47988 matches found
vhostawesome
FunWithVhosts 여러 IP 주소에서 가상 호스트를 효율적으로 확인하기 위해 설계된 도구입니다. 설명 FunWithVhosts는 지정된 IP 주소에서 가상 호스트를 식별하는 과정을 자동화합니다. 이 스크립트는 열려 있는 포트, 특히 웹 서버 포트를 확인한 다음, 지정된 도메인에 대해 가능한 서브도메인 목록을 사용하여 콘텐츠를 검색하려고 시도합니다. 스레딩을 사용하여 효율적으로 스캔하며, 상세한 결과를 출력합니다. 기능 스레딩을 사용한 동시 스캔 기본적으로 80, 8080, 443, 8443, 4443 포트가 열려 있는지...
Malicious code in @alphaspace/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d10ba1427af01794dfb0a6b39a05f969547455e9d86d75f18601b1d035c507 preinstall.js runs unconditionally on npm install and POSTs a JSON payload to a hardcoded Pipedream collector at...
MAL-2026-17169 Malicious code in @alphaspace/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d10ba1427af01794dfb0a6b39a05f969547455e9d86d75f18601b1d035c507 preinstall.js runs unconditionally on npm install and POSTs a JSON payload to a hardcoded Pipedream collector at...
at-doom-fortigate
At Doom Fortigate root@kitploit: ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||...
CVE-2020-23342
CVE-2020-23342 注意： このリポジトリをローカル仮想マシンでdockerを使って実行する際は、config.pyの24行目のhostの値を仮想マシンのIPに変更してください。...
Ruby on Rails - Open Redirect via Host Header Injection
Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...
JumpServer > 3.6.4 - Information Disclosure
JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...
TIBCO JasperReports Library - Directory Traversal
The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...
Webmin < 1.920 - Authenticated Remote Code Execution
rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...
scan-cve-2018-8115
root@kitploit: /\ / | | / \ | | | / /\ \ / | | | |/ | \ \ / / | | | | '| | | | | | / \ | | || | | | | / | || | | | | || || | // \, |,|,| |/ ||,|| |||, | | | / | || |/ Docker images verifier cli-tool CVE-2018-8115 コミュニティの安全を守るため、Aqua ではこの脆弱性に対してイメージが安全かどうかをテストするオープンソースツールを作成しました。 このユーティリティは...
CVE-2026-1961-foreman-poc
Foreman WebSocket Proxy Command Injection CVE-2026-1961 — PoC Proof-of-concept for a command injection vulnerability in Foreman's WebSocket proxy lib/wsproxy.rb, disclosed responsibly to Red Hat and patched. Summary Foreman's WebSocket proxy interpolates an unsanitized host value, sourced from a...
CVE-2025-62878
CVE-2025-62878: Local Path Provisioner パストラバーサル 概要 項目| 値 ---|--- CVE ID| CVE-2025-62878 GHSA ID| GHSA-jr3w-9vfr-c746 深刻度| クリティカル CVSS 10.0 CWE| CWE-23 相対パストラバーサル 影響を受けるコンポーネント| rancher/local-path-provisioner 影響を受けるバージョン| v0.0.27 v0.0.32 修正バージョン| v0.0.33+ 脆弱性の説明 StorageClass の pathPattern...
CVE-2020-26259
CVE-2020-26259 CVE-2020-26259：XStream（1.4.14）は、アンマーシャリング時に、実行プロセスに十分な権限がある限り、ローカルホスト上の任意のファイル削除に対して脆弱です。 https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml root@kitploit: com.thoughtworks.xstream xstream 1.4.14 PoC https://x-stream.github.io/CVE-2020-26259.html root@kitploit: 0...
CVE-2019-5736-POC
RunC를 통한 Docker 탈출 CVE-2019-5736에 대한 개념 증명 코드 이 POC는 YuvalAvra의 POC를 기반으로 합니다. 이 POC에 사용된 코드에 대한 어떠한 공로도 주장하지 않습니다. 이 취약점에 대한 자세한 정보와 악용 방법 시연은 워크시트에서 확인할 수 있습니다. 워크시트의 정보는 Twistlock Labs의 블로그 게시물을 기반으로 합니다. 사용법 이 POC는 호스트 시스템의 바이너리를 수정할 수 있으므로 가상 머신에서 수행하는 것이 좋습니다. 이 POC는 호스트 시스템의 runC를 VNC를 사용하...
CVE-2021-28476
CVE-2021-28476: vmswitch.sys의 게스트-호스트 "Microsoft Hyper-V 원격 코드 실행 취약점" 이것은 CVE-2021-28476 "Hyper-V 원격 코드 실행 취약점"에 대한 개념 증명PoC으로, 2021년 5월 Microsoft가 패치한 vmswitch.sys네트워크 가상화 서비스 제공자의 임의 메모리 읽기 취약점입니다. 이 취약점은 @australeo, @ergot86, @peleghd 및 @OphirHarpaz에 의해 발견되었습니다. 게스트 가상 머신이 VMBus를 통해 악의적인 RNDI...
Linux Distros Unpatched Vulnerability : CVE-2026-96748
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an...
Linux Distros Unpatched Vulnerability : CVE-2026-98025
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: cx82310eth: drop URB after 0xffff reboot sentinel to prevent partialdata heap overflow The 0xffff length sentinel detects a router reboot and schedule...
CVE-2026-98154
In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queuerq On -EIO, the RDMA queuerq path reports a host path error and then still cleans up the command and unmaps the SQE DMA. The path error helper completes the request, so that is double...
Linux Distros Unpatched Vulnerability : CVE-2026-97585
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix double-unmap of directory block Fix afseditdirremove to use a cleanup function to unmap the block pointed to by afsdiriter::block if it's left pointing...