python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...

external_c2_framework

externalc2 フレームワーク Cobalt Strike の External C2 仕様（仕様書）で説明されている仕様と併せて使用するための Python フレームワークです。 主な設計目標は、external c2 仕様を非常にモジュール化された実装とし、Cobalt Strike 用の C2 チャネルを簡単に実装できる十分な抽象化を提供することです。理想的には、ユーザーは transport モジュールと encoder モジュールを作成し、設定ファイルに値を記入するだけで、新しいチャネルを実装できます。 Dropbox トランスポート設定...

DropboxC2C

DropboxC2C DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations. DO NOT USE THIS FOR MALICIOUS PURPOSES. THE AUTHOR IS NOT RESPONSIBLE FOR ANY MISUSE OF THIS PROGRAM. Dropbox-C2C is an old project of mine to use a thirdparty for command and...

lanGhost

⚠️ Warning! This project is no longer maintained and may not work as excepted. A LAN dropbox chatbot controllable via Telegram features: installation: warning: lanGhost is designed for Raspberry Pis Raspbian /Kali for RPi. Running it on other/desktop distros could cause issues and may not work as...

DBC2

DBC2 最新/現在のバージョン: 0.2.6 作者: Arno0x0x - @Arno0x0x DBC2 DropboxC2 はモジュール式のポストエクスプロイテーションツールであり、被害者のマシン上で実行されるエージェント、任意のマシン上で実行されるコントローラー、PowerShellモジュール、および通信手段としてのDropboxサーバーで構成されています。 このプロジェクトは当初、素晴らしいEmpireフレームワークに触発されましたが、同時にPythonを学ぶ目的もありました。 紹介と基本機能（v0.0.1）のデモはこちら: バージョン0.2.xの新機能:...

CVE-2024-49607

CVE-2024-49607 WP Dropbox Dropins = 1.0 - 未認証の任意ファイルアップロード 説明: WP Dropbox Dropins プラグインは、バージョン 1.0 までの全バージョンにおいて、任意ファイルアップロードの脆弱性の影響を受けます。これにより、未認証の攻撃者が影響を受けるサイトのサーバー上に任意のファイルをアップロードできる可能性があり、リモートコード実行が可能になる場合があります。 Published: 2024-10-17 00:00:00 CVE: CVE-2024-49607 CVSS:...

CVE-2026-93986

A flaw was found in rclone. This path traversal vulnerability allows a remote attacker to craft special names in server and third-party listing responses. These crafted names, containing directory traversal sequences, could potentially enable writing outside the intended destination directory...

WordPress WP Cloud Plugins - Dropbox (Out-of-the-Box) plugin 2.0-3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

WordPress WP Cloud Plugins - Dropbox Out-of-the-Box plugin 2.0-3.8.3 - Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by WP Cloud Plugins in WordPress Plugin Out-of-the-Box versions 2.0-3.8.3...

CVE-2026-81102

The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...

EUVD-2026-67030

The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...

CVE-2026-81102 Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation

The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...

CVE-2026-81102: Origin Validation Error

The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...

PT-2026-82575

Name of the Vulnerable Software and Affected Versions Dash MCP server affected versions not specified Description In network mode, the server binds its listener to the loopback address but fails to verify the host name of incoming requests. Within src/mcp server dash.py, the server is configured...

WordPress Easy Dropbox Integration plugin < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX vulnerability

Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Easy Integration for Dropbox versions 2.2.0...

CVE-2026-15958

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

EUVD-2026-52590

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

CVE-2026-15958

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

CVE-2026-15958 Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

CVE-2026-15958 Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

CVE-2026-15958

The Easy Integration for Dropbox WordPress plugin, in versions prior to 2.2.0 , is vulnerable to an authentication bypass. The plugin fails to perform proper authorization checks on several file-management AJAX actions that are accessible to unauthenticated users. This flaw allows an unauthentica...