reposaur

Reposaur Reposaur è lo strumento di conformità open source per le piattaforme di sviluppo. Audita, verifica e segnala i tuoi dati e le tue configurazioni facilmente con policy predefinite e/o personalizzate. Supporta GitHub. Supporto per GitLab, BitBucket e Gitea in arrivo. ⚠️ prima della 1.0.0 ci...

melting-cobalt

melting-cobalt 👀 A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

LambdaGuard

LambdaGuard AWS Lambda ist eine ereignisgesteuerte, serverlose Computing-Plattform von Amazon Web Services. Es ist ein Computing-Dienst, der Code als Reaktion auf Ereignisse ausführt und automatisch die für diesen Code erforderlichen Rechenressourcen verwaltet. LambdaGuard ist ein AWS...

CVE-2026-78616

A Stored Cross-Site Scripting XSS vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate...

CVE-2026-78617

WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automated password guessing against user accounts. If the account lockout setting is enabled, brute-force attempts are blocked after a defined...

CVE-2026-78499

A server-side request forgery SSRF vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2026-78498

A server-side request forgery SSRF vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2026-78103

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first...

CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823 | Exploit di Esecuzione Remota di Codice RCE su PHP-CGI Un exploit basato su Python per CVE-2012-1823. Questa vulnerabilità consente a un attaccante di eseguire codice arbitrario su un server che esegue una versione vulnerabile di PHP-CGI, iniettando argomenti da riga di comando...

CVE-2020-35262

CVE-2020-35262: XSS Armazenado no Roteador Digisol DG-HR3400 Descrição da Vulnerabilidade Foi identificado que o endpoint vulnerável não possui validação de entrada no lado do servidor e não possui filtragem no lado do cliente para qualquer injeção de script malicioso. Um atacante pode usar esta...

CVE-2023-27524

CVE-2023-27524 Bypass de Autenticação do Apache Superset CVE-2023-27524 Referência https://nvd.nist.gov/vuln/detail/CVE-2023-27524 https://github.com/horizon3ai/CVE-2023-27524 https://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/...

CVE-2022-22947-Spring-Cloud-Gateway

Spring Cloud Gateway Remote-Code-Ausführungs-Schwachstelle Diese Schwachstelle stellt ein hohes Risiko für den Produktionsbetrieb dar. Führen Sie keine unbefugten Scans durch. Verwendungshinweise root@kitploit: ╰─ ./CVE-2022-22947 -h ─╯ Befehl ausführen: ./CVE-2022-22947 -u http://127.0.0.1:8080 ...

EUVD-2026-67284

The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management interface. An unauthenticated remote attacker could persuade an authenticated administrator to visit a crafted page, causing unauthorized configuration changes or a disruption of...

EUVD-2026-67288

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality...

EUVD-2026-67287

The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive...

CVE-2025-59213

Exploit di SQL injection non autenticata in Microsoft Configuration Manager ConfigMgr / SCCM 2503 CVE-2025-59213 Questo script sfrutta la vulnerabilità CVE-2025-59213, che consente a un attaccante non autenticato con accesso di rete a un Management Point di eseguire query SQL arbitrarie sul...

CVE-2020-9289

Entschlüsseln von FortiManager-Konfigurationsgeheimnissen CVE-2020-9289 CVE-2020-9289 und CVE-2019-6693 beziehen sich auf denselben Standard- und hartcodierten Schlüssel. Die einzigen Unterschiede in der in FortiManager/FortiAnalyzer implementierten Entschlüsselungsroutine sind: Die IV-Behandlung...

CVE-2022-48311

CVE-2022-48311 Vulnerabilità di Cross Site Scripting XSS nella pagina di configurazione HTTP della stampante HP Deskjet 2540 serie con versione firmware CEP1FN1418BR e numero modello prodotto A9U23B Descrizione Cross Site Scripting XSS nella stampante HP Deskjet 2540 serie con versione firmware...

CVE-2020-26733

CVE-2020-26733 SKYWORTH GN542VF Hardware-Version 2.0 und Software-Version 2.0.0.16 Cross-Site-Scripting XSS-Schwachstelle Beschreibung Cross-Site-Scripting XSS auf der Konfigurationsseite in SKYWORTH GN542VF Hardware-Version 2.0 und Software-Version 2.0.0.16 ermöglicht es einem authentifizierten...