Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS Wrapper to maximize iSH iOS app capabilities without jailbreak. What It Does HTTP API + embedded dashboard on http://127.0.0.1:8088 WebSocket real-time streaming on ws://127.0.0.1:8089 Auto-discovery of SynChan tools Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia,...

OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection

OpenTSDB contains a command injection caused by insufficient validation of parameters passed to the legacy HTTP query API, letting attackers inject crafted OS commands and execute malicious code, exploit requires sending crafted parameters. id: CVE-2023-25826 info: name: OpenTSDB = 2.4.1 -...

CypherDog

CypherDog4.3 PoSh BloodHound Dog Whisperer también conocido como Cmdlets de PowerShell para interactuar con los datos de BloodHound a través de la API HTTP de Neo4j Compatible con BloodHound 4.3+ y neo4j 4.4+...

burp-cc-bridge

CC-Bridge 一个 Burp Suite（Montoya API）扩展，通过 localhost HTTP API 暴露 Burp 最实用的原语，让代理式编码终端（Claude Code、OpenAI Codex 等）可以通过 curl 驱动 Burp。 支持 Burp Community（社区版）。 下载 获取最新版本的发布 JAR——无需克隆或构建： →cc-bridge-0.1.0.jar 381 KB · sha25610e21b82a602e43df62ffa2758ef3f51a24af8e1a04affa82ef12d02bde9192c...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

CVE-2014-3120

实验 10 - CVE-2014-3120 I. 系统分析 从 Docker 环境识别攻击面 从环境中正在运行的内容开始。我们列出所有活动容器： root@kitploit: docker ps 结果： 容器 p1/lab10:latest 正在运行，对外暴露 2 个端口 ： 端口映射| 协议 ---|--- 0.0.0.0:9200 → 9200/tcp| HTTP（需验证） 0.0.0.0:9300 → 9300/tcp| 未知 初步观察： 端口 9200 和 9300 通常被认为是 Elasticsearch...

CVE-2019-20933

LAB 5-CVE-2019-20933 I. 系统分析 识别攻击面 从环境中正在运行的内容开始。我列出所有活动的容器： root@kitploit: docker ps 受害者暴露了一个端口：8086。 目前，我没有关于目标的详细信息。从 docker ps 输出中，系统仅对外暴露了一个值得注意的服务，端口为 8086，映射到容器内部的服务。这是需要分析的主要攻击面。 我们不立即通过浏览器访问它，而是使用 Nmap 对服务进行指纹识别，确定 8086 端口上运行的服务： nmap -sV -sC -p 8086 192.168.3.137 扫描结果显示，8086 端口是 InfluxD...

EUVD-2026-70264

Windows ML CLI: CORS misconfig enables localhost RCE...

CVE-2026-85619 AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP API

AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization checks, allowing attackers to access documents and database rows across workspaces. Attackers can supply a victim's object ID with their own workspace ID to bypass access controls and read...

CVE-2026-85619 AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP API

AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization checks, allowing attackers to access documents and database rows across workspaces. Attackers can supply a victim's object ID with their own workspace ID to bypass access controls and read...

CVE-2026-85619

AppFlowy-Cloud 0.9.64 contains an authorization bypass in its collaboration object access control (libs/access-control/src/casbin/collab.rs). The service fails to verify that requested collab objects belong to the caller's workspace, allowing an authenticated attacker to supply a victim's object ...

EUVD-2026-70284

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file guiagents/s1/utils/ocrserver.py of the component OCR HTTP API. Executing a manipulation of the argument imgbytes can lead to resource consumption. The attack may ...

CVE-2026-84886

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file guiagents/s1/utils/ocrserver.py of the component OCR HTTP API. Executing a manipulation of the argument imgbytes can lead to resource consumption. The attack may ...

CVE-2026-84886 simular-ai Agent-S OCR HTTP API ocr_server.py ImageData resource consumption

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file guiagents/s1/utils/ocrserver.py of the component OCR HTTP API. Executing a manipulation of the argument imgbytes can lead to resource consumption. The attack may ...

CVE-2026-84886

A resource consumption vulnerability affects the OCR HTTP API component of simular-ai Agent-S versions up to 0.3.2. The flaw resides in the ImageData function within the file gui_agents/s1/utils/ocr_server.py, where manipulation of the img_bytes argument can exhaust system resources. The attack i...

CVE-2026-84452

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-84702

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...