3075947 matches found
CVE-2026-66842
CVE-2026-66842 affects F5 BIG-IP (all modules) and BIG-IQ Centralized Management , allowing any authenticated user to create administrative accounts via an undisclosed request to the Configuration utility (TMUI) . F5 classified the root cause as CWE-918 (Server-Side Request Forgery) . The vulnera...
CVE-2026-63020
CVE-2026-63020 is a CWE-451 (UI Misrepresentation of Critical Information) vulnerability in the BIG-IP Configuration utility web interface. An attacker can trick authenticated users into clicking malicious links, causing a spoofed error message to be reflected in the victim's browser session. Thi...
rapidscan
🟥 RapidScan v1.2 - 多工具 Web 漏洞扫描器 RapidScan 已移植到 Python3，即 v1.2 。Python2.7 代码库可在 v1.1 发布部分获取。如果您尚未升级到 Python 3，请下载并使用它。请注意，v1.1（Python2.7）将不再增强。 演进： 对于渗透测试人员来说，在没有自动化的情况下执行 批量工具扫描 （ 一个接一个地运行安全扫描工具 ）是一件相当麻烦的事。除非你是自动化方面的专家，否则每次参与都要进行批量扫描是一项艰巨的任务。该程序的最终目标是通过自动化解决这个问题；即 运行多个扫描工具来发现漏洞，有效判断误报，集体关联结果 并...
rapidscan
🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...
EUVD-2026-70122
A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to...
CVE-2026-84656
A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to...
CVE-2026-84656
A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to...
CVE-2026-84656
A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to...
APTSimulator
APT模拟器 重要提示：如果您不打算开发一些测试，请不要仅仅通过ZIP下载或克隆仓库。请使用发布版中的包，其中包含打包版本，使用加密归档文件，不包含明文样本和工具。 APT模拟器是一个Windows批处理脚本，它使用一组工具和输出文件使系统看起来像被入侵了一样。与其他对手模拟工具不同，APT模拟器旨在使应用程序尽可能简单。您无需在虚拟机集上运行Web服务器、数据库或任何代理。只需下载准备好的归档文件，解压，然后以管理员身份运行包含的批处理文件。运行APT模拟器只需不到一分钟的时间。 用例 1. 概念验证：端点检测代理/失陷评估工具 2. 测试您的安全监控的检测能力 3...
wazuh
Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...
wazuh
Wazuh Wazuh 是一个免费开源的平台，用于威胁预防、检测和响应。它能够保护跨本地、虚拟化、容器化和云环境的工作负载。 Wazuh 解决方案包括一个部署在受监控系统上的端点安全代理，以及一个管理服务器，后者收集并分析代理收集的数据。此外，Wazuh 已与 Elastic Stack 完全集成，提供搜索引擎和数据可视化工具，使用户能够浏览其安全警报。 Wazuh 功能 以下简要介绍 Wazuh 解决方案的一些常见用例。 入侵检测 Wazuh 代理扫描受监控系统，寻找恶意软件、rootkit 和可疑异常。它们可以检测隐藏文件、隐藏进程或未注册的网络监听器，以及系统调用响应中的不一致性。...
CVE-2026-84645
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...
EUVD-2026-70111
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...
CVE-2026-84645
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...
NLTK: Default ENFORCE=False Disables All pathsec Security Controls
NLTK's pathsec.py security module defaults to ENFORCE=False line 24, which means all 8 security validation functions only emit RuntimeWarning instead of raising exceptions when violations are detected. The pathsec module was introduced as the fix for CVE-2024-39705 arbitrary code execution via...
GHSA-P3M8-78J2-G5P3 NLTK: Default ENFORCE=False Disables All pathsec Security Controls
NLTK's pathsec.py security module defaults to ENFORCE=False line 24, which means all 8 security validation functions only emit RuntimeWarning instead of raising exceptions when violations are detected. The pathsec module was introduced as the fix for CVE-2024-39705 arbitrary code execution via...
PwnKit-CVE-2021-4034
PwnKit-CVE-2021-4034...
MIPS-CVE-2014-9222
Descargo de responsabilidad Los tutoriales son solo con fines informativos y educativos. Creo que el hacking ético, la seguridad de la información y la ciberseguridad deberían ser temas familiares para cualquier persona que use información digital y computadoras. Creo que es imposible defenderse ...
CVE-2026-39808
CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - Inyección de comandos del SO a través del endpoint tracer-behavior Fortinet FortiSandbox es una solución avanzada de protección contra amenazas que crea entornos aislados para analizar archivos sospechosos, URL y tráfico de red en busca de...