dorkish

Dorkish During reconaissance phase or when doing OSINT , we often use google dorking and shodan and thus the idea of Dorkish. Dorkish is a Chrome extension tool that facilitates custom dork creation for Google and Shodan using the builder and it offers prebuilt dorks for efficient reconnaissance...

CVE-2026-39752

Contributor Arbitrary File Deletion in Jobs for WordPress = 2.8.2 versions...

EUVD-2026-93261

Contributor Arbitrary File Deletion in Jobs for WordPress = 2.8.2 versions...

CVE-2026-39752

The Jobs for WordPress plugin (versions

CVE-2026-39752 WordPress Jobs for WordPress plugin <= 2.8.2 - Arbitrary File Deletion vulnerability

Contributor Arbitrary File Deletion in Jobs for WordPress = 2.8.2 versions...

Mailcow-CVE-2022-31245

Mailcow CVE-2022-31245 CVE-2022-31245: RCE y escalada de privilegios de Domain Admin para Mailcow. Incluyendo POC. Reportado y corregido: 2022-05 Versión parcheada: https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d CVE: https://vulners.com/cve/CVE-2022-31245 CVE-2022-31245:...

Persistnux

Persistnux 一个全面的Linux持久化检测工具，用于数字取证和事件响应（DFIR）调查。 概述 Persistnux 是一个基于 Bash 的工具，旨在识别攻击者用于维护对受感染系统访问权限的已知 Linux 持久化机制。它对系统执行全面检查，并生成 CSV 和 JSONL 格式的详细报告，便于进一步分析。 特性 全面检测 ：覆盖所有主要的 Linux 持久化机制 实时分析 ：直接在运行中的系统上运行，依赖最小 详细输出 ：生成 CSV 和 JSONL 报告，包含文件哈希、元数据和置信度评分 支持 Root 和非 Root ：可在有或没有 root 权限的情况下运行（非 roo...

CVE-2023-6019

CVE-2023-6019 - Anyscale Ray 仪表盘未授权远程代码执行 CVE-2023-6019 的 PoC 利用程序 — 通过未经认证的 Ray 仪表盘 Jobs API 实现远程代码执行。 由 oguiii 制作 描述 Anyscale Ray 是一个用于分布式 ML/AI 工作负载的开源框架。版本 早于 2.6.4 通过 Ray 仪表盘（默认端口 8265）暴露了一个 Jobs 提交 API，没有任何身份验证 ，允许未认证的攻击者提交任意作业并在主机上实现远程代码执行 。 CVE: CVE-2023-6019 严重性: 严重 CVSS 9.8 受影响版本: Ray...

MLflow Job API - Authentication Bypass

MLflow latest version contains an authentication bypass caused by unprotected FastAPI job endpoints under /ajax-api/3.0/jobs/ when basic-auth is enabled, letting unauthenticated network clients submit and manage jobs, exploit requires job execution enabled and allowlisted job functions. id:...

vt-py

vt-py Esta es la biblioteca oficial de cliente de Python para VirusTotal. Con esta biblioteca puedes interactuar con la API REST v3 de VirusTotal y automatizar tu flujo de trabajo de forma rápida y eficiente. Cosas que puedes hacer con vt-py Analizar archivos y URL Obtener información sobre...

CVE-2020-15399

Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' Inyección SQL autenticada Date: 2020-06-17 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Change Log Update :...

CVE-2021-32157

..| XSS a RCE CRON|.. Descripción : Explotando un ataque de Cross-Site Scripting Reflejado XSS para obtener una Ejecución Remota de Comandos RCE a través de la función de Trabajos Cron Programados de Webmin Versión probada : Webmin 1.973 última versión de GitHub 07/03/2021 Tipo de ataque: Remoto...

CVE-2021-32156

..| CSRF 到 RCE CRON |.. 描述： 利用跨站请求伪造（CSRF）攻击，通过 Webmin 的计划 Cron 任务功能来实现远程命令执行（RCE）。 测试版本： Webmin 1.973（GitHub 的最新版本 07/03/2021） 攻击类型： 远程 影响： 远程命令执行 漏洞利用代码 POC： 产品厂商： https://www.webmin.com 附加信息： “Webmin 是一种基于 Web 的系统管理工具，适用于类 Unix 服务器和服务，全球安装量超过...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

CVE-2026-7028-SQLI

CodeAstro-Online-Job-Portal-SQLi-Delete-All Detalles Proveedor: CodeAstro Producto: Proyecto de Portal de Empleo en Línea en PHP MySQL Versión: 1.0 Tipo de vulnerabilidad: Inyección SQL CWE: CWE-89 Endpoint afectado: /admin/jobs-admins/delete-jobs.php Parámetro: id GET Impacto: Permite la...

CVE-2025-62593-PoC

CVE-2025-62593 — Ray Ejecución Remota de Código sin autenticación Prueba de concepto para CVE-2025-62593 , una vulnerabilidad de Ejecución Remota de Código sin autenticación en el motor de computación distribuida de IA Ray, explotada mediante ataques de rebinding de DNS basados en navegador. Fue...

CVE-2026-100568

OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secret...

CVE-2026-100568

OpenClaw versions prior to 2026.8.1 are vulnerable to unauthorized access to operator command cron jobs. The root cause is a failure to properly restrict access, which allows model-visible agent callers to read and execute ownerless command jobs. This flaw enables attackers to inspect stored envi...

CVE-2026-100568 OpenClaw before 2026.8.1 Unauthorized Command Job Access

OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secret...

CVE-2026-100568 OpenClaw before 2026.8.1 Unauthorized Command Job Access

OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secret...