516 matches found
cve-2015-3306
Image docker cve-2015-3306 hackarada/cve-2015-3306 Destiné à un usage personnel docker build -t hackarada/cve-2015-3306 docker run --rm -it -p 21:21 -p 80:80 hackarada/cve-2015-3306...
CVE-1999-0678
CVE-1999-0678: Проект обнаружения и устранения Автор: Pham Huu Minh Дата: Декабрь 2025 Обзор проекта Этот проект демонстрирует полный жизненный цикл оценки уязвимости, нацеленный на устаревшую уязвимость Directory Traversal CVE-1999-0678 на веб-сервере Apache. Цель заключалась в моделировании...
CVE-2025-31161
CVE-2025-31161 Écrit un exploit en Go pour CVE-2025-31161 affectant crushFTP. Utilisation ./exploit -target http://localhost:8085 -user crushadmin -action create-admin -new-admin-user username -new-admin-pass pass...
CVE-2017-12635_36
Lab7-CVE-2017-12635-12636 I. ANALYSE DU SYSTÈME Identification de la surface d'attaque En commençant par ce qui est exécuté dans l'environnement. Je liste tous les conteneurs actifs : docker ps La victime expose un seul port :5984 ⇒ Je curl directement dessus pour sonder plus d'informations : cur...
CVE-2019-20933
CVE-2019-20933 InfluxDB avant 1.7.6 présente une vulnérabilité de contournement de l'authentification dans la fonction authenticate de services/httpd/handler.go, car un jeton JWT peut avoir un SharedSecret également appelé secret partagé vide. voir https://nvd.nist.gov/vuln/detail/CVE-2019-20933...
CVE-2026-85487
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...
CVE-2026-85487
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...
EUVD-2026-94790
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...
CVE-2026-85487
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0 . An unauthenticated attacker located on the local network can send manipulated API requests to the service endpoint to bypass path restrictions. This flaw could lead to arbitrary file read, ...
PT-2026-107856
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...
sccm_sql_backdoor
sccmsqlbackdoor Инструмент proof-of-concept, который внедряет контролируемый бэкдор в хранимую процедуру точки управления Management Point, обеспечивая непрямое выполнение SQL через легитимный HTTP-сервис MP. Установка Вы можете установить инструмент, клонировав репозиторий и установив зависимост...
CVE-2025-32375
Настройка уязвимой версии. Запустите уязвимый контейнер: docker compose up Создайте слушатель например, ncat: ncat -klnv 1337 Запустите эксплойт: python3 exploit.py Если всё прошло успешно, вы должны получить HTTP-запрос в окне ncat с содержимым команды ОС по умолчанию id. Благодарности Уязвимост...
Unauthenticated path traversal vulnerability exists in the Brocade ASCG (CVE-2026-85487)
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...
CVE-2026-46711
Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside each sm-ws- Fly Machine exposes endpoints /health, /file/, /archive/ without any authentication or origin check. Any ho...
EUVD-2026-90085
Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside each sm-ws- Fly Machine exposes endpoints /health, /file/, /archive/ without any authentication or origin check. Any ho...
PT-2026-103462
Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside each sm-ws- Fly Machine exposes endpoints /health, /file/, /archive/ without any authentication or origin check. Any ho...
CVE-2026-46711: Missing Authentication for Critical Function
Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside each sm-ws- Fly Machine exposes endpoints /health, /file/ , /archive/ without any authentication or origin check. Any...
EUVD-2026-85750
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch...
CVE-2026-82370
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch...
CVE-2026-82370: Improper Neutralization of Special Elements used in a Command
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch...