PcapXray

PcapXray 一款网络取证工具——将PCAP文件或实时流量可视化为带有设备识别、协议分类、Tor检测和恶意流量标记的注释网络图。 模块概览 root@kitploit: graph TD UIuserinterface.py\nGUI controller -- PRpcapreader\nFile + Live capture PR -- ENGengines/\nauto · dpkt · scapy · pyshark PR -- MEMmemory.py\nShared state MEM -- CDFcommunicationdetailsfetch\nDNS · whoi...

BurpParamFlagger

BurpParamFlagger 一款 Burp 扩展，添加被动扫描检查，用于标记其名称或值可能表明存在 SSRF 或 LFI 插入点的参数。 注意： 我认为使用此扩展需要 Burp Pro，因为它依赖于扫描器功能，而社区版不包含该功能。 该扩展将检查参数的名称 和值 ，查找任何可能表明其为 SSRF 或 LFI 插入点的常见词汇或模式。 例如，SSRF 检查包括查找类似 'redirect'、'url' 或 'domain' 的参数名称，以及看起来像 URL 的值。 LFI 检查则查找类似 'include'、'attach' 或 'file' 的名称，以及含有文件扩展名的值。...

FiddleZAP

FiddleZAP FiddleZAP 是 EKFiddle 的简化版本，专为 OWASP ZAP 设计。 以 ZAP 作为 Web 代理，您可以根据预定义的正则表达式标记恶意流量。 示例：当正则表达式匹配到受感染网站的 HTML 源代码中的字符串时，发出警告、高亮并打标签 安装 下载并安装 ZAP：https://www.zaproxy.org/download/ 将 FiddleZAP 目录下载或克隆到您的 Documents 文件夹中。 其结构应如下所示： 共有 2 个脚本（独立脚本、被动规则脚本）。前者用于手动对当前加载的会话（网络流量）运行，后者则会在录制流量时自动运行。 独立...

CVE-2025-65113

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - 164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content users, videos, photos, collections on the platform. This can lead to mass flagging attacks,...

CVE-2025-65113

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - 164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content users, videos, photos, collections on the platform. This can lead to mass flagging attacks,...

CVE-2025-65113

ClipBucket v5 contains an authorization bypass in the AJAX flagging system that allows any unauthenticated user to flag content (users, videos, photos, collections). Affected versions are prior to 5.5.2; this issue can enable mass flagging and moderation abuse. The vulnerability has been patched ...

CVE-2025-65113 ClipBucket v5 Unauthenticated Object Flagging Vulnerability

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - 164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content users, videos, photos, collections on the platform. This can lead to mass flagging attacks,...

CVE-2025-65113 ClipBucket v5 Unauthenticated Object Flagging Vulnerability

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - 164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content users, videos, photos, collections on the platform. This can lead to mass flagging attacks,...

EUVD-2025-199885

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - 164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content users, videos, photos, collections on the platform. This can lead to mass flagging attacks,...

CVE-2025-65113 ClipBucket v5 Unauthenticated Object Flagging Vulnerability

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - 164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content users, videos, photos, collections on the platform. This can lead to mass flagging attacks,...

PT-2025-48351

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.2 Description ClipBucket is an open source video sharing platform. A flaw exists in the AJAX flagging system that permits unauthenticated users to flag content, including users, videos, photos, and collections...

EUVD-2021-20029

Malware in sbrugna...

EUVD-2022-38827

Malicious code in bioql PyPI...

PYSEC-2025-119

Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Prior to version 5.31.0, an arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers to copy a...

CVE-2025-48889 Gradio Allows Unauthorized File Copy via Path Manipulation

Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Prior to version 5.31.0, an arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers to copy a...

CVE-2021-33320

The Flags module in Liferay Portal 7.3.1 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 5, does not limit the rate at which content can be flagged as inappropriate, which allows remote authenticated users to spam the site administrator with...

CVE-2025-21866

CVE-2025-21866 : In the Linux kernel, PowerPC text patching infrastructure allocated a virtual area and marked it VM_ALLOC, which is inappropriate since that memory is not vmalloc’d and isn’t initialized until __vmalloc_node_range() is called. This caused KASAN: vmalloc-out-of-bounds when booting...

CVE-2022-36065

GrowthBook is an open-source platform for feature flagging and A/B testing. With some self-hosted configurations in versions prior to 2022-08-29, attackers can register new accounts and upload files to arbitrary directories within the container. If the attacker uploads a Python script to the righ...

CVE-2022-36065 GrowthBook account creation and file upload vulnerability in self-hosted configurations

GrowthBook is an open-source platform for feature flagging and A/B testing. With some self-hosted configurations in versions prior to 2022-08-29, attackers can register new accounts and upload files to arbitrary directories within the container. If the attacker uploads a Python script to the righ...

CVE-2022-36065

GrowthBook (self-hosted) prior to 2022-08-29 is affected by an account creation and arbitrary file-upload vulnerability that can lead to remote code execution if a Python script is uploaded to an arbitrary directory inside the container. Exploitation requires all of: self-hosted deployment (Growt...