CVE-2026-95828

A vulnerability was determined in Mstfakts College-Management-System. This affects the function sessionstart of the file Front-end/server.php of the component Authentication. Executing a manipulation can lead to session fixiation. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-95820

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php?section=admin1. Performing a manipulation of the argument image results in unrestricted...

CVE-2026-95829 TDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy sql injection

A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the file tduck-api/src/main/java/com/tduck/cloud/api/config/MybatisPlusConfig.java of the component Pagination Inner Interceptor. The...

CVE-2026-95829

The TDuckCloud tduck-platform (up to version 5.3) contains a SQL injection vulnerability within the Pagination Inner Interceptor component. Specifically, the PaginationInnerInterceptor.concatOrderBy function in the file tduck-api/src/main/java/com/tduck/cloud/api/config/MybatisPlusConfig.java fai...

Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708-

Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708- exploit de rce , hecho para funcionar con pocsuite3 https://github.com/knownsec/pocsuite3 instala el pocsuite 3 desde el enlace de arriba. Si tienes algún problema , contacta con el equipo knownsec-404 No abras ningún issu...

Exploit for Authorization Bypass Through User-Controlled Key in Traefik

CVE-2026-88877 — Traefik v3.7.0–v3.7.11 — Authentication b...

mimipenguin

MimiPenguin 2.0 A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz. This was assigned CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Fun fact it's still not fixed after GNOME Keyring 3.27.2 and still works ...

AutoPWN-Suite

AutoPWN Suite AutoPWN Suite 是一个用于自动扫描漏洞和利用系统的项目。 功能特性 CLI 完全自动化扫描与利用 无需用户输入即可检测网络 IP 范围 基于服务版本的漏洞检测 Web 应用漏洞测试（LFI、XSS、SQLI） Web 应用目录爆破 在终端中直接获取漏洞相关信息 自动下载与已发现漏洞相关的利用代码 噪声模式：在网络中制造流量 规避模式：隐秘扫描 根据权限级别自动选择扫描类型 富文本格式，输出清晰易读 通过配置文件指定参数 通过 Webhook 或邮件发送扫描结果 支持 Windows、macOS 和 Linux 可作为模块使用 可作为守护进程定期扫描...

simvyn

simvyn Universal mobile devtool — control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI Table of Contents Quick Start Installation AI Coding Agents Features Module Showcases Collections Guide CLI Reference How It Works Supported Platforms Contributing Securit...

chapcrack

chapcrack 用于解析和解密 MS-CHAPv2 网络握手的工具。 1. 首先，你需要获取网络流量， 用于你要破解的 MS-CHAPv2 握手。 对于 PPTP VPN 连接，只需使用 tcpdump 或 wireshark 等工具即可获取网络数据包捕获。 对于 WPA2 企业版无线握手，只需使用 FreeRADIUS-WPE 等工具即可获取 'challenge' 和 'response' 参数。 2. 接下来，你将使用 chapcrack 从数据包捕获或 FreeRADIUS 拦截中解析并提取 MS-CHAPv2 握手。 1. 对于 PPTP 握手，运行：chapcrack.p...

CVE-2026-94367

OpenEye Apex Network Video Recorder (NVR) firmware version 3.2.9.376 is vulnerable to an OS command injection in the recbackup component. An authenticated administrator can provide crafted backup-area configuration input that is passed to a shell command, enabling the execution of arbitrary comma...

CVE-2026-94367

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr...

CVE-2026-92930

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 (and versions dating back to at least 2.2.3.4 ) contains a vulnerability in the administrator password-reset unlock-code design. Because the system lacks a per-device secret or server-side cryptographic material, an attacker with physic...

CVE-2026-92930

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptographic material. An attacker with physical-console access and access to the privileged password-reset workflow can forge a...

CVE-2026-92929

The OpenEye Apex Network Video Recorder (NVR) firmware, specifically version 3.2.9.376 , is vulnerable to an authentication bypass. The software incorrectly trusts the X-Forwarded-For header provided by clients to determine the request source address. This design flaw, present since at least firm...

CVE-2026-92929

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...

CVE-2026-92928

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account...

CVE-2026-92928

The OpenEye Apex Network Video Recorder (NVR) firmware version 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be modified, disabled, or rotated. This design flaw, present since at least firmware 2.2.3.4 , allows an unauthenticated remote attacke...

PortForwarder

Windows TCP 端口转发器 一款高性能的 Windows TCP 端口转发工具，支持可选的 IP 白名单和详细日志功能。 功能特色 ✅ 将 TCP 流量从本地端口转发至任意远程主机:端口 ✅ 可选 IP 白名单，增强安全性 ✅ 端口 445 / SMB 接管模式（禁用 SMB 并释放端口 445 用于中继） ✅ 支持最多 100 个并发连接 ✅ 双向数据转发，实时统计 ✅ 详细模式，用于调试被拒绝的连接 ✅ 激进 TCP 保活设置，检测死连接 ✅ 低延迟转发（已禁用 Nagle 算法） ✅ 优雅关闭处理（Ctrl+C） ✅ 线程安全的连接管理 系统要求 Windows 操作系统...

Kunyu

Kunyu坤舆 - 更高效的企业资产收集 中文文档 | English 0x00 介绍 工具介绍 Kunyu 坤舆，名字取自 ，测绘实际上是一个地理信息相关的专业学科，针对海里的、陆地的、天上的地理信息进行盘点。同样应用于网络空间，发现未知、脆弱的资产也是如此，更像是一张网络空间地图，用来全面描述和展示网络空间资产、网络空间各要素及要素之间关系，以及网络空间和现实空间的映射关系。所以我认为“坤舆”还是比较贴合这个概念的。 Kunyu坤舆，旨在让企业资产收集更高效，使更多安全相关从业者了解、使用网络空间测绘技术。 应用场景 对于 kunyu 的使用，应用场景可以有很多，例如：...