320 matches found
CVE-2018-9995-ModifiedByGwolfs
stato Questo strumento è una versione migliorata del CVE-2018-9995 scritto da gwolfs, ed è solo per uso educativo. Non utilizzarlo per scopi illegali, tutte le conseguenze che ne derivano sono tue. La versione originale è stata scritta da ezelf e si trova su...
CVE-2020-1472
CVE-2020-1472 POC Richiede l'ultimo impacket da GitHub con le strutture netlogon aggiunte. Tieni presente che di default questo cambia la password dell'account del domain controller. Sì, questo ti permette di fare DCSync, ma rompe anche la comunicazione con gli altri domain controller, quindi fai...
MalSeclogon
MalSeclogon Un piccolo strumento per giocare con il servizio Seclogon. Dettagli tecnici completi su: https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-2.html https://splintercod3.blogspot.com/p/the-hidden-side-of-seclogon-part-3.html Utilizzo root@kitploit: MalSeclogon v0.2...
TREVORspray
TREVORspray 2.0 TREVORspray è uno spruzzatore di password modulare con threading, proxy SSH, moduli di loot e altro ancora! Di @thetechr0mancer Installazione: root@kitploit: pip install git+https://github.com/blacklanternsecurity/trevorproxy pip install...
postEX
PostEX - Agente di Ricognizione Post-Exploitation Solo per test di sicurezza autorizzati. L'uso non autorizzato è illegale. PostEX è un agente di ricognizione post-exploitation basato su Python per Windows. Raccoglie informazioni di sistema, stato dei privilegi, patch installate, meccanismi di...
CVE-2026-68508
A flaw was found in Hydra. The hydra.utils.instantiate function, used for configuring complex applications, can be exploited by passing untrusted configuration. This allows an attacker to control target values and arguments, leading to the execution of arbitrary code within the application's...
honeybits
Honeybits Ein einfaches PoC-Tool, das entwickelt wurde, um die Effektivität Ihrer Fallen zu verbessern, indem es Breadcrumbs und Honeytokens auf Ihren Produktionsservern und Arbeitsstationen verteilt, um den Angreifer zu Ihren Honeypots zu locken. Autor: Adel "0x4D31" Karimi. Die Windows-Version...
CVE-2026-77073 n8n before 2.34.1 Cross-Project Credential Access via MCP
n8n versions before 2.34.1 contain a credential validation bypass in the MCP createworkflowfromcode tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references...
EUVD-2026-63262
n8n versions before 2.34.1 contain a credential validation bypass in the MCP createworkflowfromcode tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references...
CVE-2026-77073 n8n before 2.34.1 Cross-Project Credential Access via MCP
n8n versions before 2.34.1 contain a credential validation bypass in the MCP createworkflowfromcode tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references...
CVE-2026-68868
The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's teamname was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti...
EUVD-2026-57163
The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's teamname was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti...
CVE-2026-42142 TypeBot has Authorization Bypass in Google Sheets `getSheets` Endpoint that Allows Cross-Workspace Credential Access
TypeBot is a chatbot builder tool. Prior to version 3.17.0, the handleGetSheets API handler POST /api/sheets/getSheets does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet data...
CVE-2026-42142 TypeBot has Authorization Bypass in Google Sheets `getSheets` Endpoint that Allows Cross-Workspace Credential Access
TypeBot is a chatbot builder tool. Prior to version 3.17.0, the handleGetSheets API handler POST /api/sheets/getSheets does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet data...
CVE-2026-72763
n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow when workflow sharing is enabled who knows a...
EUVD-2026-56142
n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow when workflow sharing is enabled who knows a...
CVE-2026-72763
n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow when workflow sharing is enabled who knows a...
PT-2026-70165
n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow when workflow sharing is enabled who knows a...
EUVD-2026-55819
A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account SA token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges to cluster-administrator level, gain access to...
CVE-2026-68872 Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or Variable
The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with either backend, a caller in o...