external_tcpdump_CVE-2018-14469

tcpdump 如需报告安全问题，请发送电子邮件至 [email protected]。 如需报告错误和其他问题、贡献补丁、提出功能请求、提供一般性反馈等，请参阅 tcpdump 源码树根目录下的 CONTRIBUTING 文件。 TCPDUMP 4.x.y 现由 "The Tcpdump Group" 维护 参见 www.tcpdump.org 可通过匿名 Git 获取： root@kitploit: git clone git://bpf.tcpdump.org/tcpdump 原来自 Lawrence Berkeley National Laboratory Networ...

insect

insect - Découverte de chemins web Version actuelle: v1.4 20222.09.03 Un outil avancé en ligne de commande conçu pour bruteforcer les répertoires et fichiers des serveurs web, également appelé scanner de chemins web. Idée par @maurosoria et @shelld3v Développement-2022 est activement développé pa...

boundary

Boundary Cos'è Boundary: https://developer.hashicorp.com/boundary/docs/what-is-boundary Sito web: https://www.developer.hashicorp.com/boundary/ Forum: HashiCorp Discuss Documentazione: https://developer.hashicorp.com/boundary/docs Tutorial: Piattaforma Learn di HashiCorp Boundary è un proxy...

CVE-2025-1094-Lab-Setup

🛠️ CVE-2025-1094 Laborumgebung ⚠️ Haftungsausschluss Dieses Labor dient ausschließlich Bildungs- und Forschungszwecken. Verwenden Sie NICHT Informationen oder Techniken aus dieser Anleitung auf Systemen, die Ihnen nicht gehören oder für die Sie keine ausdrückliche Genehmigung zum Testen haben. Die...

Copy-Fail

CVE-2026-31431 – "कॉपी फेल" रीचेबिलिटी चेकर एक सरल, सुरक्षित Python स्क्रिप्ट जो यह निर्धारित करती है कि कोई Linux सिस्टम CVE-2026-31431 "कॉपी फेल" के प्रति संवेदनशील है या नहीं, जो कर्नेल 4.14 के बाद से सभी प्रमुख डिस्ट्रीब्यूशन को प्रभावित करने वाला एक स्थानीय विशेषाधिकार वृद्धि local privilege...

Copy-Fail-CVE-2026-31431-Statically-PoC

PoC statico in Go per Copy-Fail CVE-2026-31431 Questo repository contiene una portabilità in Go del proof of concept pubblico in Python di theori-io/copy-fail-CVE-2026-31431. Il programma è solo per Linux. Utilizza l'interfaccia Linux AFALG, i messaggi di controllo AEAD e splice2 per preservare i...

Dirty-Frag-Kubernetes-PoC

Dirty Frag CVE-2026-43284 — PoC di Container Escape Kubernetes Una proof-of-concept che dimostra come un Pod Kubernetes predefinito e non privilegiato possa ottenere esecuzione di codice a livello di nodo su Amazon EKS sfruttando la vulnerabilità di corruzione della page cache del kernel Linux...

CVE-2026-21636

CVE-2026-21636 - Bypass del modello di permessi UDS/Rete di Node.js Riepilogo della vulnerabilità Il modello di permessi di Node.js --permission è progettato per isolare un processo limitando l'accesso al filesystem, ai processi figli, ai worker e alla rete. CVE-2026-21636 rivela che le connessio...

APKLab

APKLab L'esperienza definitiva di reverse engineering Android direttamente nel tuo VS Code. APKLab integra perfettamente i migliori strumenti open-source: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm e altri direttamente in VS Code, così puoi concentrarti sull'analisi delle app e portarla ...

Cacti cmd_realtime.php - Command Injection

Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when registerargcargv option of PHP is On. In cmdrealtime.php line 119, the $pollerid used ...

Hitachi Pentaho Business Analytics Server - Remote Code Execution

Hitachi Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x, is susceptible to remote code execution via server-side template injection. Certain web services can set property values which contain Spring templates that are interpreted downstream, thereby...

PhpMyAdmin <4.8.2 - Local File Inclusion

PhpMyAdmin before version 4.8.2 is susceptible to local file inclusion that allows an attacker to include view and potentially execute files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted...

NUUO NVRmini - Remote Command Execution

NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgradehandle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter. id: CVE-2018-14933 info: name: NUUO NVRmini - Remote Command Execution author:...

Mida eFramework <=2.9.0 - Remote Command Execution

Mida eFramework through 2.9.0 allows an attacker to achieve remote code execution with administrative root privileges. No authentication is required. id: CVE-2020-15920 info: name: Mida eFramework =2.9.0 - Remote Command Execution author: dwisiswant0 severity: critical description: Mida eFramewor...

D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure

D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure. id: CVE-2020-25078 info: name: D-Link DCS-2530L/DCS-2670L - Administrator...

OSIB

OWASP Open Security Information Base OSIB Página do Projeto: https://owasp.org/www-project-open-security-information-base Repositório de Software: https://github.com/OWASP/OSIB Ferramentas Fornecidas: mkdocsmacroosib.py módulo Python instalável manualmente osibmacro.py macro para copiar que impor...

ironcurtain

IronCurtain 一个用于自主AI代理的安全运行时，其安全策略源自人类可读的章程。 当有人写"安全"时，你应该立即持怀疑态度。我们所说的安全是什么意思？ !WARNING 研究原型。 IronCurtain 是一个早期研究项目，探索如何使AI代理足够安全以真正有用。API、配置格式和架构可能会发生变化。欢迎贡献和反馈。 演示 代理被要求克隆一个仓库并推送更改。gitclone 和 gitpush 都被策略引擎升级，但自动审批器自动批准了它们——用户来自命令模式的可信输入（Ctrl-A）提供了明确的意图，因此无需手动 /approve。 问题...

SetupHijack

SetupHijack Aperçu SetupHijack est un outil de recherche en sécurité qui exploite des conditions de concurrence et une gestion non sécurisée des fichiers dans les processus d'installation et de mise à jour de Windows. Il cible les scénarios où des installateurs ou programmes de mise à jour...

CVE-2026-13152

CVE-2026-13152: Escalação de Privilégios Não Autenticada no Custom Fields Account Registration For WooCommerce 1.4 -blue.svg 📖 Visão Geral do Advisory O CVE-2026-13152 é uma vulnerabilidade de escalação de privilégios não autenticada que afeta o plugin Custom Fields Account Registration For...

Copy-Fail-CVE-2026-31431

Copy-Fail-CVE-2026-31431 Una riproduzione proof-of-concept della vulnerabilità del kernel Linux CVE-2026-31431 , nota anche come Copy Fail. Crediti a: Copy Fail Sistemi Interessati Versioni del kernel Linux 4.14 e successive La maggior parte delle distribuzioni principali rilasciate dal 2017 fino...