7564 matches found
probequest
========== ProbeQuest |PyPI Package| |PyPI Downloads| |PyPI Python Versions| |Build Status| |LGTM Grade| |LGTM Alerts| |Documentation Status| Toolkit allowing to sniff and display the Wi-Fi probe requests passing nearby your wireless interface. Probe requests are sent by a station to elicit...
EUVD-2026-79989
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
androguard
Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...
CVE-2013-3651
CVE-2013-3651 PoC - EC-CUBE 2 使用 依赖 Python 3 执行 root@kitploit: $ python poccve20133651.py - e.g. $ python poccve20133651.py http://127.0.0.1:9000/ Result: Vulnerable! PoC 漏洞 | EC网站构建·改版（EC开放平台EC-CUBE） https://www.ec-cube.net/info/weakness/weakness.php?id=49 参考 JVNDB-2013-000062 - JVN iPedia...
smalien
Smalien Smalien是一款面向Android应用分析人员的信息流分析和信息泄露检测工具。Smalien可以在Linux机器上对Android应用进行静态污点分析，同时也能在Android设备上运行时执行动态污点分析、检测因隐式信息流导致的信息泄露，并强制执行隐私策略。 注意 : Smalien的新版本现已发布在 SaitoLab-Nitech/VTDroid ！！ Smalien具有以下功能 对Android应用进行静态分析，收集类、方法、变量等信息。 以图形方式呈现分析结果，例如方法调用图和信息流图。 在Android设备上执行动态污点分析。 强制执行由分析人员指定的隐私策略...
CVE-2024-22534
CVE-2024-22534 在 OneinStack 部署工具中发现的信息泄露漏洞，通过仪表盘泄露敏感信息端点。该漏洞通过 phpinfo.php、xprober.php 和 ocp.php 导致敏感信息泄露。...
iGPU-Leak
CVE-2019-14615: iGPU-Leak 漏洞 Wenjian He, Wei Zhang, Sharad Sinha 和 Sanjeev Das。iGPU Leak: An Information Leakage Vulnerability on Intel Integrated GPU。发表于第25届亚洲及南太平洋设计自动化会议（ASP-DAC'20）。 查看 PDF 查看幻灯片 发生了什么？ 在 Intel 集成 GPU（iGPU）上发现了一个安全问题。 它允许攻击者从 iGPU 泄露私有数据。 除了游戏，如今大量软件利用 GPU 加速，例如网页浏览器和区块链。...
bfac
BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...
Astra
Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...
WPEngine WPGraphQL 0.2.3 - Unauthenticated User Information Disclosure
An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username. id: CVE-2019-9880 info: name: WPEngine WPGraphQL 0.2.3 -...
CrateDB Database - Arbitrary File Read
CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY...
AccessAlly <3.5.7 - Sensitive Information Leakage
WordPress AccessAlly plugin before 3.5.7 allows sensitive information leakage because the file "resource/frontend/product/product-shortcode.php" which is responsible for the accessallyorderform shortcode dumps serialize$SERVER, which contains all environment variables. The leakage occurs on all...
Huawei Firewall - Local File Inclusion
USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gai...
Cisco RV110W RV130W RV215W Router - Information leakage
A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this...
CyberPower < v2.8.3 - SQL Injection
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to . id: CVE-2024-32736 info: name: CyberPower PDNU" tags: cve,cve2024,cyberpower,sqli,vkev,vuln http: - method: GET path: - "BaseURL/api/v1/confup?mode=&uid=1'%20UNION%20select%201,2,3,4,sqliteversion;--"...
Netgear R6850 - Information Disclosure
Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details,...
monitorr-exploit-toolkit
Monitorr 漏洞利用工具包 RCE ：通过 不安全的文件上传 实现（PHP 反弹 Shell、Webshell 等） 管理员账户创建 ：通过 授权绕过 实现 技术信息泄露 ：Monitorr 版本、PHP 版本、系统版本与内核、PHP 配置等 针对 CVE-2020-28872 和 CVE-2020-28871 的漏洞利用。 PacketStorm 用法 root@kitploit: $ ruby exploit.rb -h Monitorr-Exploit Usage: exploit.rb upload --debug exploit.rb create --debug...
CVE-2024-48307POC
jeecg-boot getDictItemsByTable接口存在SQL注入漏洞 参数： root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 -c CONTENT, --content CONTENT 输入任意值查看漏洞详情 样例： root@kitploit: 单个检测： python .\CVE-2024-48307Poc.py -u URL 批量检测： python...
droidbox
简介 DroidBox 是为 Android 应用程序提供动态分析而开发的。分析完成后，生成的结果会描述以下信息： 分析包的哈希值 传入/传出网络数据 文件读写操作 通过 DexClassLoader 启动的服务和加载的类 通过网络、文件和短信泄露的信息 被绕过的权限 使用 Android API 执行的加密操作 广播接收器列表 发送的短信和电话 此外，还会生成两个图表来可视化该包的行为。一个显示操作的时间顺序，另一个是树图，可用于检查分析包之间的相似性。 安装指南 以下是让 DroidBox 运行的指南。该发布版本仅在 Linux 和 Mac OS 上测试过。如果你没有 Android...