aws-enumerator

AWS 서비스 열거 면책 조항 이 도구는 베타 단계테스트 진행 중이며, 파괴적인 API 호출읽기 전용 작업은 사용하지 않습니다. 도구에 문제가 없기를 바랍니다. 문제가 발생하면 티켓을 제출해 주세요. 설명 AWS Enumerator는 침투 테스터가 블랙박스 테스트 중에 서비스 열거 및 정보 덤프를 수행하기 위해 만들어졌습니다. 이 도구는 보안 연구자가 AWS 계정 자격 증명을 탈취했을 때 클라우드 검토 프로세스를 가속화하기 위한 것입니다. AWS Enumerator는 600개 이상의 API 호출Get, List, Describ...

BruteX

BruteX 소개: 대상에서 실행 중인 모든 서비스를 자동으로 무차별 대입합니다. 열린 포트 사용자 이름 비밀번호 설치: root@kitploit: ./install.sh 사용법: root@kitploit: brutex target 도커: root@kitploit:...

Wordpress-XMLRPC-Brute-Force-Exploit

1N3의 Wordpress XMLRPC System Multicall 무차별 대입 공격 익스플로잇 마지막 업데이트: 20170215 https://crowdshield.com 개요: 이것은 가장 최신 버전의 Wordpress3.5.1에 영향을 주는 Wordpress xmlrpc.php System Multicall 함수를 위한 익스플로잇입니다. 이 익스플로잇은 유효한 Wordpress 사용자를 "무차별 대입"하기 위해 요청당 1,000회 이상의 인증 시도를 xmlrpc.php에 보내며, 유효한 사용자 응답을 얻을 때까지 전체 ...

ibrute

업데이트 클라우드 저장소 보안에 대해 우려하신다면 내가 클라우드였다면?을 읽고 피드백을 남겨 주세요. 감사합니다. 재미의 끝, Apple이 방금 패치했습니다. 여기 appleID 비밀번호 무차별 대입 p0c가 있습니다. 이것은 p0c일 뿐이므로 다음 기능은 없습니다. MultiThreading멀티스레딩 기능 Save-State-On-Exception예외 시 상태 저장 기능 직접 만들어 보세요. Find My Iphone 서비스 API를 사용하며, 여기에는 무차별 대입 방지 기능이 구현되어 있지 않습니다. 비밀번호 목록은...

flowise-arbitrary-file-read-getFileFromStorage

Flowise 인증 우회 임의 파일 읽기 getFileFromStorage — 제안된 신규 CVE CVE-2025-71338쓰기write 싱크과 별개의 취약점 입니다. 이는 Flowise 문서 저장소 로더 "리하이드레이션rehydrate" 경로에서 인증 없이 가능한 임의 파일 읽기 로, 1.7.1 – 2.2.3 에 영향이 있으며 2.2.4 에서 수정되었습니다. /root/.flowise/encryption.key를 읽으면 저장된 모든 공급자 자격 증명을 해독하는 키를 얻을 수 있습니다 → 전체 자격 증명 탈취. 목차...

How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign

A practical playbook for investigating GitHub token compromise, drawn from Wiz CIRT's response to a coordinated multi-organization campaign...

PT-2026-69885

Name of the Vulnerable Software and Affected Versions use-reducer-async affected versions not specified Description Malicious commits were introduced into the default branch of the repository, which executed remote attacker-controlled code on developer workstations during the npm install process...

Malicious code in @or-sdk/identifiers (npm)

npm/@or-sdk/identifiers is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...

SUSE CVE-2026-53632

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the...

EUVD-2026-38299

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the...

CVE-2026-12049

A flaw was found in pgAdmin 4. This open redirect vulnerability exists in the multi-factor authentication MFA flow. An authenticated user could be tricked into clicking a specially crafted link, which would redirect them to an attacker-controlled website. This could increase the success rate of...

PT-2026-49575

Name of the Vulnerable Software and Affected Versions launch-editor versions prior to 2.14.1 Description The launch-editor NPM package allows the access of arbitrary paths, including Windows UNC Universal Naming Convention paths. On Windows systems, accessing a UNC path triggers an automatic NTLM...

CVE-2026-46622 SolidInvoice: API tokens stored as plaintext in the database allowing full credential compromise on database breach

SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, API tokens used to authenticate all REST API requests are stored as plaintext strings in the apitokens database table. Any attacker who obtains read access to the database — through SQL injection, a leaked backup, a...

CVE-2026-46622

SolidInvoice before v2.3.17 stores API tokens in plaintext in the api_tokens database table. If an attacker gains read access to the database (e.g., via SQL injection, leaked backups, misconfigured replicas, or insider access), they can immediately obtain all API credentials for every user with n...

CVE-2026-36182

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

CVE-2026-10843

A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS. Operator credentials are provisioned with account-wide scope for destructive actions rather than being restricted to cluster-owned resources, enabling cross-scope impact after credential compromise...

CVE-2026-25861

QloApps through 1.7.0, fixed in commit 64e9722, contains a weak cryptographic algorithm vulnerability that allows attackers to compromise user credentials by exploiting the use of MD5 for password hashing in the Tools::encrypt function within classes/Tools.php, which concatenates a static cookie...

forman: Foreman: Remote Code Execution via command injection in WebSocket proxy

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating...

CVE-2026-1961

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating...

SUSE CVE-2026-27575

Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to set weak passwords e.g., 1234, password without enforcing minimum strength requirements. Additionally, active sessions remain valid after a user changes their password. An...