58949 matches found
hekate
Hekate - VMWare Workspace ONE Access रिमोट कोड निष्पादन एक्सप्लॉइट क्यूहू 360 भेद्यता अनुसंधान संस्थान के स्टीवन सीली LandGrey द्वारा मूल दुष्ट MySQL सर्वर विवरण Hekate का उच्चारण हेह-का-तेह है दिनांक: Tue Feb 22 13:37:00 CST 2022 संस्करण: 21.08.0.1 नवीनतम फ़ाइल:...
CVE-2023-28810
CVE-2023-28810 Эксплойт для CVE-2023-28810. udp-config-changer.py Изменяет текущую конфигурацию целевого домофона Hikvision без необходимости аутентификации. udp-password-brute.py Пытается восстановить пароль администратора устройства методом подбора список слов не предоставляется...
pgedge-anonymizer
pgEdge Anonymizer Documentazione: Introduzione Buone Pratiche Installazione Configurazione Avvio Rapido Utilizzo Pattern Personalizzati Pattern Integrati Configurazione di Esempio Risoluzione dei Problemi Note di Rilascio...
SysmonConfigPusher2
SysmonConfigPusher v2 Uno strumento basato su web per gestire le configurazioni di Sysmon su endpoint Windows — supporta sia distribuzioni senza agente WMI/SMB che basate su agente. Funzionalità...
CVE-2026-12352
CVE-2026-12352 Resumo Foi identificada uma bypass de autenticação não autenticada, induzida por carga, no Digi PortServer TS 4 H MEI, permitindo a recuperação de um arquivo de configuração local do dispositivo sem credenciais válidas. Sob carga aumentada de requisições concorrentes, o servidor we...
CVE-2026-12948
CVE-2026-12948 Resumo da Vulnerabilidade Foi identificada uma vulnerabilidade de cross-site scripting XSS armazenado na interface de gerenciamento web do Digi PortServer TS 4 H MEI. Uma solicitação autenticada especialmente elaborada permite que um payload de script seja gravado permanentemente n...
Writing-Sample-1
Log4j：CVE-2021-44228 Log4j 漏洞及缓解措施概述 目录 1. 执行摘要 2. 识别易受攻击的端点和服务 3. 缓解措施 A. 在边界处阻止 B. 在服务器端点上安装端点检测与响应 EDR C. 将易受攻击的企业应用置于 F5 之后 4. 资源与延伸阅读 执行摘要 Log4j 是许多 Java 应用程序中使用的日志记录工具。2021年12月，Apache 披露了一个远程代码执行 RCE 漏洞，拥有修改日志配置文件权限的攻击者可借此构造并执行恶意代码。据 Apache 称，Log4j2 版本 2.0-beta7 至 2.17.0 均受到该 RCE 漏洞的影响。NIST...
vimana-framework
Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...
EUVD-2026-66806
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...
EUVD-2026-66803
The Netty configuration distribution service port 8283 of super-diamond-server = 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project including database passwords, API keys, etc. by sending a TCP request without any credential...
NGINX_RIFT_SCAN_CVE_2026_42945
Scanner di configurazione NGINX Rift Lingua: Italiano | English Questo è uno script leggero per verificare se la configurazione di NGINX presenta modelli di rischio relativi a CVE-2026-42945 NGINX Rift e CVE-2026-9256. La vulnerabilità è stata divulgata da depthfirst nell'articolo NGINX Rift:...
CVE-2012-2982
CVE-2012-2982 사용자 OstojaOfficial의 원본을 개선한 CVE-2012-2982 Webmin 1.580용 Python POC 이 스크립트는 원본 스크립트의 개선 버전으로, 사용자가 전체 스크립트를 살펴보지 않고도 데이터 입력 형식을 확인할 수 있도록 합니다. 이를 위해 해당 코드 섹션을 단순히 스크립트 시작 부분으로 이동했습니다: 동시에 스크립트가 계속 실행되는 것을 방지하기 위한 종료 명령어sys.exit1가 추가되었습니다. 또한 사용자가 익스플로잇을 호출할 때 Webmin 1.580 서비스가 실행 중인...
PT-2026-82797
Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...
PT-2026-82789
Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality...
CVE-2026-37006
gpt-researcher v0.14.7 and before is affected by a vulnerability in its WebSocket endpoint that allows an unauthenticated remote attacker to achieve code execution by supplying malicious Model Context Protocol (MCP) configurations . The CNA-assigned CVSS 3.1 score is 9.8 (Critical) with a vector ...
CVE-2026-37071
CVE-2026-37071 affects Veno File Manager Project 4.4.9 in the Actions::renameFile() function. An authenticated attacker holding the 'reanme' permission can send a specially crafted POST request that renames the application configuration file, triggering a configuration rebuild that resets super a...
PT-2026-82790
The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management interface. An unauthenticated remote attacker could persuade an authenticated administrator to visit a crafted page, causing unauthorized configuration changes or a disruption of...
PT-2026-82773
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-privilege user can read the cluster secret from the manager configuration because the logic that masks sensitive values is...
