netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

mose

MOSE Master Of SErvers...

imagick_secure_puppet

只需包含该类，如果存在 imagick……它就会用带有额外策略的、经略微修改的 ubuntu 14.04 基础版本覆盖 policy.xml 通过 puppet apply 执行： root@kitploit: $ git clone https://github.com/jackdpeterson/imagicksecurepuppet.git $ mv imagicksecurepuppet imagicksecure $ sudo puppet apply --modulepath=. -e "include imagicksecure" 验证 MD5 变化...

pentest-guide

基于 OWASP + 附加测试的渗透测试指南 本指南面向渗透测试人员，帮助他们在渗透测试项目中找到合适的测试用例。我根据自己的视角重新整理了 OWASP 测试指南 v4，将其划分为 9 个测试类别，每个类别包含若干待对目标执行的 测试用例。每个 测试用例 涵盖多个 OWASP 测试项，同样适用于报告文档。我还额外新增了 15 个附加测试用例，并以 EXTRA-TEST 标记。希望本指南在渗透测试项目和漏洞赏金活动中都能派上用场。 待办： 1. 为每个测试添加资源。 信息收集 技术指纹识别 Fingerprint Web Server OTG-INFO-002 Enumerate...

Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass

Auerswald COMfortel 1400/2600/3600 IP is susceptible to an authentication bypass vulnerability. Inserting the prefix "/about/../" allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for...

puppet-os-hardening

Endurecimiento del SO con Puppet Tabla de contenidos 1. Descripción del módulo: qué hace el módulo y por qué es útil 2. Configuración: los conceptos básicos para empezar con oshardening Requisitos de configuración Primeros pasos con oshardening 3. Uso: opciones de configuración y funcionalidad...

EUVD-2026-72036

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...

CVE-2026-86151

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...

CVE-2026-86151

CVE-2026-86151 affects Tenda CP3 firmware version 27.5.57.101 . The vulnerability is an OS command injection in the function sub_2F77E8 of the file Apis/system.c , within the Network Configuration Management component. The attack can be initiated remotely and requires high privileges (e.g., an au...

CVE-2026-77966

The affected Ebyte product does not provide separation between limited and administrative management functions. A low privileged authenticated attacker could access security sensitive configuration functions and modify settings that affect the confidentiality, integrity, or availability of the...

CVE-2026-75338

disconf Distributed Configuration Management Platform 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these fo...

CVE-2026-75338

disconf Distributed Configuration Management Platform 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these fo...

CVE-2026-75338

disconf (Distributed Configuration Management Platform) version 2.6.36 suffers from an Incorrect Access Control flaw. The LoginInterceptor explicitly whitelists four config-fetching endpoints—/api/config/item, /api/config/file, /api/config/list, and /api/config/simple/list—bypassing authenticatio...

EUVD-2026-64890

RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint. The endpoint requires an authenticated session but does not perform an explicit privilege or administrator authorization check before allowing access to...

CVE-2026-19994 Webkul Bagisto Configuration Management execute authorization

A vulnerability was found in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/configuration/cache-management/execute of the component Configuration Management. The manipulation of the argument action results in authorization bypass. The attack ma...

CVE-2026-15970 vulnerabilities

Vulnerabilities for packages: consul-fips...

CVE-2025-59178

Ericsson Packet Core Controller PCC versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system...

CVE-2025-59181

Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...

CVE-2025-59177

Ericsson Packet Core Controller PCC versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages...

CVE-2025-59181

CVE-2025-59181 concerns the Ericsson Packet Core Controller (PCC) up to version 1.38 (prior to 1.39) in the Configuration Management component. The issue is a directory traversal vulnerability that could allow an attacker to change directory permissions, potentially denying access to legitimate u...