cdpsnarf

CDPSnarf v0.1.6 Cisco Discovery Protocol Sniffer by Tasos "Zapotek" Laskos [email protected] [email protected] root@kitploit: Licensed under the GNU General Public License v2 General root@kitploit: CDPSnarf è uno sniffer di rete scritto esclusivamente per estrarre informazioni dai...

vlan-hopping---frogger

Frogger - VLAN Hopping Einfaches Skript zur VLAN-Enumeration und zum VLAN-Hopping. Als Open Source veröffentlicht von NCC Group Plc - http://www.nccgroup.com/ Entwickelt von Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/vlan-hopping Veröffentlicht unter AGPL,...

viproy-voipkit

Eingestellt Viproy war ein PoC-VoIP-Sicherheitsbewertungstool mit mehreren Modulen und Exploits, die gewartet werden mussten. Es wurde jedoch als Modulsatz für das Metasploit Framework entwickelt. Da das Metasploit Framework erhebliche Aktualisierungen erhalten hat, können die aktuellen Module vo...

RTOS-F-16-Exploit---CVE-2019-7711

Exploit Green Hills INTEGRITY RTOS F-16 - CVE-2019-7711 Catena completa di sfruttamento di Format String Attacco realistico di manutenzione a terra su avionica F-16 📋 Descrizione Questo repository contiene un Proof of Concept PoC per CVE-2019-7711 — una vulnerabilità di Format String nel server...

SHA256-CDP

SHA256-CDP: Cyclische Ziffernsummen-Projektion GPU-beschleunigte Regenbogentabellen-Implementierung des CDP-Strukturanalyse-Frameworks für SHA-256. Basierend auf den Erkenntnissen des CDP-Papers DOI: 10.5281/zenodo.20627240 bietet dieses Repository eine vollständige, funktionsfähige Implementieru...

neo

Neo Trasforma qualsiasi app web in un'API. Non serve un'API ufficiale. Nessuna automazione del browser. Neo è un'estensione Chrome che cattura passivamente ogni chiamata API che il tuo browser effettua, impara gli schemi e permette all'AI o a te di riprodurle direttamente. Il problema Gli agenti ...

nodriver

NODRIVER nodriver fornisce una libreria di web scraping asincrono e automazione del browser di livello successivo per Python, con un'interfaccia facile che ha semplicemente senso ™ Questo è il successore ufficiale del pacchetto Python Undetected-Chromedriver. Niente più webdriver, niente più...

viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...

yersinia

Spanning Tree 1: DOS attack sending conf BPDUs root@kitploit: Let's send some conf BPDUs claiming be root!!! By sending continously conf BPDU with root pathcost 0, randomly generated bridge id and therefore the same root id, and some default values for other fields, we try to annoy the switches...

CVE-2026-53633

A flaw was found in Vitest Browser Mode, a component of the Vitest testing framework. The cdp API exposed raw Chrome DevTools Protocol CDP methods without proper security restrictions. This vulnerability allows a remote attacker, with access to browser API metadata, to leverage CDP functions like...

CVE-2026-53633

Vitest is a testing framework powered by Vite. From 3.0.0 until 3.2.5, 4.1.8, and 5.0.0-beta.4, Vitest Browser Mode exposed a cdp API that forwarded raw Chrome DevTools Protocol methods without being gated by allowWrite or allowExec, allowing a remote client with exposed browser API metadata to u...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the CDP discovery process. An attacker can access restricted network destinations by submitting blocked WebSocket URLs when the affected feature is...

CVE-2026-62197 OpenClaw < 2026.6.6 Policy Bypass via CDP Discovery

OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that should have been blocked by OpenClaw policy when the affected feature is enabled...

PT-2026-57899

OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that should have been blocked by OpenClaw policy when the affected feature is enabled...

browser-ipc-cdp (>=2.0.0, <=3.13.0), chrome-devtools-mcp-docker (>=0.1.5, <=0.1.7) +1 more potentially affected by CVE-2026-53766 via chrome-devtools-mcp (0.25.0)

chrome-devtools-mcp NPM version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on chrome-devtools-mcp and may be impacted: - browser-ipc-cdp =2.0.0, =0.1.5, =1.0.1, =1.0.9 Source cves: CVE-2026-53766 Source advisory:...

EUVD-2026-36139

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdpactionhandling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks...

CVE-2026-53738

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdpactionhandling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks...

CVE-2026-53738 Copy & Delete Posts through 1.5.4 Privilege Escalation via cdp_action_handling Handler

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdpactionhandling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks...

WordPress plugin Copy & Delete Posts 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

Malicious code in cdp-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf55b093e3a93e8d3f536101e62e09cf7e86636cd42813d02f518138cbcb8ed The package ships cdpinject.js, which combines childprocess, fs, http/https, and base64 encoding to gather system information and exfiltrate it over...