BloodHound-Legacy

BloodHound Legacy Edition v4 Has Been Deprecated This repository is for BloodHound Legacy version 4, which was last updated in 2023 and is no longer maintained. It will be archived in the near future. Please Use the New BloodHound Community Edition BloodHound Legacy has been replaced by the free...

Mandela-Legacy

경고! 이 프로젝트는 Mandela Rewritten으로 대체되어 단계적으로 폐지됩니다! 향후 업데이트는 해당 저장소를 이용해 주세요! Mandela CVE-2022-46689로 구동되는 iOS 커스터마이제이션 앱. 탈옥 불필요. 면책 조항 기기 손상에 대해 책임을 지지 않습니다. 이 앱을 사용함으로써 발생하는 모든 위험은 사용자 본인에게 있습니다. 빌드 방법 root@kitploit: git clone https://github.com/BomberFish/Mandela.git cd Mandela make...

CVE-2026-42569

🚨 CVE-2026-42569 - phpVMS 未認証データベースワイプ phpVMS における未認証データベースワイプ / 破壊的インポート 📌 概要 CVE-2026-42569 は phpVMS （バーチャルエアライン管理システム）における重大な脆弱性であり、未認証の攻撃者 がレガシーインポートエンドポイントにアクセスできるようにします。 これらのエンドポイントは制限されるはずでしたが、バージョン ≤ 7.0.5 ではアクセス可能なままであり、攻撃者が大量削除やデータベースワイプ操作を発生させる可能性があります。 🛠 影響を受けるバージョン バージョン| ステータス ---|-...

Import Legacy Media <= 0.1 - Cross-Site Scripting

A cross-site scripting vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. id: CVE-2014-4535 info: name: Import Legacy Media = 0.1 - Cross-Site...

OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization

Open Access Management OpenAM is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to pre-authentication Remote Code Execution RCE via unsafe Java deserialization of the jato.clientSession HTTP parameter. This bypasses the WhitelistObjectInputStream...

NCBI ToolBox - Directory Traversal

NCBI ToolBox 2.0.7 through 2.2.26 legacy versions contain a path traversal vulnerability via viewcgi.cgi which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string. id: CVE-2018-16716 info: name: NCBI ToolBox -...

PraisonAI - Authentication Bypass

PraisonAI 2.5.6 to 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server. id: CVE-2026-44338 info: name: PraisonAI -...

phpVMS < 7.0.6 - Legacy Importer Authorization Bypass

phpVMS 7.0.6 contains an authentication bypass caused by unauthenticated access to a legacy import feature, letting unauthenticated attackers access restricted functionality, exploit requires no special privileges. id: CVE-2026-42569 info: name: phpVMS 7.0.6 - Legacy Importer Authorization Bypass...

OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection

OpenTSDB contains a command injection caused by insufficient validation of parameters passed to the legacy HTTP query API, letting attackers inject crafted OS commands and execute malicious code, exploit requires sending crafted parameters. id: CVE-2023-25826 info: name: OpenTSDB = 2.4.1 -...

PraisonAI AgentOS - Information Disclosure

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

Hitachi Pentaho Business Analytics Server - Bypass Authorization

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented. id: CVE-2022-43939 info: name: Hitachi Pentaho Business Analytics Server - Bypass Authorization author: daffainf...

Zero-Day-Legacy

🎓 Дипломный проект — Университет Аджлуна ANU Факультет ИТ · Кибербезопасность и облачные вычисления · Учебный год 2026 🏆 Самая высокая оценка в университете: 97% 📖 Обзор Zero-Day Legacy — это реалистичная, намеренно уязвимая лабораторная машина Boot-to-Root CTF Capture The Flag , созданная в рамк...

probe-legacy

⚠️⚠️⚠️⚠️: this repository contains the source code of the legacy implementation of ooniprobe. Please, check out instead: 1. https://github.com/ooni/probe, the meta-repository where you should be opening issues and feature requests; 2. https://github.com/ooni/probe-cli, which contains the new...

CVE-2026-9277

CVE-2026-9277 - Эксплойт командной инъекции Shell-Quote Специализированный Proof of Concept PoC скрипт, разработанный для проверки и демонстрации CVE-2026-9277 — структурной уязвимости командной инъекции, обнаруженной в устаревших версиях библиотеки shell-quote = 1.8.3. Сканер выполняет глубокую...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

SwiftyInsta

SwiftyInsta legacy Please notice SwiftyInsta is no longer actively maintained. Refer to 244 for more info. Check out Swiftagram if you're looking for up-to-date alternatives. Instagram offers two kinds of APIs to developers. The Instagram API Platform extremely limited in functionality and close ...

legacyshield-CVE-2017-0144

LegacyShield — EternalBlue 모듈 아직 CVE-2017-0144 MS17-010 / EternalBlue에 노출된 시스템일반적으로 공식 Microsoft 보안 업데이트를 더 이상 받을 수 없는 레거시 또는 지원되지 않는 Windows 설치을 위한 방어적 보완 제어 를 제공하는 Windows 데스크톱 보안 애플리케이션입니다. LegacyShield는 기본 SMBv1 취약점을 패치하지 않습니다. 모니터링, 휴리스틱 탐지, 자동화된 일시적, 되돌릴 수 있는 방화벽 완화, 구조화된 로깅, 전문적인 보고를 통해 공격...

CVE-2024-4040-CrushFTP-File-Read-vulnerability

CVE-2024-4040: Уязвимость чтения файлов CrushFTP Обзор 19 апреля 2024 года новая уязвимость нулевого дня, затрагивающая версии CrushFTP ниже 10.7.1 и 11.1.0, а также устаревшие версии 9.x, была раскрыта в частном списке рассылки поставщиком управляемой передачи файлов CrushFTP. Первоначально...

BloodHound_CustomQueries_Toolset

BloodHoundCustomQueriesToolset Tool to import your customqueries for BloodHound "Legacy" to BloodHound "Community". note: on linux/kali, your customqueries.json file for BloodHound Legacy is located at /.config/bloodhound/customqueries.json Installation 1. Clone this repository. 2. Copy the...

SubSeven

SubSeven Legacy "SubSeven Legacy는 악명 높은 SubSeven 백도어일명 Sub7의 완전한 리메이크로, 90년대 후반의 인기 원격 액세스 트로이 목마입니다. 원래 Sub7 백도어에 대한 자세한 정보는 공식 Wikipedia 페이지에서 확인할 수 있습니다. 원래 Sub7 프로그램과 마찬가지로 SubSeven Legacy는 전적으로 Delphi로 작성되었으며 최신 버전의 Delphi IDE/컴파일러를 지원합니다. 그러나 원래 Sub7과 달리 SubSeven Legacy에는 악성 기능이 포함되어 있지 않습니...