Campaign Monitor for WordPress - Information Disclosure

Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...

CVE-2026-105030-poc

Kener 隠しモニター情報漏洩 PoC このリポジトリには、Kener の公開モニターエンドポイントにおける情報漏洩 CWE-200 問題をテストするための、小規模な Python プルーフオブコンセプトが含まれています。 影響を受ける Kener のバージョンは 4.0.0 から 4.1.5 で、4.1.6 で修正されています。 https://www.rapid7.com/db/vulnerabilities/cve-2026-105030/...

WordPress Download Monitor plugin <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by whale120 in WordPress Plugin Download Monitor versions = 5.2.10...

CVE-2023-28354

CVE-2023-28354 脆弱性の説明 Opsview Monitor Agent 6.8 に、認証されていないリモート攻撃者が任意のコマンドを実行できる脆弱性が確認されました。認証されていない攻撃者は、Windows 上でデフォルトの Opsview Agent Monitor スクリプトを呼び出す際にコマンドラインエスケープシーケンスを指定することでこの脆弱性を悪用し、任意のシステムコマンドを実行できます。 説明 Windows 上の Opsview Agent サービスは、デフォルトで Local System として実行されます。このデフォルト構成には複数の NRPE...

[SECURITY] Fedora 45 Update: mate-system-monitor-1.28.1-9.fc45

mate-system-monitor allows to graphically view and manipulate the running processes on your system. It also provides an overview of available resources such as CPU and memory...

EUVD-2026-91857

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as...

CVE-2026-105030

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as...

CVE-2026-105030 Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via Dashboard API

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as...

CVE-2026-105030 Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via Dashboard API

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as...

CVE-2026-105030

Kener versions 4.0.0 before 4.1.6 are vulnerable to an information disclosure vulnerability. The root cause is a lack of visibility filters in dashboard API handlers, allowing unauthenticated attackers to retrieve hidden or inactive monitor data. By supplying a known or guessed monitor tag to end...

CVE-2025-64155-hunter

CVE-2025-64155 スキャナ Phoenix Monitor サービスにおけるコマンドインジェクションの脆弱性（CVE-2025-64155）を検出するための Python スキャナです。 説明 CVE-2025-64155 は、Phoenix Monitor サービスのコマンドインジェクションの脆弱性であり、handleStorageRequest コマンド（コマンド ID: 1075724911）の clusterurl パラメータを通じてリモートコード実行を可能にします。 この脆弱性は、clusterurl...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

CVE-2026-100182

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

EUVD-2026-91245

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-100182 Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-100182

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.2.10 . The root cause is insufficient input sanitization and output escaping involving Cross-Origin postMessage to the Admin Editor. An unauthenticated attacker can t...

CVE-2026-100182 Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

Monitor

プロジェクト概要 ポストエクスプロイテーション段階で権限を維持するために使用します。 プロジェクトの使用方法 Step1 ：このプロジェクトをダウンロードし、VSを使用してMonitor.cppをコンパイルします。もちろん、コンパイル済みのものを使用しても構いません。Monitor.cppのコードは以下の通りです： include "Windows.h" int main MONITORINFO2 monitorInfo; TCHAR env12 = TEXT"Windows x64"; TCHAR name12 = TEXT"Monitor"; TCHAR dll12 =...

Hijacker

Hijacker Hijacker는 침투 테스트 도구 Aircrack-ng, Airodump-ng, MDK3 및 Reaver를 위한 그래픽 사용자 인터페이스입니다. 콘솔에 명령을 입력하거나 MAC 주소를 복사&붙여넣기 하지 않고도 이러한 도구를 사용할 수 있는 간단하고 쉬운 UI를 제공합니다. 이 애플리케이션은 모니터 모드 를 지원하는 내부 무선 어댑터가 있는 ARM 안드로이드 장치가 필요합니다. 일부 안드로이드 장치는 지원하지만 기본적으로 지원하는 장치는 없습니다. 즉, 커스텀 펌웨어가 필요합니다. BCM4339...

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

just wait and see ZoneMinderのイベントエクスポート機能（web/includes/downloadfunctions.php）におけるOSコマンドインジェクション脆弱性の概念実証です。 モニター名は、escapeshellarg の代わりに手動のシングルクォートラップを使用してシェルコマンドに直接挿入されます。モニターを作成できる攻撃者は、任意のユーザーがイベントエクスポートをトリガーした際に、www-data（またはプロセスを実行しているユーザー）として実行される任意のシェルコマンドを注入できます。 根本原因 2023年10月4日のコミット 44c5c3c ...