Cobaltstrike_BOFLoader

CobaltstrikeBOFLoader Это порт/реализация загрузчика BOF из Cobalt Strike с открытым исходным кодом как есть. По большей части всё сделано так же, как в оригинальном Beacon + Teamserver в Cobalt Strike. Сюда включены и недостатки, которые исправлены в других загрузчиках COFF с открытым исходным...

BlobHunter

BlobHunter Un outil open source pour analyser les comptes de stockage Azure Blob à la recherche de blobs publics. BlobHunter fait partie de la recherche Chasser les blobs Azure expose des millions de fichiers sensibles. Aperçu BlobHunter vous aide à identifier les conteneurs de stockage Azure Blo...

CVE-2026-85180

Ollama versions 0.30.0 through 0.33.2 are affected by a Server-Side Request Forgery (SSRF) vulnerability caused by a failure to validate redirect destinations when pulling tensor-layer models. An unauthenticated attacker can control a registry, serve a malicious tensor-layer manifest , and cause ...

EUVD-2026-70484

Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob downloads to arbitrary hosts. An attacker can control a registry, serve a malicious tensor-layer manifest, and cause the server to issue GET requests to internal...

bcm4360-wpa3

WPA3-SAE + 802.11w sur le Broadcom BCM4360 blob wl fermé Apple/Broadcom n'a jamais donné le BCM4360 14e4:43a0 WPA3. Son seul pilote Linux est le blob fermé broadcom-sta wl ; brcmfmac ne peut pas le piloter. Cela ajoute WPA3-SAE + 802.11w PMF complet à ce blob fermé — entièrement depuis le logicie...

ClickOnceBlobber

ClickOnce AppDomainManager Injection Toolkit Вооружаем подписанные .NET ClickOnce приложения для начального доступа путем перехвата зависимой DLL через внедрение AppDomainManager и загрузки C-порта агента ProxyBlob. В комплекте идет порт на C ProxyBlob — SOCKS5-прокси, который туннелирует весь...

etherblob-explorer

EtherBlob Explorer Recherchez et extrayez des fichiers blob sur le réseau Ethereum en utilisant l'API Etherscan.io. Introduction EtherBlob Explorer est un outil destiné aux chercheurs, analystes, joueurs de CTF ou toute personne suffisamment curieuse souhaitant rechercher différents types de...

goblob

Goblob 🫐 Goblob est un outil d'énumération léger et rapide conçu pour faciliter la découverte d'informations sensibles exposées publiquement dans les blobs Azure, ce qui peut être utile à diverses fins de recherche telles que les évaluations de vulnérabilités, les tests d'intrusion et la...

gMSA_Dumper

gMSADumper 사용자가 액세스할 수 있는 모든 gMSA 암호 blob을 읽고 값을 파싱합니다. root@kitploit: gMSADumper.py -h...

CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile обход пути Рабочие proof-of-concept репродюсеры одной и той же уязвимости Apache Camel — по одному на каждый рантайм:...

CVE-2025-10681

CVE-2025-10681: Жестко закодированный ключ учетной записи Azure Blob Storage Уведомление Поле| Значение ---|--- CVE| CVE-2025-10681 ICSA| ICSA-26-055-03 CVSS 3.1| 8.6 Высокий Вектор| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CWE| CWE-798 Использование жестко закодированных учетных данных...

CVE-2026-55726

CVE-2026-55726: 공개적으로 나열 가능한 Azure Blob Storage 컨테이너 디바이스 로그 권고 필드| 값 ---|--- CVE| CVE-2026-55726 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.3 Medium 벡터 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 벡터 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CWE| CWE-497 승인되지...

CVE-2026-55696

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, AttachmentViewer.setAttachment in js/privatebin.js uses getAttachmentMimeType to accept attacker-controlled MIME types and uses getBlobUrl to create a same-origin blob before setting...

CVE-2026-55696 PrivateBin: Stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, AttachmentViewer.setAttachment in js/privatebin.js uses getAttachmentMimeType to accept attacker-controlled MIME types and uses getBlobUrl to create a same-origin blob before setting...

CVE-2026-55696 PrivateBin: Stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, AttachmentViewer.setAttachment in js/privatebin.js uses getAttachmentMimeType to accept attacker-controlled MIME types and uses getBlobUrl to create a same-origin blob before setting...

CVE-2026-80652

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2026-66906

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

CVE-2026-66906 Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

EUVD-2026-64956

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

CVE-2026-66906

CVE-2026-66906 is a relative path traversal (CWE-22) in the camel-azure-storage-blob component of Apache Camel, rated CVSS 9.1 (Critical) . The downloadBlobToFile operation joins the fileDir endpoint option with the remote blob name verbatim—without lexical normalization or a containment check—so...