165 matches found
pagesource
pagesource A Python CLI tool that captures all resources loaded by a webpage like browser DevTools Sources tab and saves them with the original directory structure. Installation pip install pagesource IMPORTANT: Install Playwright browser after package installation playwright install chromium Usa...
ldsview
ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...
web_exploit_detector
Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...
BIT-AUTHENTIK-2026-55106 authentik: Unauthenticated LDAP directory data disclosure
authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, a diagnostic action on the LDAP Source API does not enforce the object-level read-authorization filter used by the rest of the API. Any party able to reach the API, including an unauthenticated client, can invoke the...
Microsoft .NET Framework Privilege Escalation
The vulnerability of the Microsoft .NET Framework software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2026-55106: Missing Authorization
authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, a diagnostic action on the LDAP Source API does not enforce the object-level read-authorization filter used by the rest of the API. Any party able to reach the API, including an unauthenticated client, can invoke the...
Makefile - Exposure Detection
Detected Makefile configuration file was identified, which potentially exposed build process details, author information, and directory structure !/usr/bin/env python3 -- coding: utf-8 -- """Detected Makefile configuration file was identified, which potentially exposed build process details, auth...
cPanel Backup Exclusion Configuration - Exposure Detection
cPanel backup exclusion configuration file cpbackup-exclude.conf was publicly accessible, potentially exposing directory structure and system paths. !/usr/bin/env python3 -- coding: utf-8 -- """cPanel backup exclusion configuration file cpbackup-exclude.""" from kittysploit import from...
Google Cloud Ignore File Exposure Detection
Detected exposed .gcloudignore files which may reveal directory structure,deployment configurations, and sensitive project information used by Google Cloud SDK gcloud during deployments. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed .""" from kittysploit import from...
ColdFusion Path Traversal Unauthorized Access
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
PYSEC-2026-1272 Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true
Impact Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the --UNSAFE,--trust flag. As it turns out, a safe template can currently write to arbitrary directories outside the...
Copier's safe template has filesystem write access outside destination path
ImpactCopier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the --UNSAFE,--trust flag. As it turns out, a safe template can currently write files outside the destination path...
CVE-2025-71282
XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by openbasedir restrictions. This allows an attacker to obtain information about the server's directory structure...
CVE-2025-71282
XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by openbasedir restrictions. This allows an attacker to obtain information about the server's directory structure...
CVE-2026-27860
If authusernamechars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out authusernamechars, or install fixed version. No publicly available exploits are...
CVE-2010-0549
Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorize...
EUVD-2010-0580
Malware in sbrugna...
EUVD-2019-1104
Malware in sbrugna...