domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

domi-owned

Domi-Owned 요약 Domi-Owned는 IBM/Lotus Domino 서버를 침해하는 데 사용되는 도구입니다. Windows 및 Linux에서 실행되는 IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0 및 9.0.1에서 테스트되었습니다. 요구 사항 Domi-Owned는 Python 3를 사용하며, 배포판의 패키지 관리자apt, yum 등를 통해 설치할 수 있습니다. 필요한 Python 모듈을 설치하려면 pip3 install -r requirements.txt를 실행하세요. asyncio aiohttp...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

Lotus Core CMS 1.0.1 - Local File Inclusion

Lotus Core CMS 1.0.1 allows authenticated local file inclusion of .php files via directory traversal in the index.php pageslug parameter. id: CVE-2020-8641 info: name: Lotus Core CMS 1.0.1 - Local File Inclusion author: 0xAkoko severity: high description: Lotus Core CMS 1.0.1 allows authenticated...

notepadpp-supply-chain-iocs

Notepad++ 공급망 공격 — IoC 저장소 CVE-2025-15556 | Lotus Blossom / Raspberry Typhoon | 2025년 6월 12월 개요 이 저장소는 2026년 2월 2일에 공개된 Notepad++ 공급망 공격과 관련된 포괄적이고 통합된 침해 지표IoC 모음 입니다. 2025년 6월부터 12월까지 , 중국 국가 지원 위협 행위자가 Notepad++의 호스팅 인프라를 침해하여 내장 업데이트 메커니즘WinGUp을 납치했습니다. 이를 통해 표적 사용자에게 선택적으로 트로이 목마화된 설치 프로그램을...

CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit

이 저장소에는 README가 없습니다...

CVE-2013-2977

IBM Lotus Notes PNG Integer Overflow - CVE-2013-2977 IBM Lotus Notes는 협업 클라이언트-서버 플랫폼의 클라이언트이며, IBM Lotus Domino가 애플리케이션 서버입니다. 이메일 클라이언트 기능은 가장 중요하고 많이 사용되는 기능 중 하나입니다. IBM Lotus Notes는 이메일에 포함된 PNG 이미지 파일을 올바르게 구문 분석하지 못합니다. 악성 이메일을 열거나 미리보기만 해도 임의 코드 실행이 가능함이 입증되었습니다. Summary Title: IBM Lotus...

Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack

Cybersecurity researchers have discovered a previously undocumented data wiper that has been used in attacks targeting Venezuela at the end of last year and the start of 2026. Dubbed Lotus Wiper , the novel file wiper has been used in a destructive campaign targeting the energy and utilities sect...

CVE-2026-22418

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Great Lotus great-lotus allows PHP Local File Inclusion.This issue affects Great Lotus: from n/a through = 1.3.1...

EUVD-2026-9547

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Great Lotus great-lotus allows PHP Local File Inclusion.This issue affects Great Lotus: from n/a through = 1.3.1...

CVE-2026-22418

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Great Lotus great-lotus allows PHP Local File Inclusion.This issue affects Great Lotus: from n/a through = 1.3.1...

CVE-2026-22418

CVE-2026-22418 affects the Great Lotus WordPress theme (versions up to and including 1.3.1). The issue is Local File Inclusion caused by improper control of the filename in PHP include/require statements. Public details indicate a high-severity impact (CVE CVSS score 8.1) with potential exposure ...

CVE-2026-22418 WordPress Great Lotus theme <= 1.3.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Great Lotus great-lotus allows PHP Local File Inclusion.This issue affects Great Lotus: from n/a through = 1.3.1...

CVE-2026-22418 WordPress Great Lotus theme <= 1.3.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Great Lotus great-lotus allows PHP Local File Inclusion.This issue affects Great Lotus: from n/a through = 1.3.1...

CVE-2026-22418: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Great Lotus great-lotus allows PHP Local File Inclusion.This issue affects Great Lotus: from n/a through = 1.3.1...

PT-2026-23168

Name of the Vulnerable Software and Affected Versions AncoraThemes Great Lotus versions through 1.3.1 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of...

WordPress plugin Great Lotus 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

filecoin-audit-kit

Filecoin Security Devnet Spin up a local Filecoin network for...

WordPress Great Lotus theme <= 1.3.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Great Lotus versions = 1.3.1...

Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking Group

A China-linked threat actor known as Lotus Blossom has been attributed with medium confidence to the recently discovered compromise of the infrastructure hosting Notepad++. The attack enabled the state-sponsored hacking group to deliver a previously undocumented backdoor codenamed Chrysalis to...