1011 matches found
ez-pwnkit
ez-pwnkit Una implementación en Go puro del exploit CVE-2021-4034 PwnKit. El exploit utiliza syscall.ForkExec para sobrevivir al final del programa principal. Instalación git clone https://github.com/OXDBXKXO/ez-pwnkit.git cd ez-pwnkit make Como el exploit depende de una biblioteca compartida...
Prox-Ez
Prox-Ez：HTTP 认证的瑞士军刀 这个 HTTP 代理会代表你处理所有 HTTP 认证。 它支持 NTLM EPA（通道绑定和服务绑定）、Kerberos、哈希传递（pass-the-hash）、overpass-the-hash（密钥传递，pass-the-key）以及票据传递（pass-the-ticket，支持 TGT 和 TGS）。 相关文章： 深入剖析 NTLM EPA 并构建一个 MitM 代理 Windows HTTP 认证研究（第二部分） 安装 1. 安装依赖项 $ In a venv $ python3 -m venv venv $ source...
CVE-2022-41876
CVE-2022-41876 - eZ Platform 用户信息泄露 eZ Platform 中出现了一个漏洞，允许未认证的用户访问每个贡献者密码的哈希值。 此 PoC 枚举所有指向 'User' 对象的可能 GraphQL 路径，然后请求这些路径以获取用户的机密信息。 用法 python3 cve-2022-41876.py -h usage: cve-2022-41876.py -h -t -f FILE url CVE-2022-41876 POC positional arguments: url Target URL specify the graphql endpoint...
Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting
The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. id: CVE-2022-23397 info: name: Cedar Gate EZ-NET = 6.8.0 - Cross-Si...
CP-PLUS-EZ-P21-CVE-2026-65893-65894
🔐 CP PLUS EZ-P21 网络摄像机安全分析 CVE-2026-65893 CVE-2026-65894 任意代码执行与身份验证不当 – CP PLUS EZ-P21 网络摄像机 概述 本仓库记录了在 CP PLUS EZ-P21 网络摄像机 中发现的两个安全漏洞。该摄像机是一款基于 IP 的监控摄像头，用于视频监控以及通过网络访问摄像机功能和快照。 这两个问题均已通过负责任披露 流程处理，经厂商/CERT 流程协调，并分配了相应的 CVE 标识符。 漏洞摘要 CVE| 漏洞名称| CWE| CVSS v4.0| 攻击向量 ---|---|---|---|---...
CVE-2026-18759 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.
The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...
CVE-2026-18759 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.
The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...
CVE-2026-18759
CVE-2026-18759 affects ASUSTOR Backup Plan (ABP) and ASUSTOR EZ Sync (AES): a file-based IPC protected by AES can be abused by a local authenticated user to recover the IPC key (readable by standard users, DPAPI-protected) and forge IPC requests. Combined with an insufficient substring check for ...
CVE-2026-65894
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...
CVE-2026-65894 Improper Authentication Vulnerability in CP PLUS EZ-P21 IP Camera
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...
CVE-2026-65894
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...
CVE-2026-65894 Improper Authentication Vulnerability in CP PLUS EZ-P21 IP Camera
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...
EUVD-2026-49117
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...
CVE-2026-65893 Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution through the debug mechanism. Successful...
CVE-2026-65893
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution through the debug mechanism. Successful...
CVE-2026-65893 Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution through the debug mechanism. Successful...
CVE-2026-65894: Improper Restriction of Excessive Authentication Attempts
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...
CVE-2026-65893: Active Debug Code
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution through the debug mechanism. Successful...
PT-2026-64861
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution through the debug mechanism. Successful...
PT-2026-64862
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...