android

cSploit 现已视为 EOL（生命周期结束），开发者不再进行更新。当前版本可能无法在较新的 Android 版本上正常运行。我们感谢所有多年来为 cSploit 做出贡献的人。 cSploit：Android 网络渗透测试套件 cSploit 是一个自由/开源（GPL 许可）的 Android 网络分析与渗透套件，旨在成为 最完整和先进的专业工具包 ，供 IT 安全专家/极客在移动设备上执行网络安全评估。 更多信息请访问 www.cSploit.org。 功能 绘制本地网络拓扑 识别主机操作系统和开放端口 添加本地网络之外的自有主机 集成 traceroute 集成Metasploi...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Investigación de Vulnerabilidades RAPTOR Loop-Hunt Una auditoría de seguridad de Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a realizada con la metodología RAPTOR loop-hunt : reconocimiento determinista → 25 agentes generadores aislados leyendo el código...

libhtp

LibHTP End-of-Life Announcement July 7, 2026 Following the End of Life of Suricata 7, the libhtp project will no longer be maintained and updated by OISF. Suricata 8 and beyond use a fork of the libhtp code that has been converted and rewritten to Rust. It is available under the same license from...

envizon

envizon - 由 evait security 开发 生命周期结束（EOL） https://github.com/evait-security/envizon/issues/130 我们（evait security）已将内部项目文档迁移至 https://gitlab.com/invuls/pentest-projects/pcf。 网络可视化与渗透测试报告 版本 5.0 本工具由 evait security 设计、开发并维护。为了回馈安全社区，我们公开发布了内部使用并持续优化的先进网络可视化与漏洞报告工具 'envizon'。希望您的反馈能帮助我们进一步改进和完善它。 网站...

security-onion

Security Onion Security Onion 16.04 已到达生命周期终止： https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html 你可以在以下位置找到新的 Security Onion 2 仓库： https://github.com/Security-Onion-Solutions/securityonion/...

scanner-cli

弃用通知：Hawkeye 已到达生命周期终点。 目前已有更多现代化方案可供您和您的项目使用。如果您希望接手该项目的维护工作，请随时与我联系。您可以在我的个人主页上找到我的联系方式。 . . . . . . Hawkeye scanner-cli 是一个项目安全、漏洞及通用风险突出工具。它旨在集成到您的预提交钩子和流水线中。 运行和配置扫描器 Hawkeye scanner-cli 假定您的目录结构将工具链的文件放在顶层。大致而言，它遵循以下原则： Node.js 项目在顶层有 package.json Ruby 项目在顶层有 Gemfile Python 项目在顶层有...

OpenPLC_v3

OpenPLC Runtime versión 3 ⚠️ Este proyecto ha llegado al final de su ciclo de vida y ya no se mantiene. Ha sido reemplazado por OpenPLC Runtime v4. Visite el nuevo repositorio para obtener instrucciones de instalación, documentación y soporte. OpenPLC es un Controlador Lógico Programable de código...

Turvan6rkus-CVE-2024-3273

🛠️ Inyección de Comandos en Dispositivos de Almacenamiento en Red D-Link 🌟 Antecedentes D-Link Network Attached Storage NAS o almacenamiento en red es un dispositivo conectado a una red informática con uno o más discos duros para almacenar y compartir archivos. A diferencia de un disco duro extern...

BurpSuiteSharpener

Acerca de este repositorio y EOL Este repositorio ya no se actualizará. Por favor, use https://github.com/irsdl/BurpSuiteSharpenerEx. Burp Suite Sharpener Esta extensión debería añadir una serie de funciones de interfaz y funcionales a Burp Suite para facilitar un poco su uso. La última versión...

Drupal SEoL (7.x)

According to its version, Drupal is 7.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...

Astra Linux – Vulnerability in Apache Log4j1.2

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter, where the values to be inserted are converted using PatternLayout. The message converter %m is likely to always be included. This allows attackers to manipulate SQL statements by entering crafted...

Security Bulletin: Vulnerability in AngularJS affects IBM License Key Server Administration and Reporting Tool

Summary Potential vulnerability in AngularJS has been identified that affects IBM License Key Server Administration and Reporting Tool. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-0716 DESCRIPTION: Improper sanitization ...

CVE-2026-82971

A command injection vulnerability in QVidium Opera11 3.3.2a26-Ax4x-opera11 affects the CGI script /cgi-bin/net_tr.cgi , where manipulation of the ipaddr argument allows remote, unauthenticated attackers to execute arbitrary commands. The vulnerability is rated CVSS 10.0 (Critical) with low attack...

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

EUVD-2026-64854

A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...

D-Link DNS_340L - OS Command Injection

Exploit Title: D-Link DNS340L - OS Command Injection Date: 2026-07-16 Exploit Author: Jared Brits K3ysTr0K3R Vendor Homepage: https://www.dlink.com/ Version: DNS-320 v1.00, DNS-320LW v1.01.0914.2012, DNS-325 v1.01, v1.02, DNS-340L v1.08, and possibly others Tested on: D-Link DNS-320 CVE:...

CVE-2026-19841

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...

CVE-2026-41939

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

CVE-2026-41939 Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

CVE-2026-41939

Summary: CVE-2026-41939 affects Care Everywhere Gateway 14.3.10, where a hard-coded credential flaw in the bundled WildFly 8.2.0.Final management interface enables unauthenticated remote access to the WildFly admin console (port 20990) with default credentials. This allows deployment of a malicio...