cve-2020-0618

CVE-2020-0618 蜜罐 检测并记录针对 CVE-2020-0618（SQL Reporting Services RCE）的利用尝试 像 SSRS 一样提供内容和头部信息，以增加在搜索引擎（例如 Google、Shodan 等）中被索引的机会 基于 MDSec 和 x1sec 的优秀工作 安装 获取代码 确保你有一个可用的 Go 环境。 git clone https://github.com/wortell/cve-2020-0618 生成证书 生成自签名证书： openssl genrsa -out server.key 2048 openssl ecparam -genk...

subparse

subparse Subparse 是一个模块化框架，由 Josh Strochein、Aaron Baker 和 Odin Bernstein 开发。该框架旨在解析和索引恶意软件文件，并以可搜索的 Web 查看器展示解析过程中发现的信息。框架采用模块化设计，包含核心解析引擎、解析模块以及多种富化器，用于向恶意软件索引中添加额外信息。框架的主要输入值是恶意软件文件目录，核心解析引擎或用户指定的解析引擎会先解析这些文件，然后由用户指定的富化引擎添加额外信息，最后将解析出的信息索引到 Elasticsearch 中。收集到的信息可通过 Web...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

RastLeak

RastLeak 利用黑客引擎搜索（Google和Bing）自动泄露信息的工具。 如何安装 git clone https://github.com/n4xh4ck5/RastLeak.git 使用pip安装依赖： pip install -r requirements.txt 安装wget： sudo pip install wget 版本 最新稳定版本为2.2 用法 python rastleak.py -h usage: rastleak.py -h -d DOMAIN -v VERSION -o OPTION -n SEARCH -e EXT -f EXPORT...

mquery

mquery: 针对恶意软件分析人员的超快Yara查询工具 是否曾为搜索恶意软件样本而烦恼？Mquery 是一个对分析人员友好的 Web GUI，可用于检索你的数字仓库。 它能在眨眼间搜索数 TB 的恶意软件： 底层我们使用了 UrsaDB，通过 ngram 加速 yara 查询。 演示 公共实例即将上线，敬请期待…… 快速入门 1. 安装并启动 最简单的方式是使用 docker compose： git clone https://github.com/CERT-Polska/mquery.git cd mquery vim .env 可选 - 修改样本和索引目录位置 docker...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

CVE-2014-1773

CClipStack::PushClipRect：无效的数组索引 首先，在启用了页面堆的情况下，从崩溃时的调用栈开始： ChildEBP RetAddr 0919aac8 6b58459f MSHTML!CWorldTransform::IsAxisAligned 0919ab40 6ba228e9 MSHTML!CDispSurface::CClipStack::PushClipRect+0x1a2 0919aba4 6be25b58 MSHTML!CDispSurface::PushClipRectInternal+0x2f 0919abc0 6bf1118f...

ache

ACHE 聚焦爬虫 ACHE 是一个聚焦网络爬虫。它收集满足特定条件的网页，例如属于某域名的页面或包含用户指定模式的页面。 ACHE 与通用爬虫的区别在于，它使用 页面分类器 来区分给定领域中的相关页面和不相关页面。页面分类器可以简单到一条正则表达式（例如匹配包含特定单词的每个页面），也可以是基于机器学习的分类模型。 ACHE 还能自动学习如何对链接进行优先级排序，以便高效定位相关内容，同时避免抓取不相关内容。 ACHE 支持许多特性，例如： 对固定网站列表进行常规爬取 通过自动链接优先级排序发现并爬取新的相关网站 配置不同类型的页面分类器（机器学习、正则表达式等）...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

sysmon-modular

sysmon-modular | A Sysmon configuration repository for everybody to customise Sysmon Modular is a configuration repository for Microsoft Sysinternals Sysmon. Small XML modules make it easier to select, review and maintain the telemetry that is useful to your organisation. The sysmon-modular Go to...

CVE-2020-27368

CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 目录索引漏洞 描述 TOTOLINK-A702R-V1.0.0-B20161227.1023 登录门户中的目录索引漏洞允许攻击者通过GET参数访问/icons/目录。 附加信息 修复措施：禁用Web服务器的目录列表。 漏洞类型 目录索引 产品供应商 TOTOLINK 受影响产品代码库 TOTOLINK-A702R-V1.0.0-B20161227.1023 - 型号 A702R（固件 V1.0.0） 受影响组件 TOTOLINK-A702R-V1.0.0-B20161227.1023...

CLEANSTART-2026-OX24018 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened

Security vulnerability affects the cri-tools package. archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1771858411)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771858411 advisory. - archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2022_4776)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20224776 advisory. Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution CVE-2022-1529 Mozilla: Prototype pollution in Top-Level Await...

Rocky Linux 9 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_4178)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234178 advisory. OpenJDK: improper handling of slash characters in URI-to-path conversion 8305312 CVE-2023-22049 OpenJDK: array indexing integer overflow issue 8304468...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1771858411)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771858411 advisory. - archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead t...

CVE-2026-47533

A flaw was found in nvidia-driver. A local attacker with administrative privileges can trigger an array indexing error within the kernel-mode driver layer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, access sensitive data, or cause a...

CVE-2026-102822

A flaw was found in russh. This vulnerability allows a remote attacker to cause a Denial of Service DoS by terminating active connection tasks. When a connection is configured to permit sessions without a Message Authentication Code MAC, improper algorithm negotiation allows pairing with block...

CVE-2026-101091 SiYuan before v3.8.4 SQL Injection via Block Query Embed

SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyuan.db. Attackers can craft malicious .sy documents with non-read-only SQL statements that execute automatically during background indexing, rendering, or export operations witho...

CVE-2026-101091 SiYuan before v3.8.4 SQL Injection via Block Query Embed

SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyuan.db. Attackers can craft malicious .sy documents with non-read-only SQL statements that execute automatically during background indexing, rendering, or export operations witho...