lblfixer_cve2020_5250

LabelGrup Networks，官方 PrestaShop 合作伙伴 用于 PS 1.7.X 的模块，修复 CVE-2020-5250 漏洞（WIP） 查看： https://vulners.com/cve/CVE-2020-5250 https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mhfc-6rhg-fxp3 访问我们的网站： https://www.labelgrup.com...

redamon

Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...

cobaltstrike4.5_cdf-1

cobaltstrike4.5cdf cobaltstrike4.5版本破解、去除checksum8特征、bypass BeaconEye、修复错误路径泄漏stage、增加totp双因子验证、增加用户名加密显示、修复4.5版本foreign派生错误的bug、客户端配置文件名字修改等 cobalt strike4.5破解 cobaltstrike4.5破解 TOC 免责声明\免责协议 此工具以及文章内容仅限于安全研究，用户承担因使用此工具以及文章内容而导致的所有法律和相关责任！作者不承担任何法律责任!...

CVE-2023-34152

CVE-2023-34152 影响 ImageMagick 6.9.6-4 的 RCE 漏洞。该漏洞允许攻击者在受害者系统上执行命令，从而实现远程命令执行。 这是一个受 fullwaywang 对 CVE-2023-34152 发现启发的 POC。 漏洞披露 使用方式：python3 CVE-2023-34152.py 攻击者IP 攻击者端口 描述 OpenBlob 中存在一个任意代码执行漏洞（shell 命令注入），这实际上是对 CVE-2016-5118 的不完全修复。 CVE-2016-5118 表明，打开任何文件名以 '|' 字符开头的图像文件时，ImageMagick 会...

cve-2021-42013-docker-lab

CVE-2021-42013 简介 人们发现，Apache HTTP Server 2.4.50 中对 CVE-2021-41773 的修复并不充分。攻击者可以利用路径遍历攻击，将 URL 映射到由类似 Alias 的指令所配置目录之外的文件。如果这些目录之外的文件未受到通常默认配置“require all denied”的保护，这些请求就可能成功。如果这些别名路径还启用了 CGI 脚本，则可能导致远程代码执行。此问题仅影响 Apache 2.4.49 和 Apache 2.4.50，不影响更早版本 1。 用于演练/学习 CVE-2021-42013 的 Docker 容器实验室 1...

fixcve2023_39526_2023_39527

Corrección CVE 202339526 GHSA-gf46-prm4-56pc https://github.com/advisories/GHSA-gf46-prm4-56pc CVE 202339527 GHSA-xw2r-f8xv-c8xp https://github.com/advisories/GHSA-xw2r-f8xv-c8xp Prestashop corrige la vulnerabilidad CVE-2023-39526 y CVE-2023-39527...

informer

Informer - Telegram Mass Surveillance Update 10-20-2025 Security : Fixed high-severity vulnerability CVE-2022-1941 in mysql-connector-python Security : Migrated from deprecated oauth2client to google-auth Updated all dependencies to latest secure versions Fixed quickstart.sh script bugs venv...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...

packages_apps_Settings_AOSP10_r33_CVE-2020-0219_CVE-2020-0188_old-one

此存储库没有 README。...

CVE-2014-4377

基于CydiaSubstrate的CVE-2014-4377修复 参见 github.com/feliam/cve-2014-4377 和 http://blog.binamuse.com/2014/09/coregraphics-memory-corruption.html...

appsec-agent

AppSec Agent Agentes de seguridad impulsados por IA para revisión de código, escaneo de PR, modelado de amenazas, generación de correcciones y más. Puedes usar AppSec Agent de tres maneras: Ruta| Ideal para| Empezar ---|---|--- CLI agent-run| Probar agentes desde tu terminal| Guía de inicio...

OpenTAXII

OpenTAXII Implementación del servidor TAXII en Python de EclecticIQ. OpenTAXII es una implementación robusta en Python de los Servicios TAXII que ofrece un amplio conjunto de funciones y una API pitónica y amigable construida sobre una aplicación bien diseñada. Se garantiza que OpenTAXII es...

CVE-2019-16278

Exploits para CVE-2019-16278 y CVE-2019-16279 Nostromo httpd es propenso a 2 vulnerabilidades críticas para versiones &1 Este error se debe a una corrección incompleta para CVE-2011-0751. Podemos omitir una comprobación de /../ lo que nos permite ejecutar /bin/sh con argumentos arbitrarios. Ejemp...

BPFDoor-controller-source

BPFDoor-controller-source 近期BPFDoor控制器变种的源代码 Original: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Fixed: bpfdoorcontroller.c Original to fixed helper: formatfix.py 编译： $ apt install libssl-dev $ gcc -Wno-implicit-function-declaration bpfdoorcontroller.c -lssl -lcrypto -o...

dnsmasq-2.4.1-fix-CVE-2017-14491

dnsmasq-2.4.1-fix-CVE-2017-14491...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

Apache Tapestry - Remote Code Execution

Apache Tapestry contains a critical unauthenticated remote code execution vulnerability. Affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. Note that this vulnerability is a bypass of the fix for CVE-2019-0195. Before that fix it was possible to download arbitrary class files from the...

aiohttp - Directory Traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure

Export WP Page to Static HTML & PDF WordPress plugin = 4.3.4 contains a sensitive information exposure caused by publicly exposed cookies.txt files with authentication cookies, letting unauthenticated attackers access sensitive authentication data, exploit requires site administrator to trigger...

Scoold < 1.64.0 - Authentication Bypass

Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT...