hashcatch

hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...

CVE-2025-34171

CVE-2025-34171: Неавторизованный доступ к файлам и отладочным данным в CasaOS Обзор уязвимости Поле| Значение ---|--- CVE ID| CVE-2025-34171 Затрагивает| CasaOS ≤ 0.4.15 Исправлено в| Нет доступного исправления Серьезность| Средняя CVSS 4.0|...

DahuaConsole

Dahua Console 버전: Pre-alpha 버그: 물론이죠 TODO: 할 게 많음 요구 사항 설치 sudo pip3 install -r requirements.txt 인자 -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port --proto dhip,dvrip,3des,http,https Protocol Default: dvrip --relay RELAY...

lssh

lssh ls + ssh = lssh lssh — это нативный терминальный набор инструментов для удалённого доступа, предназначенный для работы с SSH, инвентаризацией в облаке и коннекторами от провайдеров. Он позволяет выбирать хосты из конфигурации OpenSSH, конфигурации lssh или инвентаризации провайдеров, а затем...

faraday_agent_dispatcher

Faraday Agents Dispatcher는 사용자가 Faraday와의 통합을 어떤 언어로든 개발할 수 있도록 도와줍니다. 설치 pip3 install faradayagentdispatcher를 실행하기만 하면 시스템에서 faraday-dispatcher 명령을 볼 수 있습니다. 개발 환경을 설정하려면 즉, 디스패처 자체의 코드를 변경하려는 경우, 자체 통합을 작성하기 위한 것이 아님 이 저장소를 클론하고 pip install -e .를 실행해야 합니다. Faraday Agent Dispatcher 처음 실행하기 1...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

ActiveMQ-RCE-Exploit

ActiveMQ-Exploit Английский | Китайский упрощенный CVE-2023-46604 ActiveMQ RCE 5.18.3 Exploit — эксплуатация без выхода в сеть Поддерживается запуск на JDK 1.8, автоматическое определение, находится ли версия цели в зоне уязвимости Поддерживается эксплуатация цели без выхода в сеть с помощью...

claudleak

claudleak 퍼블릭 GitHub 리포지토리에서 AI 코딩 도구 설정 파일.claude/, .cursor/, .continue/, .codex/, CLAUDE.md, AGENTS.md 등에 유출된 자격 증명을 스캔합니다. 비밀 탐지에는 TruffleHog를 사용합니다. .claude/ 디렉토리 예시: "permissions": "allow": "Bashgo build:", "BashRAPID7ENCRYPTEDCREDS='eP3g488hQ23QiU4kJahhwPKs3PyE' go test ./pkg/agents/ -run...

HikvisionExploiter

HikvisionExploiter HikvisionExploiter は、Hikvision IP カメラ 、特にファームウェアバージョン 3.1.3.150324 を実行しているカメラの未認証エンドポイントを標的とした、強力で自動化されたエクスプロイテーションツールキットです。 次の操作を実行します: スナップショットアクセスの検証 設定ファイルの取得と復号 ユーザー認証情報の抽出 CVE-2021-36260 を使用したリモートコマンド実行 色付き・タイムスタンプ付きログによるマルチスレッドターゲットスキャン 研究者、レッドチーマー、IoT セキュリティ愛好家のために作られまし...

XWiki Platform - Information Disclosure

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. id: CVE-2025-55747 info: name: XWiki Platform - Information Disclosure author: Redmomn...

LiteLLM - Arbitrary File Read

LiteLLM 1.83.0 contains a broken access control vulnerability caused by lack of admin role enforcement on /config/update endpoint, letting authenticated users modify configurations, execute code, read files, and take over accounts. id: CVE-2026-35029 info: name: LiteLLM - Arbitrary File Read...

MotionEye Config Info Disclosure

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured. id: CVE-2022-25568 info: name: MotionEye Config Info Disclosure author: DhiyaneshDK severity: high...

WordPress Advanced Access Manager - Path Traversal

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

pyLoad Flask Config - Access Control

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. This issue has been patched in version 0.5.0b3.dev77. id: CVE-2024-21644 info: name: pyLoad Flask Config ...

Progress ShareFile Storage Zones Controller - Authentication Bypass

Customer Managed ShareFile Storage Zones Controller SZC contains an authentication bypass Execution After Redirect that allows unauthenticated attackers to access restricted configuration pages. This leads to changing system configuration and potential remote code execution. id: CVE-2026-2699 inf...

MSNSwitch Firmware MNT.2408 - Authentication Bypass

MSNSwitch Firmware MNT.2408 is susceptible to authentication bypass in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh. An attacker can arbitrarily configure settings, leading to possible remote code execution and subsequent unauthorized operations. id: CVE-2022-32429 info: name:...

Spring Cloud Config Server - Path Traversal

Spring Cloud 3.1.x 3.1.13, 4.1.x 4.1.9, 4.2.x 4.2.3, 4.3.x 4.3.2, and 5.0.x 5.0.2 contain a path traversal caused by profile parameter substitution in Config Server using native file system backend, letting attackers access files outside configured directories, exploit requires crafted request. i...

Spring Cloud Config Server - Local File Inclusion

Spring Cloud Config Server versions 2.1.x prior to 2.1.2, 2.0.x prior to 2.0.4, 1.4.x prior to 1.4.6, and older unsupported versions are vulnerable to local file inclusion because they allow applications to serve arbitrary configuration files. An attacker can send a request using a specially...

motionEye-RCE-through-config-parameter

クライアント側バリデーションのバイパスによるMotionEye RCE 概要 Dockerで実行されているMotionEyeインスタンスのセキュリティテスト中に、Web UI内のクライアント側バリデーションがバイパス可能であることが確認されました。これにより、ホストコンテナ上での実行をトリガーできるペイロードを含む任意の入力を送信できます。この問題は、悪用された場合にリモートコード実行（RCE）のリスクをもたらします。 影響を受けるバージョン : 0.43.1b4までの全バージョン パッチ状況 : まだパッチはありません。本アドバイザリに回避策を記載しています。 プロジェクトリファレンス...

Panoptic

Panoptic Panoptic is an open source penetration testing tool that automates the search and retrieval of common log and config files through path traversal vulnerabilities. Features Async concurrent scanning with configurable worker pool --concurrency Automatic discovery of common log and...