Lucene search
+L

121 matches found

Kitploit
Kitploit
added 2026/09/01 4:20 a.m.3 views

skydive

Skydive...

5.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 11:31 p.m.46 views

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 11:31 p.m.6 views

pentest-a2p2v-core

README 自动化攻击路径规划与验证(A2P2V)是一款规划与网络攻击工具,能够根据特定攻击者目标,为用户提供一组排序后的攻击序列。该工具旨在简化流程,使非安全专家也能通过尽可能自动化的基本输入,生成清晰、可操作的威胁情报,并产出易于解读的报告。 该系统利用已知网络拓扑和系统漏洞信息,确定所有能够达成攻击者目标的攻击序列,并为所选序列输出所需步骤(以 Metasploit 命令形式)。 系统输入包括: 初始条件 :对攻击者当前知识与访问权限进行建模 攻击者目标 :指示状态变化(例如改变 ICS 系统的温度)或远程访问特定目标主机 漏洞信息 :Nessus 或 Nmap...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 7:27 a.m.5 views

AgentCyTE

CORE TopoGen Genera topologías de red CORE reproducibles a partir de archivos XML de escenarios mediante una GUI web completa o una interfaz de línea de comandos. Tabla de contenidos Aspectos destacados Capturas de pantalla Inicio rápido Requisitos previos Instalar dependencias Iniciar la interfa...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 3:58 a.m.4 views

network-security-snort

Laboratorio de Implementación de Snort IDS/IPS Un despliegue completo de Snort 3 como Sistema de Detección de Intrusiones monitoreo pasivo y como Sistema de Prevención de Intrusiones bloqueo activo mediante iptables, validado contra cuatro vectores de ataque en una red virtual de tres máquinas...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/08/28 8:18 p.m.9 views

CVE-2026-51620

Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain network topology and interface configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

0.00175EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/28 12:00 a.m.12 views

CVE-2026-51620

CVE-2026-51620 is an incorrect access control vulnerability in the getNetInfoCfg function of the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve network topology and interface configuration...

5.9AI score0.00175EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/17 4:17 p.m.16 views

CVE-2026-63096

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...

6.9CVSS0.00335EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/17 3:30 p.m.18 views

EUVD-2026-45194

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...

6.9CVSS5.5AI score0.00335EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/07 3:14 p.m.25 views

EUVD-2026-19682

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs. An authenticated user can read responses from internal services AWS IMDSv1, cloud metadata, internal APIs by creating a link with a publ...

5CVSS5.9AI score0.00274EPSS
SaveExploits1References1
OSV
OSV
added 2026/04/03 7:10 p.m.12 views

MAL-2026-2465 Malicious code in strapi-plugin-health-check (npm)

strapi-plugin-health-check is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/04/03 7:08 p.m.17 views

MAL-2026-2471 Malicious code in strapi-plugin-nordica (npm)

strapi-plugin-nordica is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network topology...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/04/03 7:05 p.m.8 views

MAL-2026-2480 Malicious code in strapi-plugin-nordica-vhost (npm)

strapi-plugin-nordica-vhost is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/04/03 7:05 p.m.9 views

MAL-2026-2477 Malicious code in strapi-plugin-nordica-stage (npm)

strapi-plugin-nordica-stage is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/04/03 7:05 p.m.10 views

MAL-2026-2472 Malicious code in strapi-plugin-nordica-api (npm)

strapi-plugin-nordica-api is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/04/03 7:04 p.m.9 views

MAL-2026-2478 Malicious code in strapi-plugin-nordica-sync (npm)

strapi-plugin-nordica-sync is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/04/03 7:04 p.m.13 views

MAL-2026-2479 Malicious code in strapi-plugin-nordica-tools (npm)

strapi-plugin-nordica-tools is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network...

6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/03 5:27 p.m.11 views

Malicious code in strapi-plugin-notify (npm)

strapi-plugin-notify is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network topology...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/04/03 4:13 p.m.10 views

MAL-2026-2469 Malicious code in strapi-plugin-logger (npm)

strapi-plugin-logger is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network topology...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/04/03 4:13 p.m.14 views

MAL-2026-2470 Malicious code in strapi-plugin-monitor (npm)

strapi-plugin-monitor is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network topology...

6AI score
SaveExploits0References2
Rows per page
Query Builder