Panoptic

Panoptic Panoptic 是一款开源渗透测试工具，可通过路径遍历漏洞自动搜索并获取常见的日志和配置文件。 功能特性 异步并发扫描，支持可配置的工作线程池 （--concurrency） 通过基于参数、基于路径、POST、Cookie、请求头和 JSON 请求体注入，自动发现常见的日志和配置文件 FUZZ 标记用于任意注入点——将 FUZZ 放在任意 --header 或 --data 值中 为解码文件路径的端点提供 Base64 编码 （--base64） 自动检测操作系统，并可选择限制后续扫描 启发式响应比较，配合状态码过滤以 减少误报 动态用例注入——解析...

WordPress Advanced Access Manager - Path Traversal

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

Spring Cloud Config Server - Path Traversal

Spring Cloud 3.1.x 3.1.13, 4.1.x 4.1.9, 4.2.x 4.2.3, 4.3.x 4.3.2, and 5.0.x 5.0.2 contain a path traversal caused by profile parameter substitution in Config Server using native file system backend, letting attackers access files outside configured directories, exploit requires crafted request. i...

XWiki Platform - Information Disclosure

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. id: CVE-2025-55747 info: name: XWiki Platform - Information Disclosure author: Redmomn...

MotionEye Config Info Disclosure

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured. id: CVE-2022-25568 info: name: MotionEye Config Info Disclosure author: DhiyaneshDK severity: high...

LiteLLM - Arbitrary File Read

LiteLLM 1.83.0 contains a broken access control vulnerability caused by lack of admin role enforcement on /config/update endpoint, letting authenticated users modify configurations, execute code, read files, and take over accounts. id: CVE-2026-35029 info: name: LiteLLM - Arbitrary File Read...

DataTaker DT80 dEX 1.50.012 - Information Disclosure

DataTaker DT80 dEX 1.50.012 is susceptible to information disclosure. A remote attacker can obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI, thereby possibly accessing sensitive information, modifying data, and/o...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

aerleon

Aerleon...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

Medusa

Medusa Medusa 是一个跨平台代理，兼容 Python 3.8 和 Python 2.7。 安装 要安装 Medusa，你需要在远程计算机上安装 Mythic v3。你可以在 Mythic 项目页面 找到 Mythic 的安装说明。 在 Mythic 安装根目录下，运行以下命令： ./mythic-cli install github https://github.com/MythicAgents/Medusa.git 安装完成后，重启 Mythic 以构建新代理。 RabbitMQ 配置说明 文件 PayloadType/medusa/rabbitmqconfig.json...

cve-2026-20127

Escáner CVE-2026-20127 Descripción general Este proyecto es una herramienta de escaneo de red basada en Windows, escrita en C++, que intenta identificar posibles servicios similares a Cisco SD-WAN / vManage y realizar una verificación de vulnerabilidad contra un problema referenciado etiquetado...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the...

CVE-2026-3288

CVE-2026-3288：通过 rewrite-target 注解对 ingress-nginx 进行配置注入 关键词： CVE-2026-3288、ingress-nginx 漏洞、Kubernetes 安全、nginx 配置注入、rewrite-target 注解、RCE、Secret 泄露、CWE-20、CAPEC-176、ingress-nginx CVE 2026、Kubernetes 集群沦陷 目录 概述 漏洞详情 技术分析 受影响版本 修复建议 检测方法 CVSS 指标 时间线 参考资料 联系方式 概述 在 ingress-nginx...

CVE-2021-43811

CVE-2021-43811 awslabs/sockeye Code injection via unsafe YAML loading CVE-2021-43811 NVD Description Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 us...

keepass_CVE-2023-24055_yara_rule

keepassCVE-2023-24055yararule 包含一个简单的 yara 规则，用于搜索可能被入侵的 KeePass 配置文件 如何使用 使用 yara 规则扫描器（如 yara、loki 或 thor-lite）以该规则扫描系统。本地 KeePass 配置文件的默认位置为 %APPDATA%\Roaming\KeePass\KeePass.config.xml。...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

gixy

GIXY Resumen Gixy es una herramienta para analizar la configuración de Nginx. El objetivo principal de Gixy es prevenir configuraciones de seguridad incorrectas y automatizar la detección de fallos. Actualmente, las versiones de Python compatibles son 2.7, 3.5, 3.6 y 3.7. Aviso: Gixy ha sido...

CVE-2023-51385_poc-test

CVE-2023-51385 poc OpenSSH ProxyCommand RCE poc OpenSSH 9.6 vulnerabilidad de inyección de comandos poc Chino 1.vim /.ssh/config o edita C:/Users/username/.ssh/config en sistema Windows root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p 2. git clone...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...