Android-Passive-Location-Tracker

Android-Passive-Location-Tracker 无需明确请求任何位置权限的位置追踪应用！利用CVE-2018-15835，该漏洞利用Android操作系统通过广播意图泄露信息。...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

OptionsBleed-POC-Scanner

OptionsBleed-POC-Scanner OptionsBleed CVE-2017-9798 PoC / Escáner Más información próximamente... Descargo de responsabilidad Este software ha sido creado únicamente con fines de investigación académica y para el desarrollo de técnicas defensivas efectivas, y no está destinado a ser utilizado par...

droidbox

简介 DroidBox 是为 Android 应用程序提供动态分析而开发的。分析完成后，生成的结果会描述以下信息： 分析包的哈希值 传入/传出网络数据 文件读写操作 通过 DexClassLoader 启动的服务和加载的类 通过网络、文件和短信泄露的信息 被绕过的权限 使用 Android API 执行的加密操作 广播接收器列表 发送的短信和电话 此外，还会生成两个图表来可视化该包的行为。一个显示操作的时间顺序，另一个是树图，可用于检查分析包之间的相似性。 安装指南 以下是让 DroidBox 运行的指南。该发布版本仅在 Linux 和 Mac OS 上测试过。如果你没有 Android...

CrateDB Database - Arbitrary File Read

CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY...

WPEngine WPGraphQL 0.2.3 - Unauthenticated User Information Disclosure

An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username. id: CVE-2019-9880 info: name: WPEngine WPGraphQL 0.2.3 -...

Cisco RV110W RV130W RV215W Router - Information leakage

A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this...

Huawei Firewall - Local File Inclusion

USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gai...

AccessAlly <3.5.7 - Sensitive Information Leakage

WordPress AccessAlly plugin before 3.5.7 allows sensitive information leakage because the file "resource/frontend/product/product-shortcode.php" which is responsible for the accessallyorderform shortcode dumps serialize$SERVER, which contains all environment variables. The leakage occurs on all...

CyberPower < v2.8.3 - SQL Injection

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to . id: CVE-2024-32736 info: name: CyberPower PDNU" tags: cve,cve2024,cyberpower,sqli,vkev,vuln http: - method: GET path: - "BaseURL/api/v1/confup?mode=&uid=1'%20UNION%20select%201,2,3,4,sqliteversion;--"...

Netgear R6850 - Information Disclosure

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details,...

probequest

ProbeQuest |PyPI Package| |PyPI Downloads| |PyPI Python Versions| |Build Status| |LGTM Grade| |LGTM Alerts| |Documentation Status| Kit de herramientas que permite capturar y mostrar las solicitudes de sonda probe requests Wi‑Fi que pasan cerca de su interfaz inalámbrica. Las solicitudes de sonda...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

monitorr-exploit-toolkit

Kit de exploits para Monitorr RCE mediante carga de archivos no segura reverse shell PHP, webshell, etc. Creación de cuenta de administrador mediante bypass de autorización Fuga de información técnica : versión de Monitorr, versión de PHP, versión y kernel del sistema, configuración de PHP, etc...

smalien

Smalien Smalien es una herramienta de análisis de flujo de información y detección de fugas de información para analistas de aplicaciones Android. Smalien realiza análisis estático de taint en aplicaciones Android en una máquina Linux, así como análisis dinámico de taint, detección de fugas de...

iGPU-Leak

CVE-2019-14615: La Vulnerabilidad iGPU-Leak Wenjian He, Wei Zhang, Sharad Sinha y Sanjeev Das. iGPU Leak: Una Vulnerabilidad de Fuga de Información en GPU Integrada de Intel. En las Actas de la 25.ª Conferencia de Automatización de Diseño de Asia y el Pacífico Sur ASP-DAC'20. Ver PDF Ver...

CVE-2013-3651

CVE-2013-3651 PoC - EC-CUBE 2 Uso Requisitos Python 3 Ejecución $ python poccve20133651.py - p. ej. $ python poccve20133651.py http://127.0.0.1:9000/ Resultado: ¡Vulnerable! PoC Vulnerabilidad | Construcción y renovación de sitios de comercio electrónico: «EC Open Platform EC-CUBE»...

CVE-2024-48307POC

jeecg-boot getDictItemsByTable接口存在SQL注入漏洞 参数： options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 -c CONTENT, --content CONTENT 输入任意值查看漏洞详情 样例： 单个检测： python .\CVE-2024-48307Poc.py -u URL 批量检测： python .\CVE-2024-48307Poc.py -f...

CVE-2024-22534

CVE-2024-22534 Vulnerabilidad de Fuga de Información encontrada en la herramienta de despliegue OneinStack que está filtrando endpoints de información sensible a través del Panel de control. La vulnerabilidad provoca la Fuga de Información Sensible a través de phpinfo.php, xprober.php y ocp.php...