417521 matches found
CVE-2026-84390
A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via...
CVE-2026-84390
Fortinet FortiMonitorOnSight versions 7.2.0 through 7.2.2 and 7.2.4 through 7.2.7 are affected by an inclusion of sensitive information in source code that may allow an attacker to bypass access controls. The vulnerability is rated CVSS 9.8 (CRITICAL) with a network attack vector, low complexity,...
CVE-2026-84390
A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via...
EUVD-2026-76098
A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via...
mssharepoint-scanner
MS SharePoint Scanner A single-file, dependency-free defensive tool for Microsoft SharePoint that combines service discovery single or bulk with CVE assessment for two critical on-premises vulnerabilities: CVE-2026-55040 Critical 9.1 — JWT token authentication bypass CVE-2026-63520 High 8.1 —...
RLSA-2026:66392 Moderate: apr-util security update
The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...
apr-util security update
An update is available for apr-util. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The mission of the Apache Portable Runtime APR is to provide a free library...
apr-util security update
An update is available for apr-util. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The mission of the Apache Portable Runtime APR is to provide a free library ...
RLSA-2026:66341 Moderate: apr-util security update
The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...
HardeningKitty
HardeningKitty Esta es la versión estable de HardeningKitty del Windows Hardening Project de Michael Schneider. La versión estable de HardeningKitty está firmada con el certificado de firma de código de scip AG. Dado que esta es la versión estable, no aceptamos pull requests en este repositorio;...
Blue-Team-Notes
Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...
Atlas
Atlas Atlas is a cross-platform Windows/Linux network execution and security assessment toolkit built on top of TrustedSec's Titanis protocol library. It is inspired by the workflow of NetExec/CrackMapExec: target lists, credential sets, modular enumeration, and compact HH:mm:ss + host - message...
CVE-2026-76922
A flaw was found in Wireshark. A local attacker could exploit a crash in the Bluetooth BR/EDR FHS protocol dissector, requiring user interaction. This vulnerability could lead to a denial of service, making the application unavailable to users. Mitigation To mitigate this issue, users should avoi...
EntraPassTheCert
EntraPassTheCert EntraPassTheCert 是一款后渗透工具，允许攻击者请求 Entra ID 用户的 P2P 证书，并使用该证书向远程已加入 Entra 的机器进行身份验证。 root@kitploit: $ python3 entraptc.py -h usage: entraptc.py -h --debug requestp2pcert,smb,rdp,winrm,rpc ... post-exploitation tool for requesting p2p cert and authenticate with it positional...
CVE-Project
CVE-Project CISA KEV vulnerability PoC collection — 393 CVEs...
Your Critical Vulnerabilities Might Not Be Your Biggest Risk
Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process for determining which of those vulnerabilities actually create a path to compromise. A critical vulnerability may look alarming on a scanner report, but if ...
CVE-2025-6218-WinRAR-RCE-POC
CVE-2025-6218: WinRAR 路径遍历远程代码执行漏洞 ⚠️ 严重漏洞 - 已确认活跃利用 CVE-2025-6218 是 WinRAR 中的一个严重路径遍历漏洞，可导致任意代码执行。当前已被 APT 组织 如 GOFFEE、Bitter APT-C-08 和 Gamaredon 利用。 📋 目录 概述 技术描述 利用机制 受影响版本 攻击场景 威胁行为体 概念验证 检测与入侵指标 缓解措施 时间线 仓库结构 参考 🎯 概述 CVE-2025-6218 是 WinRAR for Windows 中的一个严重 的路径遍历 漏洞，攻击者可借此执行任意代码。 主要影响 为何危险？...
CVE-2020-25078
CVE-2020-25078 使用说明 instructions 攻击url放同一目录下 ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128 http://xxx.xxx.xxx.xxx:80...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to path traversal (CVE-2025-14753)
Summary IBM Cloud Pak for Data is vulnerable to a path traversal attack. A remote attacker could send a specially crafted URL containing "dot dot" sequences /../ to traverse directories and view arbitrary files on the system, potentially exposing sensitive information. Vulnerability Details...
batchql
BatchQL BatchQL is a GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. This script is not complex, and we welcome improvements. When exploring the problem space of GraphQL batching attacks, we found that there were a few blog posts on the internet,...