457 matches found
cnspec
cnspec 开源、云原生安全与策略项目 cnspec 评估您整个基础设施的安全性与合规性。它能够在公有云和私有云环境、Kubernetes 集群、容器、容器镜像仓库、服务器、终端、SaaS 产品、基础设施即代码、API 等中，发现漏洞和错误配置。 作为一款强大的策略即代码引擎，cnspec 构建于 Mondoo 的安全数据编织（security data fabric）之上。它预置了开箱即用的默认安全策略。既快速又易于使用！ 快速开始bash bash -c "$curl -sSL https://install.mondoo.com/sh" cnspec scan local 安装...
nginxpwner
Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker git clone https://github.com/stark0de/nginxpwner cd nginxpwn...
dazzleUP
dazzleUP Windows オペレーティングシステムにおける誤設定や更新プログラムの欠落に起因する権限昇格の脆弱性を検出するツールです。dazzleUP は以下の脆弱性を検出します。 エクスプロイトチェック dazzleUP の最初の機能は、不足しているパッチを見つける際に WMI ではなく Windows Update Agent API を使用することです。dazzleUP は以下の脆弱性をチェックします。 DCOM/NTLM リフレクション Rotten/Juicy Potato の脆弱性 CVE-2019-0836 CVE-2019-0841 CVE-2019-1064...
tlsx v1.4.0
Features • Installation • Usage • Running tlsx • Join Discord A fast and configurable TLS grabber focused on TLS based data collection and analysis. Features Fast And fully configurable TLS Connection Multiple Modes for TLS Connection Multiple TLS probes Auto TLS Fallback for older TLS version Pr...
EUVD-2026-53123
The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection vulnerabilities. This service listens on a specific port, runs with root privileges, and is protected by weak credentials. The database supports the COPY FROM PROGRAM syntax, allowing...
Exploitation-Basics
Exploitation Basics Quick reference for TryHackMe, Hack The...
CVE-2026-14971 This PowerVM Novalink update is being released to address
IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions...
CVE-2024-23577
HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol. When an application doesn’t adequately validate or sanitize this header, it can lead to several security risks, including Host header...
CVE-2024-23577
CVE-2024-23577 : The HCL Aftermarket EPC product is vulnerable due to lack of HOST header validation, allowing arbitrary hosts via HTTP. This can enable Host header poisoning and potential server misconfigurations. The available documents do not specify affected versions, exact vulnerable compone...
CVE-2024-23577
HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol. When an application doesn’t adequately validate or sanitize this header, it can lead to several security risks, including Host header...
CVE-2024-23577
HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol. When an application doesn’t adequately validate or sanitize this header, it can lead to several security risks, including Host header...
PT-2026-60762
HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol. When an application doesn’t adequately validate or sanitize this header, it can lead to several security risks, including Host header...
Alibaba Cloud Linux 3 : 0152: samba (ALINUX3-SA-2026:0152)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0152 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-3012: A flaw was found in Sambas...
The-Full-Attack-Chain
⚔️ The Full Attack Chain — Capstone Red Team Engagement Int...
binary-exploitation-labs-Application-security-ctf-writeups
binary-exploitation-labs-Application-security-ctf-writeups...
WebADM Security Auditor and Content Exposure Scanner
This Python script is a defensive security auditing tool designed to analyze a target web application for potential information exposure and security misconfigurations, specifically focusing on environments resembling WebADM. This was tested on version 2.4.17-1...
Kubernetes Security Scanning: A DevSecOps Guide
A clean container image is not proof of a secure Kubernetes workload. New CVEs, unsafe configurations, and excessive permissions can turn an approved deployment into an active exposure. Contact Hive Pro to review your Kubernetes container security priorities. Kubernetes security scanning is the...
What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant
Introduction Containerization using Docker has become firmly established in modern development standards, significantly increasing the speed and convenience of deploying various services. Developers often use ready-made Docker images, making only minimal changes. The largest repository of contain...
MonitorsFour-Write-UP
MonitorsFour-Write-UP Hack The Box MonitorsFour is an Easy-rat...
Auditing Apple'S DifferentialPrivacy.Framework: Implementation Bugs, Misconfigurations, and Practical Risks
Since 2016, Apple has claimed that device analytics collected to improve user experience are protected by differential privacy DP. Apple's DifferentialPrivacy.framework is deployed across its operating systems and handles sensitive signals such as Safari domains, keyboard events, photo attributes...