aegis

Aegis Aegis 是一个完全开源的 FPGA，从硅片级别开始开源。 开源 FPGA 领域已经取得了巨大进展：诸如 Project IceStorm 和 Apicula 等项目逆向工程了专有比特流格式，OpenFPGA 和 FABulous 从架构描述生成开放 FPGA 逻辑结构，而 Cologne Chip 的 GateMate 则推出了一个带有完全开源工具链的商业 FPGA。这些项目各自解决了拼图的一部分，而 Aegis 是一个全栈、端到端的开源 FPGA：逻辑结构生成、综合、布局布线、比特流打包、仿真和流片全部集中在一个项目中，从零开始为开源设计。从 HDL 到...

nimbostratus-target

Nimbostratus 靶标 此仓库包含一个靶标基础设施，可用于测试 nimbostratus。 此代码部署了一个存在多种漏洞和弱配置设置的 Amazon AWS 基础设施，可使用 nimbostratus 进行利用。 如果你不确定这是什么，最好不要使用这里的任何代码。 安装 sudo apt-get install python-mysqldb git clone [email protected]:andresriancho/nimbostratus-target.git cd nimbostratus-target pip install -r...

CVE-2025-25257

目录 概述 漏洞详情 概念验证 PoC Trolled2 Trolled3 概述 CVE-2025-25257 是 Fortinet FortiWeb Fabric Connector 7.0 至 7.6.x 版本中的一个预认证 SQL 注入漏洞 。 此缺陷允许攻击者向易受攻击的 API 端点注入恶意 SQL 命令，从而可能导致远程代码执行 RCE 。 本仓库包含一个PoC ，以安全可控的方式演示 SQL 注入向量。 它是开源的，供你利用。- 漏洞详情 名称： FortiWeb Fabric Connector SQL 注入 CVE： CVE-2025-25257 受影响版本：...

CVE-2025-25257

CVE-2025-25257 CVE‑2025‑25257 es una vulnerabilidad crítica de inyección SQL sin autenticación que afecta al componente Fabric Connector de Fortinet FortiWeb. Afecta a las versiones de FortiWeb: 7.6.0–7.6.3 7.4.0–7.4.7 7.2.0–7.2.10 ≤ 7.0.10 Detalles Técnicos El problema reside en la función...

fabric

|version| |python| |license| |ci| |coverage| .. |version| image:: https://img.shields.io/pypi/v/fabric :target: https://pypi.org/project/fabric/ :alt: PyPI - Package Version .. |python| image:: https://img.shields.io/pypi/pyversions/fabric :target: https://pypi.org/project/fabric/ :alt: PyPI -...

CnC-Botnet-in-Python

CnC-Botnet-in-Python C&C Botnet written in Python 描述 使用fabric编写的简单僵尸网络。 作者对使用此代码不承担任何责任。 主机 可以从项目主目录中包含的hosts.txt文件加载主机。 此文件的默认格式为： username@host:port password 如果未声明端口号，则使用端口22： username@host password SSH连接是默认的认证方式，因此如果主机知道用户的公钥，则无需指定密码： username@host 用法 要启动应用程序，只需下载仓库 git clone...

Access Control Bypass vulnerability in the RBAC validation engine of Brocade Fabric OS

| Summary: An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permissi...

Authenticated Privilege Escalation via Command Injection in Timezone Configuration Processing

: An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values...

Persistent Denial of Service (DoS) affecting Brocade Fabric OS administrative web management service

: Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering durin...

Stack-Based Buffer Overflow in Setuid Diagnostic Utility via Argument Parsing

: A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary...

Buffer Overflow vulnerability exists in the Brocade Fabric OS WebTools management (CVE-2026-94587)

: A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using...

OS Command Injection via Fabric Synchronization

: An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administrator initiates an account deletion, the system invokes an internal maintenance routine to clean up cryptographic keys...

Local Privilege Escalation and Configuration Injection in Brocade Fabric OS System Logging Daemon

: A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...

Command injection vulnerability exists in the REST API management interface of Brocade Fabric OS (CVE-2026-94581)

: An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

An authorization logic vulnerability in the Brocade Fabric OS AAA interface (CVE-2026-94578)

: Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...

Brocade Fabric OS command injection vulnerability in PAM session cleanup routines (CVE-2026-94579)

: An OS command injection vulnerability exists in the PAM Pluggable Authentication Module session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via an external directory or AAA service...

Privilege Escalation / Access Control Bypass in Brocade Fabric OS account management interface (CVE-2026-94576)

: An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying...

Brocade Fabric OS path traversal with USB management privileges (CVE-2026-94580)

: An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary...

A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1 (CVE-2026-94583)

: A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable an...

A memory buffer overflow vulnerability exists in an internal diagnostic routine of Brocade Fabric OS (CVE-2026-94582)

: A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First FSPF protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directl...