स टूल। BlobHunter Hunting Azure Blobs Exposes Millions of Sensitive Files शोध का हिस्सा है। अवलोकन BlobHunter आपको Azure ब्लॉब स्टोरेज कंटेनरों की पहचान करने में मदद करता है जो ऐसी फ़ाइलें...

goblob

Goblob 🫐 Goblob est un outil d'énumération léger et rapide conçu pour faciliter la découverte d'informations sensibles exposées publiquement dans les blobs Azure, ce qui peut être utile à diverses fins de recherche telles que les évaluations de vulnérabilités, les tests d'intrusion et la...

gMSA_Dumper

gMSADumper يقرأ أي كتل كلمات مرور gMSA يمكن للمستخدم الوصول إليها ويحلل القيم. root@kitploit: gMSADumper.py -h...

CVE-2025-10681

CVE-2025-10681: مفتاح حساب تخزين Azure Blob مُضمَّن بشكل ثابت إشعار الحقل| القيمة ---|--- CVE| CVE-2025-10681 ICSA| ICSA-26-055-03 CVSS 3.1| 8.6 عالية المتجه| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CWE| CWE-798 استخدام بيانات اعتماد مُضمَّنة بشكل ثابت الباحث| Michael Groberman — Gr0m تاريخ...

CVE-2026-55726

CVE-2026-55726: حاوية Azure Blob Storage قابلة للسرد علنًا سجلات الأجهزة النشرة الحقل| القيمة ---|--- CVE| CVE-2026-55726 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.3 متوسطة المتجه 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N المتجه 4.0|...

CVE-2026-66906

CVE-2026-66906 — اجتياز المسار في camel-azure-storage-blob downloadBlobToFile أدوات إثبات مفهوم PoC قابلة للتشغيل تُعيد إنتاج نفس ثغرة Apache Camel، واحدة لكل بيئة تشغيل:...

etherblob-explorer

EtherBlob Explorer Etherscan.io API का उपयोग करके Ethereum नेटवर्क पर ब्लॉब फ़ाइलें खोजें और निकालें। परिचय EtherBlob Explorer एक उपकरण है जो शोधकर्ताओं, विश्लेषकों, CTF खिलाड़ियों या किसी भी जिज्ञासु व्यक्ति के लिए है जो Ethereum ब्लॉकचेन नेटवर्क पर विभिन्न प्रकार की फ़ाइलों या किसी भी सार्थक...

CVE-2026-66906

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

CVE-2026-66906 Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

EUVD-2026-64956

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

CVE-2026-66906

CVE-2026-66906 is a relative path traversal (CWE-22) in the camel-azure-storage-blob component of Apache Camel, rated CVSS 9.1 (Critical) . The downloadBlobToFile operation joins the fileDir endpoint option with the remote blob name verbatim—without lexical normalization or a containment check—so...

ClickOnceBlobber

مجموعة أدوات حقن AppDomainManager في ClickOnce قم بتسليح تطبيقات ClickOnce الخاصة بـ .NET الموقعة رقماً للوصول الأولي عن طريق اختطاف DLL تابعة لها عبر حقن AppDomainManager وتحميل منفذ C لوكل ProxyBlob. يحتوي على منفذ C لـ ProxyBlob — وكيل SOCKS5 يمرر كل حركة المرور عبر Azure Blob Storage، ممتزجاً...

Cobaltstrike_BOFLoader

CobaltstrikeBOFLoader Ceci est un port/réimplémentation open source du chargeur BOF de Cobalt Strike tel quel. Pour l'essentiel, tout est fait comme dans le Beacon + Teamserver d'origine de Cobalt Strike. Cela inclut les lacunes qui sont résolues dans d'autres chargeurs COFF open source comme le...

bcm4360-wpa3

WPA3-SAE + 802.11w Broadcom BCM4360 पर बंद wl ब्लॉब Apple/Broadcom ने BCM4360 14e4:43a0 को WPA3 कभी नहीं दिया। इसका एकमात्र Linux ड्राइवर बंद broadcom-sta wl ब्लॉब है; brcmfmac इसे चला नहीं सकता। यह उस बंद ब्लॉब में WPA3-SAE + पूर्ण 802.11w PMF जोड़ता है — पूरी तरह से होस्ट सॉफ्टवेयर से, कोई...

PT-2026-80918

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

CVE-2026-50812

A flaw was found in SQLite. The Session Extension in SQLite is vulnerable to a NULL pointer dereference. A remote attacker could exploit this by supplying a specially crafted, malformed changeset blob. This could lead to a denial of service, making the application unavailable to legitimate users...

CVE-2026-61625

VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go to write restored data below...

CVE-2026-61625 VictoriaMetrics vmrestore: path traversal via crafted backup part names escapes restore root

VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go to write restored data below...

CVE-2026-50173

Flow-Like is a platform for building end-to-end use cases. Prior to version 1.0.4, GET /api/v1/apps/appid/invoke/presign grants Azure Blob Storage SAS credentials with write and delete access to app content to any app member that has ExecuteEvents, even when that member lacks ReadFiles and...

CVE-2026-50173 Flow-Like: Azure invoke presign grants app content write SAS to ExecuteEvents-only users

Flow-Like is a platform for building end-to-end use cases. Prior to version 1.0.4, GET /api/v1/apps/appid/invoke/presign grants Azure Blob Storage SAS credentials with write and delete access to app content to any app member that has ExecuteEvents, even when that member lacks ReadFiles and...