prefetch-hash-cracker

Prefetch Hash Cracker Motivation Während der forensischen Analyse eines Windows-Rechners kann es vorkommen, dass Sie den Namen einer gelöschten Prefetch-Datei finden. Auch wenn der Inhalt möglicherweise nicht wiederherstellbar ist, reicht der Dateiname selbst oft aus, um den vollständigen Pfad de...

sinter

Sinter Sinter is a 100% user-mode endpoint security agent for macOS 10.15 and above, written in Swift. Sinter uses the user-mode EndpointSecurity API to subscribe to and receive authorization callbacks from the macOS kernel, for a set of security-relevant event types. The current version of Sinte...

Reg1c1de

Reg1c1de: Windows Registry Privesc Scanner Summary from help output: Reg1c1de is a tool that scans specified registry hives and reports on any keys where the user has write permissions In addition, if any registry values are found that contain file paths with certain file extensions and they are...

CVE-2024-42992

CVE-2024-42992 Python Pip Pandas v2.2.2 è stato scoperto contenere una vulnerabilità di lettura arbitraria di file. Pip Pandas tutte le versioni - =2.2.2 Nella libreria "pandas" esiste una vulnerabilità di lettura arbitraria di file, che consente a un attaccante di leggere qualsiasi file nel...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x Path Traversal Pré-Autenticação Todos os créditos vão para j0v e seu tweet https://twitter.com/j0v0x0/status/1466845212626542607 Isenção de Responsabilidade Isso é apenas para fins educacionais. Não sou responsável por suas ações. Use por sua conta e risco. De boa fé,...

CVE-2021-43799

CVE-2021-43798 Grafana 8.x Pfad-Traversal Pre-Auth Alle Credits gehen an j0v und seinen Tweet https://twitter.com/j0v0x0/status/1466845212626542607 Haftungsausschluss Dies dient ausschließlich zu Bildungszwecken. Ich bin nicht verantwortlich für deine Handlungen. Verwende es auf eigenes Risiko. I...

CVE-2022-39802

3242933 – CVE-2022-39802 Vulnerabilità di path traversal nei file in SAP Manufacturing Execution Informazioni generali Rischio: CRITICO Versioni Affette: root@kitploit: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 URL del fornitore: https://sap.com Bug:...

CVE-2024-23897

CVE-2024-23897 Jenkins 2.441 e anteriores, LTS 2.426.2 e anteriores, não desativa um recurso do analisador de comandos de sua CLI que substitui um caractere '@' seguido por um caminho de arquivo em um argumento pelo conteúdo do arquivo, permitindo que atacantes não autenticados leiam arquivos...

GHSA-Q7M3-RHXG-7VXR n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

CVE-2026-81743 Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...

CVE-2026-81743

Flowintel versions >=3.3.0 allow the LOG_FILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this value, an attacker with high privileges can set LOG_...

wordlists

Wordlists Praxisnahe Infosec-Wortlisten, regelmäßig aktualisiert Aktuelle Wortlisten Technologien Diese Wortlisten basieren auf dem Quellcode der hier aufgeführten CMS/Server/Frameworks. Zu den aktuellen Wortlisten gehören: Wordpress Joomla Drupal Magento Ghost Tomcat Es gibt 2 Versionen jeder...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. id: CVE-2019-25246 info: name: BEWARD...

-CVE-2022-44268

PNG 图像生成器 此 Python 脚本使用 Pillow 库生成一张填充特定颜色的 PNG 图像，并将文件路径作为元数据嵌入其中。 运行脚本 前提条件 Python（从 Python 官方网站 安装） Pillow 库（pip install pillow） 步骤 1. 克隆仓库： root@kitploit: git clone https://github.com/NataliSemi/-CVE-2022-44268.git cd -CVE-2022-44268.git 2. 安装所需包： root@kitploit: pip install pillow pip install...

CVE-2024-23897

CVE-2024-23897 Jenkins CVE-2024-23897: Vulnérabilité de lecture arbitraire de fichiers Ce code vous aidera à comprendre la combinaison de la requête et de la réponse d'attaque. utilisez un outil proxy pour voir le résultat. python3 CVE-2024-23897.py -u $url -p $filepathtoread...

CVE-2026-39813

🛡️ CVE-2026-39813 - Уязвимость обхода пути Fortinet FortiSandbox 📌 Обзор CVE-2026-39813 — это критическая уязвимость обхода пути , затрагивающая Fortinet FortiSandbox. Уязвимость возникает из-за неправильной проверки путей к файлам, предоставленных пользователем, что позволяет злоумышленникам...

CVE-2025-65321

CVE-2025-65321 O bot do Discord Language Sloth é vulnerável a Directory Traversal nas funções gif e png. As funções constroem caminhos de arquivo usando entrada do usuário não sanitizada para o parâmetro 'name', permitindo que atacantes referenciem arquivos fora dos diretórios de recursos...

PT-2026-82804

A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function import session/export session of the file mcp sequential thinking/server.py of the component Import Session/Export Session. Such manipulation of the argument file path leads to path traversal...

CVE-2026-26832

CVE-2026-26832: OS-Befehlsinjizierung in node-tesseract-ocr Zusammenfassung node-tesseract-ocr bis einschließlich Version 2.2.1 ermöglicht eine OS-Befehlsinjizierung in recognize in src/index.js. Das Paket erstellt eine Shell-Befehlszeichenfolge und führt sie mit childprocess.exec aus. Da der...

CVE-2026-26831

CVE-2026-26831: iniezione di comandi del sistema operativo in textract Riepilogo textract fino alla versione 2.5.0 consente l'iniezione di comandi del sistema operativo tramite il percorso del file fornito a molteplici estrattori. Diversi percorsi di codice passano quel percorso del file a...