CVE-2026-4034 TIBCO Administrator Injection Vulnerability

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...

EUVD-2026-88813

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...

CVE-2026-4034

An injection vulnerability exists in TIBCO Administrator version 5.13.0 and prior . This flaw allows an authenticated user to submit specially crafted input through the web-based administration console . The vulnerability carries a High base severity score of 8.7 , with potential impacts on confi...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

CVE-2020-14882-WebLogic-Analysis

Vulnerability Research: Exploitation of the CVE-2020-14882 and CVE-2020-14883 Chain in Oracle WebLogic Server The repository contains a technical report Write-up and a conceptual Proof of Concept PoC demonstrating the chained Authentication Bypass and Remote Code Execution RCE vulnerabilities in...

TIBCO Security Advisory: September 29, 2026 - TIBCO Administrator - CVE-2026-4034

TIBCO Administrator Injection Vulnerability Original release date: September 29, 2026 Last revised: --- CVE-2026-4034 Source: TIBCO Software Inc. Description Multiple Injection vulnerability has been discovered in TIBCO Administrator. Refer below for further details Products Affected TIBCO...

symfony

Symfony es un framework de PHP para aplicaciones web y de consola, y un conjunto de componentes PHP reutilizables. Symfony es utilizado por miles de aplicaciones web y por la mayoría de los proyectos PHP populares. Instalación Instalar Symfony con Composer consulte los detalles de requisitos...

CVE-2022-29548

Prueba de concepto de exploit para CVE-2022-29548: Existe un problema de XSS reflejado en la Consola de Administración de varios productos WSO2. Esto afecta a API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0 y 4.0.0; API Manager Analytics 2.2.0, 2.5.0 y 2.6.0; API Microgateway 2.2.0; Data...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the QAFA Firmware for telecommunications equipment lies in its ability to bypass authentication using a user-controlled key. This allows attackers to gain access to the administrative web console.

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

sliver-gui

Sliver GUI A desktop operator console for the Sliver C2 framework in the spirit of Cobalt Strike and Havoc. Designed and Developed by Raj Kumar Mullapudi Sliver GUI is a thin Wails v2 Go + plain HTML/CSS/JS frontend over Sliver's existing rpcpb.SliverRPC gRPC service. It reimplements no C2 logic...

Bastillion

Bastillion 一款现代化的、基于 Web 的 SSH 控制台和 SSH 密钥管理工具。 Bastillion 为你提供了一种简洁的、基于浏览器的方式来管理所有系统上的 SSH 访问——就像一个带有友好仪表盘的堡垒机。它做两件事： 1. 基于 Web 的 SSH 终端 ——主机注册后，授权用户可以直接从浏览器打开一个或多个实时终端会话，命令可以选择性地同时广播到所有打开的会话（可以想象成 tmux 的同步窗格，只不过面对的是远程主机集群，而不是本地窗格）。 2. SSH 密钥管理 ——Bastillion 持有自己的 SSH...

OpenFire_Decrypt

OpenFireDecrypt Descifrado de contraseñas de cuentas del panel de administración de OpenFire Instalar openfire https://hub.docker.com/r/sameersbn/openfire docker pull sameersbn/openfire:3.10.3-19 docker run --name openfire -d --restart=always \ --publish 9090:9090 --publish 5222:5222 --publish...

SharpRDP

SharpRDP - 用于经过身份验证的命令执行的远程桌面协议控制台应用程序 构建 要编译，请在Visual Studio中打开项目并生成为Release版本。两个DLL将输出到Release目录，但您不需要它们，因为DLL已包含在程序集中。 如果您不想使用提供的DLL，您需要.NET SDK来创建AxMSTSCLib.dll DLL。要创建它，您需要从SDK中对mstscax.dll运行aximp。%%\aximp.exe %windir%\system32\mstscax.dll。这些DLL需要被项目引用以创建Interop DLL。...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

CVE-2024-50498

CVE-2024-50498 Versión afectada WP Query Console =1.0 Créditos https://github.com/RandomRobbieBF/CVE-2024-50498 Premisa El tipo de consulta es WPQuery y WP Query Console ejecuta algunas funciones php Uso python .\CVE-2024-50498.py 192.168.41.163 --query "id"...

crestron_getsudopwd

crestrongetsudopwd Based on Ricky Lawshae discovery on Crestron TSW-X60 and MC3 devices, this tool aims to exploit the CVE-2018-13341. Using the MAC address of the targeted device, you can recover the password of the "crengsuperuser" hidden account which has elevated privileges and allow you to r...

CVE-2024-0507_CVE-2024-0200-github

简介 此仓库包含我们为GitHub Enterprise漏洞CVE-2024-0507和CVE-2024-0200开发的利用程序。 查看完整文章：https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/ CVE-2024-0507 GitHub Enterprise Server 管理控制台中的代码注入导致权限提升 . CVE-2024-0200 GitHub Enterprise Server 中的不安全反射导致命令注入...

fas-judgement-oss

FAS Judgement 提示注入攻击控制台 在别人之前测试你的AI防御。 安装 | 游戏模式 | 全球排行榜 | 演示目标 | 功能 | 精英版 | 贡献 为什么选择 Judgement？ 你的AI聊天机器人、API或智能体很可能存在提示注入漏洞。大多数都是这样。问题是，大多数团队没有适当的工具或专业知识来测试这一点。 Judgement为你提供了一种结构化的方法，可以将分类的攻击模式对准任何AI端点，并精确查看哪些地方出了问题。无需安全背景——内置的游戏模式会边玩边教你。 由Fallen Angel...