routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

cerbrutus

Cerbrutus أداة تخمين بالقوة العمياء معيارية مكتوبة بلغة بايثون، لرش كلمات المرور بسرعة كبيرة عبر SSH وFTP وقريبًا خدمات شبكة أخرى. قريبًا: SMB, HTTPs POST, HTTPs GET, HTTP BASIC AUTH شكرًا لـ @0dayctf وRondons وEnigma و001 على الاختبار والمساهمة التثبيت: cd /opt git clone...

mass-bruter

Mass Bruter هجوم القوة العمياء الجماعي على بروتوكولات الشبكة معلومات إثبات مفهوم بسيط لتنفيذ هجوم القوة العمياء الجماعي بسرعة على الخدمات الشائعة في نطاق واسع من الشبكة. سيقوم بالتحقق من بيانات الاعتماد الافتراضية على ftp, ssh, mysql, mssql...إلخ. تم إنشاؤه لأغراض اختبار الاختراق المصرح به فقط. ك...

CVE-2026-105746

A flaw was found in Docling. The document processing pipeline fails to honor configurations that disable remote network services when utilizing the KServe V2 optical character recognition OCR model. This failure can result in unintended information disclosure, as page images from processed...

CVE-2026-105743

A flaw was found in docling. A remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability by providing crafted URLs when remote resource fetching is enabled. Incomplete validation allows requests to be resolved again by the network client, enabling techniques such as Domain Name...

CVE-2026-102145

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface. On its own this did not result in code execution...

CVE-2026-102138

An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the server retrieved without sufficient validation of its scheme or destination, causing the server to issue requests to internal network services. Exploitation...

EUVD-2026-90277

An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the server retrieved without sufficient validation of its scheme or destination, causing the server to issue requests to internal network services. Exploitation...

CVE-2026-102138 Kiteworks Core Server-Side Request Forgery (SSRF)

An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the server retrieved without sufficient validation of its scheme or destination, causing the server to issue requests to internal network services. Exploitation...

CVE-2026-102145 Kiteworks Core Server-Side Request Forgery through CRLF Injection

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface. On its own this did not result in code execution...

EUVD-2026-90381

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface. On its own this did not result in code execution...

CVE-2026-102145: Improper Neutralization of CRLF Sequences

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface. On its own this did not result in code execution...

PT-2026-103578

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated administrator can force the server to send requests to and interact with internal network services that should not be accessible through the...

EUVD-2026-84536

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URLs from subscriber credentials.webhookUrl, channel endpoint endpoint.url, event payload.webhookUrl, and event overrides.webhookUrl, then passes the selected endpoint.url through...

CVE-2026-75511 Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URLs from subscriber credentials.webhookUrl, channel endpoint endpoint.url, event payload.webhookUrl, and event overrides.webhookUrl, then passes the selected endpoint.url through...

CVE-2026-75511 Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URLs from subscriber credentials.webhookUrl, channel endpoint endpoint.url, event payload.webhookUrl, and event overrides.webhookUrl, then passes the selected endpoint.url through...

PT-2026-96789

Name of the Vulnerable Software and Affected Versions Novu versions prior to 3.18.0 Description Novu accepts chat webhook URLs from subscriber credentials.webhookUrl, channel endpoint endpoint.url, event payload.webhookUrl, and event overrides.webhookUrl. These values are processed through...

EUVD-2026-83299

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

Security Bulletin: IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [CVE-2026-17262, CVE-2026-18869]

Summary IBM i is vulnerable to a denial of service and security restriction bypass due to improper validation of commands CVE-2026-17262, CVE-2026-18869 in File Transfer Protocol FTP as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17262 DESCRIPTION: IBM i...

CVE-2026-76701

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to netwo...