74002 matches found
proxy-workbench
Proxy Workbench Encuentra proxies que funcionen para los sitios que usas Recopila direcciones de listas públicas o de tus propios archivos, verifícalas contra tus servicios y usa los resultados en aplicaciones, exportaciones o scripts. Proxy Workbench se ejecuta localmente con una interfaz de...
CVE-2026-75937
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device...
Roxy
Roxy Proxy de interceptación HTTP/HTTPS minimalista basado en terminal. https://github.com/user-attachments/assets/94f9c9ae-5842-4b19-9f5b-84dedb9430e6 Características · Instalación · Soporte HTTPS · Uso · Cómo funciona Descripción general Roxy es un proxy de interceptación ligero para HTTP y HTT...
CVE-2026-75937 OS Command Injection in Digi Accelerated Linux (DAL OS)
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device...
EUVD-2026-91802
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device...
CVE-2026-75937
A critical OS Command Injection vulnerability (CVE-2026-75937) affects Digi Accelerated Linux (DAL OS) . A specially crafted HTTP POST request sent to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the aff...
server
Ulterius: Gestión remota sencilla ¿Interesado en la sublicencia? ¿Quieres usar nuestro código en tu stack o renombrarlo para uso interno? Ponte en contacto con nosotros en [email protected] Ulterius es una herramienta que permite el acceso sin restricciones a un sistema Windows a través de u...
cve-2022-33891
CVE-2022-33891 Apache Spark Shell 命令注入漏洞 一个用于利用 Apache Spark Shell 命令注入漏洞的 Python POC。我看到网上有些其他 POC 看起来很可疑。这个简单且干净。 我并未发现此漏洞/利用方式。我只是想为社区制作一个安全的 POC ^.^ 影响版本 Apache Spark 3.0.3 及更早版本、3.1.1 至 3.1.2 版本、3.2.0 至 3.2.1 版本 漏洞组件 http://localhost:8080/?doAs=命令注入位置 示例...
DAILA
DAILA DAILA Decompiler Artificially Intelligent Language Assistant es una interfaz unificada para sistemas de IA utilizados en descompiladores. Con DAILA, puedes utilizar varios sistemas de IA, como LLM locales y remotos, todo en las mismas interfaces de scripting y GUI en muchos descompiladores...
CVE-2021-46417
CVE-2021-46417 Franklin Fueling Systems Colibri Controller Module - Local File Inclusion Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2021-46417.py -u...
CVE-2026-86325
A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...
CVE-2026-86326
A vulnerability exists in protocol gateways due to an improper verification of cryptographic signatures . The device fails to verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface can provide a sp...
CVE-2026-86325
A stack-based buffer overflow vulnerability exists in the account management interface of protocol gateways . The root cause is insufficient length validation of the account_name parameter during account management requests. An attacker authenticated as a read-only user to the web management inte...
CVE-2026-86325
A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...
CVE-2026-86325
A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...
EUVD-2026-91371
A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...
swsim
swSIM El proyecto necesita clonarse de forma recursiva. Descargar el ZIP no es suficiente. swSIM es una tarjeta SIM totalmente software. Es el primer simulador de tarjeta SIM disponible públicamente hasta donde yo sé que no depende de ningún hardware SIM para funcionar. Alcance Un simulador de...
DCOMUploadExec
DCOM Upload & Execute POC de movimiento lateral DCOM que abusa de la interfaz IMsiServer https://www.deepinstinct.com/blog/forget-psexec-dcom-upload-execute-backdoor La solución contiene 2 proyectos DCOMUploadExec - Un proyecto de C++ que aloja el código de ataque de movimiento lateral...
magnolia-rce
Título del exploit: Magnolia DX Core 6.3.8 - Inyección de comandos Fecha: 05/16/2025 Autor del exploit: tmrswrr Versión: 6.3.8 Página principal del proveedor: https://docs.magnolia-cms.com/home/ Producto: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8...
CVE-2026-83548-checker
SonicWall SMA 1000 — Detector de exposición CVE-2026-83548 / CVE-2026-83549 Un script de detección no intrusivo para los dispositivos de la serie SonicWall Secure Mobile Access SMA 1000 afectados por CVE-2026-83548 SSRF previo a la autenticación en la interfaz Work Place, CVSS 10.0 y CVE-2026-835...