phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

CVE-2026-58048-PoC-Exploit

💥 CVE‑2026‑58048 – cPanel Root SQL 执行工具包 ⚠️ 仅限道德用途 – 授权安全测试 本仓库仅为授权安全专业人员、蓝队和渗透测试人员 提供工具。 未经授权访问计算机系统在 CFAA（美国）、Computer Misuse Act（英国）、TCK 243/244（土耳其）以及全球类似法律 下均属违法行为。 📖 漏洞概述 CVE‑2026‑58048 是 cPanel & WHM 11.x 版本中的一个严重 SQL 注入漏洞，允许已认证的 cPanel 用户通过数据库重命名功能以 MySQL root 权限 执行任意 SQL 命令。 工作原理 1...

POC-CVE-2026-58048

CVE-2026-58048 CVSS 4.0: 9.4（严重） | CWE-89: SQL 注入 | NVD 已认证的 cPanel 用户 → 通过数据库重命名，以 MySQL root 身份执行任意 SQL。 cPanel 在以 root 身份执行重命名操作时，不当保留了用户的会话 sqlmode（ANSIQUOTES）——数据库名中的反引号可逃逸出标识符并注入 SQL。 name: db; GRANT ALL ON . TO 'rce'@'%' IDENTIFIED BY 'pwned!'; -- 快速开始（Docker 实验环境） pip install -r...

CVE-2024-1346

CVE-2024-1346 LaborOfficeFree 中弱 MySQL 数据库 root 密码影响版本 19.10。此漏洞允许攻击者使用两个常量计算 LaborOfficeFree 所用 MySQL 数据库的 root 密码。 Exploit Title: LaborOfficeFree 19.10 MySQL Root Password Calculator - CVE-2024-1346 Google Dork: N/A Date: 09/02/2023 Exploit Author: Peter Gabaldon - https://pgj11.com/ Vendor...

CVE-2026-55740 SQL Injection in Nur-Alam39 bus-ticket bus_info.php via busid parameter

Nur-Alam39 bus-ticket no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad contains an unauthenticated SQL injection vulnerability in businfo.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query select from businfo where id= without...

CVE-2026-55740

CVE-2026-55740 affects Nur-Alam39 bus-ticket. The vulnerability is an unauthenticated SQL injection in bus_info.php where the busid parameter from an HTTP POST is concatenated directly into the query: select * from bus_info where id=$busid. This occurs in a numeric context and is not sanitized, e...

Metasploitable2-VAPT

Internal Host VAPT Assessment | Kali Linux + Metasploitable2...

EUVD-2006-0154

Malware in sbrugna...

EUVD-2007-2547

Malware in sbrugna...

EUVD-2009-0620

Malware in sbrugna...

EUVD-2019-5595

Malware in sbrugna...

EUVD-2022-3122

Malicious code in bioql PyPI...

CVE-2025-34210

The CVE concerns Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SAAS deployments). The connected sources confirm that sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin password, etc.) are stored in cleartext files that are ...

CVE-2025-34205

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 VA and SaaS deployments contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php found in several containers...

CVE-2025-34205

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 VA and SaaS deployments contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php found in several containers...

CVE-2025-34205

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 VA and SaaS deployments contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php found in several containers...

CVE-2025-34205

Vusion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.843 and Application prior to 20.0.1923 contain dangerous PHP dead code. The file /var/www/app/resetroot.php lacks authentication, enabling an attacker to reset the MySQL root password and gain full database control; separat...

CVE-2025-34205 Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCE

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 VA and SaaS deployments contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php found in several containers...

CVE-2019-14389

cPanel before 82.0.2 allows local users to discover the MySQL root password SEC-510...

CVE-2009-0617

Cisco Application Networking Manager ANM before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands or change system files...