Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232

Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232...

CVE-2026-81829

CVE-2026-81829 is a same-origin SSRF vulnerability in SmallRye JWT 's AwsAlbKeyResolver , used by applications (e.g., Quarkus) to verify JWTs signed by AWS Application Load Balancers. The root cause is that the resolver constructs the key-fetch URL by directly concatenating the attacker-controlle...

bucket-stream

🚨 Bucket Stream 已不再维护。如果您需要红队行动的支持或咨询，请发送邮件至 [email protected] 🚨 Bucket Stream 通过监控证书透明度日志发现有趣的 Amazon S3 存储桶。 该工具仅监听各种证书透明度日志（通过 certstream），并尝试从证书域名的排列中寻找公开的 S3 存储桶。 请负责任地使用。 我创建此工具主要是为了强调公开 S3 存储桶相关的风险，并为常规的字典攻击提供不同的思路。如果您使用 S3 存储桶，以下是一些快速提示： 1. 随机化您的存储桶名称！没有必要使用...

CVE-2026-92960

vm2 (a Node.js sandboxing library) versions before 3.11.6 fail to restrict access to the os and dns builtins when configured with builtin: ['*']. This allows sandboxed code to read the host process identity and network topology . Critically, an attacker can invoke dns.setServers() to hijack the h...

CVE-2026-92940

vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when a NodeVM is configured to allow require('https'). Although the builtin loader wraps host modules in a read-only proxy, method calls such as Agent.prototype.on() are forwarded to the underlyi...

CVE-2026-92940 vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent

vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when a NodeVM is explicitly configured to allow require'https'. The builtin loader wraps host modules in a read-only proxy, but method calls such as Agent.prototype.on are forwarded to the...

Bluetooth-Attacks-CVE-2025-27840

This paper discusses how an attacker can introduce a hidden list of vulnerabilities through module updates, which can lead to compromise of ESP32 devices and gaining unauthorized access to private keys, affecting billions of devices using this microcontroller. One of the key issues is the...

aws-perimeter

aws-perimeter A terminal-based AWS Security Scanner with 100+ security checks across VPC, IAM, S3, CloudTrail, containers ECS/EKS, and AI attack detection. Detects dangerous IAM permissions, exposed secrets, misconfigured S3 buckets, container vulnerabilities, and emerging LLMjacking threats...

Vite-CVE-2025-30208-EXP

CVE-2025-30208 Detection Tool Vulnerability Analysis CVE-2025-30208 is an arbitrary file read vulnerability in the Vite development server. Attackers can read sensitive server files such as /etc/passwd or C:\windows\win.ini by constructing special paths e.g., @fs prefix. This tool supports...

CVE-2025-65900

CVE-2025-65900: Kalmia CMS v0.2.0 - is vulnerable to Incorrect Access Control Vulnerability Overview CVE ID: CVE-2025-65900 Product: DifuseHQ Kalmia CMS Affected Version: 0.2.0 Vulnerability Type: Incorrect Access Control Privileges Required: Low Read-only user account Impact This vulnerability...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. SYSTEM ANALYSIS Identifying the Attack Surface from the Docker Environment Starting with what is running in the environment. We list all active containers: root@kitploit: docker ps Result: Container p1/lab10:latest is running, exposing 2 ports externally: Port mapping|...

CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner

CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 Scanner Copyright © 2026 CYBERDUDEBIVASH ECOSYSTEM – All Rights Reserved Authorized under CYBERDUDEBIVASH AUTHORITY – Ethical detection tool for CVE-2025-20393 unauthenticated RCE in Cisco Secure Email Gateway / SMA. This tool helps identify exposure t...

exploit-CVE-2016-8016-25

McAfee Virus Scan para Linux: múltiples fallos remotos ESTE EXPLOIT Y TODO EL CÓDIGO EN ESTE REPOSITORIO FUERON ELIMINADOS PARA EVITAR CUALQUIER PROBLEMA RELACIONADO CON LA VIOLACIÓN DE CUALQUIER LICENCIA DE MCAFEE McAfee VirusScan Enterprise para Linux es una solución antivirus empresarial de...

CVE-2021-37580

Apache ShenYu Admin has an authentication bypass vulnerability that allows attackers to bypass JSON Web Token JWT security authentication and directly access the system backend. Apache ShenYu is an extensible, high-performance, and reactive API gateway solution used in all microservice scenarios...

CVE-2025-9209

🍔 RestroPress – Online Food Ordering System 3.0.0 - 3.1.9.2 🛡️ CVE-2025-9209.py — Mass Automatic Exploit & Extraction Tool ⚠️ Vulnerability Overview RestroPress – Online Food Ordering System versions 3.0.0 to 3.1.9.2 are affected by an Unauthenticated Information Exposure leading to Authentication...

MongoDeepDive

🌊 MongoDeepDive Context-Aware MongoDB Wire Protocol Exploit CVE-2025-14847 Advanced Heuristics Analyzer for Red Team Operations 💀 Overview MongoDeepDive is a high-performance, asynchronous vulnerability scanner and forensic analyzer designed to detect uninitialized memory leaks in MongoDB servers...

CVE-2026-92917

In Grav (a flat-file CMS) versions 2.0.0-rc.1 through 2.0.21 , the Twig content sandbox fails to restrict dump and serialize filters (print_r, vardump, json_encode, yaml_encode, string). The guard GravExtension::assertSandboxDumpSafe() calls SandboxExtension::isSandboxed() without a Source argume...

apache-vulnerable

Escanea versiones de Apache "ZERO-DAY" Apache Version 2.4.49 and 2.4.50 CVE-2021-41773 and CVE-2021-42013 Cómo usar : ¡Necesitarás nuclei! https://github.com/projectdiscovery/nuclei Comprueba la instalación local de nuclei y verifica la plantilla nuclei -t apache-vulnerable-versions.yaml -vv y...

CVE-2026-27944

CVE-2026-27944 - Nginx UI Unauthenticated Backup Download & Decryption https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red A proof‑of‑concept PoC exploit for CVE‑2026‑27944, a critical vulnerability in Nginx...

ollama

ollama This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2024-12886 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSURE swaps th...