hayduk

Hayduk: Open-source Metasploit GUI and Armitage alternative Hayduk is a free, open-source Metasploit GUI for authorized penetration testing. It brings the Armitage workflow to your browser: map hosts, browse modules, manage Meterpreter and shell sessions, and export campaign reports. Download one...

CVE-2021-42392-Detect

CVE-2021-42392-Detect About The script detects vulnerable H2 server for the give list of IPs, it can identify the H2 Console web pages and check for access restrictions. Usage Create a file containing list of IPs and name the file IP.txt, place the 'IP.txt' and 'h2-detect.py' in a directory and...

Glassfish-research

Investigación de Seguridad de GlassFish Investigación de vulnerabilidades en la consola de administración de Eclipse GlassFish. CVE| Problema| Severidad| Estado ---|---|---|--- CVE-2026-2586| Inyección EL → RCE| 9.1 Crítico| Corregido en 8.0.2 —| —| —| Divulgación pendiente CVE-2026-2586 —...

netgear-telenetenable

telnetenable.py Paul Gebheim Traducido del código fuente en C disponible en http://wiki.openwrt.org/oldwiki/openwrtdocs/hardware/netgear/telnetconsole Ejecución: python telnetenable.py IP - La IP de tu dispositivo Netgear, usualmente 192.168.1.1 MAC - La dirección MAC debe ser la dirección MAC de...

netgear-telenetenable

telnetenable.py by Paul Gebheim Modified to work with newer Netgear routers R7000, R7500 by insanid Translated from the C source available from http://wiki.openwrt.org/toh/netgear/telnet.console Running: python telnetenable.py IP - The IP of your Netgear device, usually 192.168.1.1 MAC - The mac...

CVE-2024-50498

CVE-2024-50498 WP Query Console body background-color: fff; color: 222; font-family: sans-serif; pre margin: 0; font-family: monospace; a:link color: 009; text-decoration: none; background-color: fff; a:hover text-decoration: underlin...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner Un atacante remoto puede construir una solicitud HTTP especial para tomar el control de la Consola del Servidor WebLogic sin autenticación. Instalación y Uso git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd westone-CVE-2020-14883-scanner c...

CVE-2023-31702

CVE-2023-31702 — eScan Management Console SQL Injection Authenticated Overview CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281. The vulnerability exists in the GetUserCurrentPwd endpoint, where th...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 es una vulnerabilidad de escalada de privilegios local en la consola de gestión del dispositivo AMC de los dispositivos SonicWall Secure Mobile Access SMA serie 1000. La vulnerabilidad se origina por una autorización insuficiente en la AMC, lo que permite a atacantes...

CVE-2021-2109

CVE-2021-2109 Replicación y análisis de la vulnerabilidad de ejecución remota de código en Weblogic Server En enero de 2021, Oracle publicó parches de seguridad que incluyen 329 nuevos parches de seguridad en la serie de productos Oracle. En este anuncio se mencionó especialmente el aviso de...

CVE-2025-40602

CVE-2025-40602 📌 Resumen CVE-2025-40602 es una vulnerabilidad de escalada de privilegios local que afecta a los dispositivos SonicWall Secure Mobile Access SMA 1000. El fallo existe en la Appliance Management Console AMC debido a controles de autorización insuficientes , lo que permite a un usuar...

CVE-2020-14882

WebLogic CVE-2020-14882 / CVE-2020-14883 Test Script This project provides a simple Bash script for testing whether an Oracle WebLogic server is vulnerable to the authentication bypass CVE-2020-14882 and the associated remote code execution vector CVE-2020-14883. The script sends a POST request t...

CVE-2015-3224

CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...

Security Bulletin: This Power System update is being released to address CVE-2026-45447

Summary An authenticated administrator user uploading a specially crafted certificate to the BMC can lead to loss of integrity or remote code execution. Vulnerability Details CVEID:CVE-2026-45447 DESCRIPTION: Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a...

EUVD-2026-85702

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

CVE-2026-75887

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

CVE-2026-75887

A path traversal vulnerability exists in the OpenShift console within the i18n locale handler . An unauthenticated attacker can manipulate the lng and ns query parameters in the /locales/resource.json endpoint to read sensitive *.json files from the pod filesystem, such as configuration files and...

CVE-2026-75887 Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

CVE-2026-75887

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

CVE-2026-75886

A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper authentication, and the forwarding of the openshift-session-token cookie. This allows the attacker to send requests to the in-cluster catalogd servic...