commend_sqli

CVE-2023-XXXXX 建议描述 G8-VOIPREC（Commend VoIPRec）Web界面在登录页面的"Code"参数中存在基于时间的盲SQL注入漏洞。 附加信息 PoC: POST /cgi-bin/SecComRecX.cgi HTTP/1.1 Host: 192.168.88.10 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept: application/json, text/javascript, / ; q=0.01...

CVE-2026-15826-CVE-2026-15748

CVE-2026-15826, CVE-2026-15748 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing...

CVE-2020-0041

CVE-2020-0041 This repository contains LPE code for exploiting CVE-2020-0041 implemented by bluefrostsecurity as released at https://github.com/bluefrostsecurity/CVE-2020-0041/tree/master/lpe . The exploitation approach for this part can be found at...

DIRT

DIRT: Driver Initial Reconnaissance Tool I'm writing this tool to learn C++ and get an initial assessment of drivers installed on a Windows system e.g. master images developed by OEMs or enterprises. It's supposed to help with target selection, finding low-hanging fruit, and some assistance with...

CVE-2026-65400

CVE-2026-65400 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

alterx

AlterX Features • Installation • Usage • Running AlterX • Join Discord root@kitploit: Fast and customizable subdomain wordlist generator using DSL. Features Fast and Customizable Automatic word enrichment Pre-defined variables Configurable Patterns Pattern Mining - Automatically discover subdomai...

CVE-2025-12030

CVE-2025-12030: ACF to REST API WordPress 插件中的不安全的直接对象引用 关键词： CVE-2025-12030, ACF to REST API 漏洞, IDOR, WordPress 安全, 经过身份验证的利用, WordPress 插件漏洞, CWE-639, ACF 字段修改, 授权绕过, WordPress CVE 2025, Advanced Custom Fields, REST API 安全 目录 概述 漏洞详情 技术分析 攻击向量 概念验证 修复指南 检测 CVSS 指标 参考 致谢 安全联系 概述 ACF to REST API...

hotpot

Hotpot 🍲 命令行版的 Authy / Google Authenticator。 Hotpot 是一个简单安全的命令行工具，用于管理基于 TOTP 的双因素认证码。它安全地将你的 2FA 密钥存储在系统钥匙环中，并在需要时生成基于时间的一次性密码。 采用 Rust 构建，兼具安全性、性能和可靠性。 特性 安全存储 ：使用系统钥匙环（Keychain/libsecret/Credential Manager） TOTP RFC 6238 码生成，支持可自定义算法（SHA1/SHA256/SHA512） 交互式仪表盘 ：实时显示验证码、进度条和模糊搜索 一键复制...

gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing

A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...

Important: Red Hat Security Advisory: gegl04 security update

An update for gegl04 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2024-33676

CVE-2024-33676 Weak authentication and authorization on Enel X JuiceBox Level 2 EV charger enables access to operating system functions and parameters. Description Users on the local EV charger WLAN network can extract PII, change settings, and manipulate the operating system file system. This is...

CVE-2026-76658 Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2026-76658

A vulnerability in the SSH daemon of HPE Networking Fabric Composer allows an unauthenticated remote attacker to gain administrative access to affected hosts. Successful exploitation enables arbitrary command execution as a privileged user on the underlying operating system, leading to complete s...

EUVD-2026-69476

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2026-76658 Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2026-73734 Unauthenticated Open Redirect allows URL Manipulation in HPE Networking Fabric Composer Web Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to redirect users to an arbitrary URL...

EUVD-2026-69461

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to redirect users to an arbitrary URL...

CVE-2026-73734 Unauthenticated Open Redirect allows URL Manipulation in HPE Networking Fabric Composer Web Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to redirect users to an arbitrary URL...

CVE-2026-73734

An unauthenticated open redirect vulnerability exists in the web-based management interface of HPE Networking Fabric Composer , allowing a remote attacker to redirect users to an arbitrary URL. The vulnerability requires user interaction but no prior authentication, carrying a CVSS 3.1 score of 5...

EUVD-2026-69458

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...