EUVD-2026-94013

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2025-55184-POC-Expolit

🔥 CVE-2025-55184 高级利用工具 专业 React 服务器组件 DoS 利用框架 "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 快速开始 • 📖 文档 • 💻 功能 • ⚠️ 免责声明 🎯 关于 CVE-2025-55184 CVE-2025-55184 是一个影响 React 服务器组件（RSC）实现的高严重性拒绝服务（DoS）漏洞。远程攻击者可通过特制的循环引用载荷造成完全的服务中断。 📊 漏洞详情 属性| 值 ---|--- CVE ID| CVE-2025-55184 CVSS 评分| 7.5（高） 攻击向量|...

GuardScan

🛡️ GuardScan 100% Gratuito y de Código Abierto • Escaneo de Seguridad Centrado en la Privacidad y CLI de Revisión de Código con IA / | | | | / \ | | \ / | / | / \ | \ | | / | | | | | | | | | |/ \ | | | | | | \ | | / \ | | | | | | | | | | || | || / | | || | | | / | |\ | || | || | | | |// \|...

godofwar

GodOfWar - 恶意Java WAR构建器 一个命令行工具，用于生成用于渗透测试/红队行动目的的战（WAR）负载，使用Ruby编写。 . hhh hhhhhhh hhhhhhhh hhhhhhhh+ hhhhhhhh' hhhhhhhh. hhhhhhhhh ..-- hhhhhhhhh -sh/.. +. hhhhhhhhh: /+/:-/+ss- hhhhhhhhhh: /MMMss:. hhhhhhhhhh: .MMMMM: hhhhhhhhhhhhhhhhh: MMMMMMM: hhhhhhhhhhhhhhhh: MMMMMMMMMMMMM: hhhhhhhhhhhhhhh...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

binsync

BinSync BinSync es una herramienta de colaboración para decompiladores construida sobre el sistema de versionado Git para permitir la colaboración en ingeniería inversa con granularidad fina, independientemente del decompilador. BinSync es desarrollado por mahaloz, el equipo de angr y el...

CVE-2026-106492 Backstage: Improper preservation of access restrictions during service credential delegation

Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper preservation of access restrictions during service credential delegation. An external service credential configured with access restrictions...

CVE-2026-106492

The Backstage framework is vulnerable in the @backstage/backend-defaults package prior to versions 0.16.1 and 0.17.8 . The root cause is the improper preservation of access restrictions during service credential delegation. Specifically, an external service credential with restrictions (such as r...

EUVD-2026-94012

Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper preservation of access restrictions during service credential delegation. An external service credential configured with access restrictions...

openvas-scanner

OpenVAS Scanner 这是 Greenbone Community Edition 的 OpenVAS Scanner。 它用于 Greenbone Enterprise 设备，是一个功能齐全的扫描引擎，可执行持续更新和扩展的漏洞测试（VT）源。 版本发布 所有发布文件均使用 Greenbone Community Feed 完整性密钥签名。 该 gpg 密钥可在 https://www.greenbone.net/GBCommunitySigningKey.asc 下载， 指纹为 8AE4 BE42 9B60 A59B 311C 2E73 9823 FAA6 0ED1 E58...

AD_Miner

AD Miner 是一个 Active Directory（本地和 Entra ID）审计工具，它： 利用 Cypher 查询 分析来自 BloodHound 图数据库 Neo4j 的数据。 通过静态的基于 Web 的报告提供现有弱点的全面概览。 基于 Web 的报告功能： 已识别弱点的 详细列表 用于可视化分析的 动态图表 随时间跟踪变化的 历史关键指标 用于优先级排序的 风险评级 报告快速概览 Active Directory 风险的全面缓解路径 基于风险的 Active Directory 弱点评级，以及全面的缓解路径。 动态 Web 界面...

EUVD-2026-94010

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...

CVE-2026-106491 Backstage: Improper input validation in proxy-backend

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...

CVE-2026-106491

The Backstage framework, an open framework for building developer portals, is vulnerable to improper input validation within the @backstage/plugin-proxy-backend package in versions prior to 0.6.17 . An authenticated user can craft a request URL that forces the proxy-backend to forward requests to...

lazyrecon

| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and is optimized...

EUVD-2026-94009

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenticated Backstage user may be able to re...

CVE-2026-106490 Backstage: Improper input validation in TechDocs static content requests

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenticated Backstage user may be able to re...

CVE-2026-106490

The Backstage framework is vulnerable to an improper input validation flaw in the @backstage/plugin-techdocs-backend package prior to version 2.2.4 . When utilizing the Azure Blob Storage provider , an authenticated user may be able to access restricted TechDocs content if entity-level permission...

EUVD-2026-94008

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

CVE-2026-106489

The Backstage framework is vulnerable in the @backstage/plugin-techdocs-backend package prior to version 2.2.4 due to improper authorization enforcement for TechDocs static content. An authenticated user with access to one documentation site can craft a URL to read documentation belonging to a di...