GyoiThon

GyoiThon : 下一代渗透测试工具 日文页面请点击此处。 演讲与展示 January 25th,2018:JANOG41 March 23th,2018:Black Hat ASIA 2018 Arsenal August 12th,2018:DEFCON26 DemoLabs October 24th,2018:OWS in CSS2018 November 3rd,2018:AV TOKYO 2018 HIVE December 22-23th,2018:SECCON YOROZU 2018 March 28th,2019:Black Hat ASIA 2019 Arsenal...

CVE-2019-0708-Check

360 Escáner no destructivo de vulnerabilidades RDP: https://cert.360.cn/warning/detail?id=1caed77a5620fc7da993fea91c237ed5 Proyecto de GitHub: https://github.com/hualy13/CVE-2019-0708-Check...

CVE-2026-42569

🚨 CVE-2026-42569 - phpVMS Borrado de base de datos sin autenticación Borrado de base de datos no autenticado / Importación destructiva en phpVMS 📌 Resumen CVE-2026-42569 es una vulnerabilidad crítica en phpVMS Sistema de Gestión de Aerolíneas Virtuales que permite a atacantes no autenticados...

Langflow - Broken Access Control

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories...

CVE-2026-22557-Path-Traversal-Ubiquti-UniFi

CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application Este repositorio contiene un escáner de prueba de concepto basado en Go para CVE-2026-22557 dirigido a UniFi Network Application. La herramienta realiza un escaneo controlado y no destructivo contra un conjunto de endpoints comunes y...

CVE-2026-49049

CVE-2026-49049 — Plugin Helix3 de Joomla JoomShaper Manejador AJAX no autenticado — Escáner de vulnerabilidad de solo lectura Resumen CVE-2026-49049 afecta al framework de plantillas Helix3 para Joomla versiones 1.0 a 3.1.0. El manejador onAjaxHelix3, accesible a través del despachador comajax de...

CVE-2018-6389

CVE-2018-6389 Exploit CVE-2018-6389 Checker — una pequeña herramienta Python no destructiva que comprueba indicadores de la vulnerabilidad CVE‑2018‑6389 de WordPress realizando tres solicitudes controladas a load-scripts.php y analizando el tamaño de la respuesta, el tiempo y los patrones de toke...

wp2shell-lab

wp2shell lab & detector + pre-auth RCE PoC A self-contained lab, non-destructive detector , and full pre-auth RCE proof-of-concept for wp2shell — the pre-authentication vulnerability chain in WordPress core:...

CVE-2026-31431-exploit

CVE-2026-31431 WARNUNG Diese Linux-LPE-Exploit-Implementierungen sind zur Laufzeit destruktiv. Sie überschreiben die Live-Page-Cache-Ansicht privilegierter Ziele wie: su PAM-Konfigurationsdateien jede Datei, die im patch-Modus übergeben wird Dies ist normalerweise keine dauerhafte Änderung auf de...

CYBERDUDEBIVASH-Modular-DS-CVE-2026-23550-Detector

CYBERDUDEBIVASH Modular DS CVE-2026-23550 Detector Überblick Dies ist ein autorisiertes CYBERDUDEBIVASH ECOSYSTEM-Tool zur Erkennung von CVE-2026-23550 im WordPress Modular DS Plugin. Es prüft nicht-destruktiv auf verwundbare Versionen = 2.5.1, indem es die readme.txt des Plugins analysiert. Idea...

Mass-Scanner-CVE-2026-2631

⚡ CVE-2026-2631 Async Mass Checker Mass-checker asincrono privato per la validazione interna di WordPress 🚨 Avviso Questo strumento esegue una validazione distruttiva. Invia una richiesta POST all'endpoint di destinazione e potrebbe modificareshopsecret sui target vulnerabili. Utilizzalo solo su...

CVE-2026-76072

The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...

EUVD-2026-65059

The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...

CVE-2026-76072

Continue CLI through 1.5.47 uses an incomplete denylist in evaluateTerminalCommandSecurity.ts as its sole barrier against destructive shell commands in headless and auto modes. The dangerous-path check covers only /, ~, /usr, /etc, /bin, and /sbin, leaving paths like /home, /root, /var, /opt, and...

CVE-2026-76072 Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode

The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...

MAL-2026-11542 Malicious code in osinthell (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458757b4c185e84321b45bd7fec158459300d68106826e5774df2399818c7916 The package's only exported function, sorgu, invokes 26 sibling modules under public/a/b/.../z/ that carry out an immediate, irreversible destructive...

Exploit for CVE-2026-17543

PHP CVE-2026-17543 Exposure Validator Safe network-side valid...

CVE-2026-65321

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format, which routes DELETE and CTAS statements to the escapehive function that backslash-escapes single...

CVE-2026-65321

CVE-2026-65321 affects PyAthena prior to 3.35.4. The vulnerability stems from improper quote escaping in DefaultParameterFormatter.format(), where DELETE and CTAS flows go through _escape_hive and backslash-escape single quotes instead of doubling them. Because Athena and Trino do not treat backs...

SUSE CVE-2026-55433

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the devcontainer recreate endpoint relied on route middleware that checked only ActionRead on the workspace and, unlike the sibling delete endpoint, perform...