CVE-2026-25075-check

CVE-2026-25075 漏洞评估工具 安全检测 strongSwan VPN 服务器是否存在 CVE-2026-25075 漏洞，且不会造成任何中断。查看 Bishop Fox 博客的完整分析文章。 描述 CVE-2026-25075 是 strongSwan 的 EAP-TTLS 插件中的一个整数下溢漏洞，允许远程未认证攻击者通过精心构造的 EAP-TTLS 消息使 IKE 守护进程崩溃。该漏洞影响 strongSwan 从 4.5.0 到 6.0.4 的所有版本，涵盖超过 15 年的版本发布。 此工具通过以下步骤执行非破坏性漏洞测试： 1. 使用 EAP-TTLS 认证建立完整...

CacheData_decrypt

CacheDatadecrypt 一个用于对 Windows EntraId CacheData 进行暴力破解和破解的简易工具包。 root@kitploit: usage: decryptcachedata.py -h pin,password ... CacheData bruteforcer. On a live windows host, to copy the folders with all subfolders and files: xcopy /H /E /G /C as SYSTEM. The script will automatically iterates on...

EIPP

EIPP 禁用密码列表 用于操作 Entra ID 密码保护禁用密码列表（BPL）的工具。 包含全局禁用密码列表条目的 eipp-global-bpl.txt 于 2024-04-11 转储。 更多信息请访问 https://www.synacktiv.com/en/publications/entra-id-banned-password-lists-password-spraying-optimizations-and-defenses。 EIPPDecrypt 此工具可用于提取本地部署的 Entra ID 密码保护的配置和密码策略。它依赖 DC Agent...

CVE-2023-6241

CVE-2023-6241 漏洞利用 相关技术文章可在此处查看。这是 Arm Mali 内核驱动程序中的一个漏洞，我于 2023 年 11 月报告了该漏洞。该漏洞可用于从不被信任的应用域获取任意内核代码执行权限，进而用于禁用 SELinux 并获取 root 权限。 该漏洞利用已在搭载 2023 年 11 月补丁（UD1A.231105.004）的 Google Pixel 8 上完成测试。它需要使用 OpenCL 编译，并与 OpenCL 库 libGLESmali.so 链接。该库可在 Pixel 8 设备的 vendor/lib64/egl/libGLESmali.so...

CVE-2026-20660

CVE-2026-20660 PoC 捆绑包 本文件夹打包了一个独立的 PoC（概念验证），针对： CVE-2026-20660 通过 gzip FNAME 实现的 CFNetwork NSGZipDecoder 路径遍历 对启用自动打开功能的受影响 macOS Safari 的影响 1. 目录结构 server.py：主 PoC 服务器，支持可配置的遍历深度和目标文件名 serveroverwrite.py：专门写入 ../../pwn.sh 的变体 README.md：复现说明和操作日志 2. 前置条件 1. 目标为存在漏洞的 macOS Safari（早于 26.3 补丁线）。...

Malware-analysis-and-Reverse-engineering

Malware-analysis-and-Reverse-engineering Algunos de mis análisis de malware e ingeniería inversa disponibles públicamente Informes, Consejos, Trucos... Ingeniería inversa del stealer KPOT v2.0 Depuración de MBR - IDA + Bochs Emulator ejemplo de CTF Descifrado TLS en Wireshark Ryuk Ransomware:...

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting Una cross-site scripting almacenada XSS en Nagios Log Server 2.1.7 puede permitir que un atacante realice acciones maliciosas sobre los usuarios que abren un enlace manipulado o una página web de terceros. Nagios Log Server 2.1.7 y las...

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability

FHEM-6.0-Inclusión-de-Archivos-Locales-LFI-Vulnerabilidad LFI en FHEM 6.0 permite a un atacante incluir un archivo, lo que puede conducir a la divulgación de información sensible. CVE-2020-19360 https://vulners.com/cve/CVE-2020-19360 PoC Para explotar la vulnerabilidad, alguien podría usar la...

PowerShell-Suite

PowerShell-Suite 网上有大量出色的工具和资源可用 PowerShell 完成大多数任务，但有时仍需要为特定目的编写一个实用工具，或填补概念上的空白。这个集合里的 PowerShell 实用程序是我出于兴趣或因为有特定用途而整理的。 因此，它们的可用性可能因人而异，但欢迎提交 issue 或 fork 并加以改造！ Windows API 以下是一些关于从 PowerShell 访问 Windows API 的参考资源： FuzzySecurity：Low-Level Windows API Access From PowerShell Microsoft...

GHSA-8CJ9-R88M-8945 Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

Summary The password change form is vulnerable to CSRF, allowing an attacker to change a user password even the administrator by tricking a connected user to visit a malicious website. The vulnerability has been tested with version 2.18.20. Details The password change endpoint of Semaphore UI doe...

Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

Summary The password change form is vulnerable to CSRF, allowing an attacker to change a user password even the administrator by tricking a connected user to visit a malicious website. The vulnerability has been tested with version 2.18.20. Details The password change endpoint of Semaphore UI doe...

Final-project-SQL-injection-pipeline

SQL 注入检测 — 混合机器学习流水线 硕士论文源代码： 利用机器学习增强 Web 应用防火墙以检测 SQL 注入 | ---|--- 作者| Lilliane Linnet Musoke 机构| 雷丁大学计算机科学系 专业| 数据科学与高级计算理学硕士 导师| Atta Badii 教授 提交日期| 2024年9月17日 本仓库内容 两条新颖的混合机器学习流水线，每条均以独立的 Jupyter notebook 实现，用于检测 Web 应用流量中的 SQL 注入（SQLi）攻击： 1. DistilBERTStackedEnsemblepipeline.ipynb —...

CVE-2026-82298

Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

CVE-2026-82302

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

CVE-2026-78593

An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond th...

CVE-2026-78583

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

CVE-2026-78596

Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization CWE-862 in Kibana can lead to unauthorized modification of data via Privilege Abuse CAPEC-122. An authenticated user holding Security read-level access in a single Kibana space could trigger Entit...

Security Bulletin: MongoDB Enterprised Advanced affected by: Interpretation Conflict (CVE-2026-13676)

Summary There are vulnerabilities in fast-uri-3.1.2.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-13676. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-13676 DESCRIPTION: fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicod...

Security Bulletin: MongoDB Enterprised Advanced affected by: Path Traversal (CVE-2026-49356)

Summary There are vulnerabilities in core-7.26.10.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-49356. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc...

Security Bulletin: MongoDB Enterprised Advanced affected by: Open Redirect (CVE-2026-40181)

Summary There are vulnerabilities in router-1.23.2.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-40181. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-40181 DESCRIPTION: React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7...