11417 matches found
pwneye
pwneye es una herramienta de seguridad ofensiva centrada y portátil para trabajar con cámaras IP que exponen servicios ONVIF y RTSP , con el objetivo de ofrecer a investigadores de seguridad y hackers una forma sencilla de gestionar descubrimiento, pruebas de autenticación, recopilación de...
Cisco ASA OS Command Injection (CVE-2021-1476)
A vulnerability in the CLI of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to...
PT-2026-106088
Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly known SECRET KEY and LIVE SERVER SECRET KEY defaults that remain active when operators do not override them. The top-level setup.sh...
Cisco ASA OS Command Injection (CVE-2020-3167)
A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...
CVE-2024-23741
CVE-2024-23741 An issue in Hyper through 3.4.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. There is a tool designed to automate the process of searching for vulnerabilities in electron:...
Malicious code in @angulra/cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3158beab2ea0d9f8e28d488f124268c8c9a00a3a0f5599823c4d13f741ac40f The package name @angulra/cli is a character-swap of @angular/cli and copies the legitimate Angular CLI's metadata description, repository, homepage,...
MAL-2026-17495 Malicious code in @angulra/cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3158beab2ea0d9f8e28d488f124268c8c9a00a3a0f5599823c4d13f741ac40f The package name @angulra/cli is a character-swap of @angular/cli and copies the legitimate Angular CLI's metadata description, repository, homepage,...
Malicious code in botmaker-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fdc86c67d202ca9938942ef7786534d1b72169187cce13b1cefd8899fa54aa On npm install, postinstall.js collects the installer's hostname, username, current working directory, architecture, platform, and network interface...
MAL-2026-17502 Malicious code in botmaker-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fdc86c67d202ca9938942ef7786534d1b72169187cce13b1cefd8899fa54aa On npm install, postinstall.js collects the installer's hostname, username, current working directory, architecture, platform, and network interface...
jenkins_scan
jenkinsscan Encuentra entornos Jenkins y comprueba el CVE-2024-23897 Cómo funciona Detección de Jenkins Prueba las rutas: /, /login, /oops, /api/json, /cli, /jenkins/, /jenkins/api/json Identifica vía: 1. Header X-Jenkins — más confiable, también devuelve la versión 2. Header X-Hudson — instancia...
ForensiX
⬡ ForensiX — Marco de inteligencia forense digital Creado por Ameer Rasim | Versión 2.0.0 ███████╗ ██████╗ ██████╗ ███████╗███╗ ██╗███████╗██╗██╗ ██╗ ██╔════╝██╔═══██╗██╔══██╗██╔════╝████╗ ██║██╔════╝██║╚██╗██╔╝ █████╗ ██║ ██║██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ╚███╔╝ ██╔══╝ ██║ ██║██╔══██╗██╔══...
aws-vault
AWS Vault !WARNING This project has been abandoned and it's not receiving any more updates. If you want to continue to receive updates or contribute, please feel free to look at the active fork at: https://github.com/ByteNess/aws-vault AWS Vault is a tool to securely store and access AWS...
CVE-2024-23897
CVE-2024-23897 Debido a una mala configuración de una opción predeterminada en el analizador de comandos CLI, un atacante puede leer archivos arbitrarios Resumen del CVE Jenkins 2.441 y anteriores, LTS 2.426.2 y anteriores no deshabilitan una característica de su analizador de comandos CLI que...
CVE-2023-1326-PoC
CVE-2023-1326-PoC Una prueba de concepto para CVE-2023–1326 en apport-cli 2.26.0 Esta vulnerabilidad es una escalada de privilegios en apport-cli 2.26.0, similar a CVE-2023–26604; esta vulnerabilidad solo funciona si se asigna en sudoers: Se encontró un ataque de escalada de privilegios en...
Cartero
Cartero Cartero is now a Go CLI with an embedded, no-configuration workspace database instead of the old MongoDB-dependent runtime. The current implementation provides: a polished terminal experience powered by Cobra and Lip Gloss a local admin web UI and safe testing pages via cartero serve...
poc-CVE-2024-23897
poc-CVE-2024-23897 CVE-2024-23897: Lectura Arbitraria de Archivos en Jenkins que lleva a RCE 🎯 Productos y Versiones Afectados Producto: Jenkins Servidor de Integración Continua/Entrega Continua Versiones: Jenkins 2.441 y anteriores, Jenkins LTS 2.426.2 y anteriores Corregido en: Jenkins 2.442,...
CVE-2024-23897
Usando el cliente La sintaxis general para invocar al cliente es la siguiente: java -jar jenkins-cli.jar -s JENKINSURL global options... command command options... arguments... info :- https://www.jenkins.io/doc/book/managing/cli/downloading-the-client CVE :-...
Cartero
Cartero URL http://section9labs.github.io/Cartero/ Description Un robusto framework de phishing con una interfaz CLI completa. El proyecto nació de la necesidad a lo largo de años de trabajo con herramientas que simplemente no hacían su trabajo. Aunque hay muchos proyectos disponibles, no pudimos...
CVE-2024-40445_CVE-2024-40446
MimeTeX Vulnerability Reference CVE-2024-40445 & CVE-2024-40446 This repository serves as the public reference for the security issues CVE-2024-40445 and CVE-2024-40446 affecting MimeTeX, a lightweight open-source LaTeX renderer written in C. ⚠️ MimeTeX appears to be no longer actively maintained...