ThreatMapper

ThreatMapper - Runtime Threat Management and Attack Path Enumeration for Cloud Native !NOTE This project is maintained by https://threatmapper.org...

wordlists

Wordlists Real-world infosec wordlists, updated regularly Current Wordlists Technologies These wordlists are based on the source code of the CMSes/servers/frameworks listed here. The current wordlists include: Wordpress Joomla Drupal Magento Ghost Tomcat There are 2 versions of each wordlist: Bas...

Breacher

Breacher A script to find admin login pages and EAR vulnerabilites. Features Multi-threading on demand Big path list 482 paths Supports php, asp and html extensions Checks for potential EAR vulnerabilites Checks for robots.txt Support for custom patns Usages Check all paths with php extension...

dirstalk

Dirstalk Dirstalk 是一个多线程应用程序，旨在对Web服务器上的路径进行暴力破解。 该工具包含的功能与 dirbuster 和 dirb 所提供的类似。 下面是它的实际使用演示： 目录 如何使用 扫描 实用资源 字典生成器 下载 开发 许可证 ↑ 如何使用 该应用程序自带文档，运行 dirstalk -h 将返回所有可用命令及其简短描述，您可以通过执行 distalk -h 获取每个命令的帮助信息。 例如 dirstalk result.diff -h 扫描 要执行扫描，您至少需要提供一个字典和一个URL： root@kitploit: dirstalk scan...

rbuster

Rbuster 另一个目录爆破工具 常用命令行选项 -a - 指定发送请求时使用的用户代理字符串 -c - 指定可能需要的任何 cookie（模拟认证）。header。 -f - 强制处理存在通配符结果的域名。 -l - 显示响应的长度。 -r - 跟随重定向。 -s - 逗号分隔的状态码列表，视为"正向"结果（默认：200,204,301,302,307）。 -u - 完整 URL（包含协议），或基础域名。 -v - 详细输出（显示所有结果）。 -w - 用于暴力破解的字典文件路径。 -b - 通过 Bearer token 进行 HTTP 授权。 -P - HTTP...

CVE-2024-45440

Enumeration tool for CVE-2024-45440 by DividesByZer0 & c0d3Ninja CVE-2024-45440 - Drupal 11.x-dev Full Path Disclosure PoC options: -h, --help show this help message and exit -u URL, --url URL Single URL to scan. -f FILE, --file FILE File containing URLs to scan one per line. -t THREADS, --thread...

CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-73244

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

CVE-2026-12624

Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...

CVE-2026-12624

Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...

CVE-2026-56671

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...

CVE-2026-56671 ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...

CVE-2026-65713 Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

EUVD-2026-47898

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-53422

A flaw was found in Erlang OTP's Secure Shell SSH component, specifically within the SSH File Transfer Protocol SFTP daemon's sshsftpd module. An authenticated SFTP user can exploit an observable response discrepancy in the REALPATH handler to enumerate the existence of files and directories...

EUVD-2026-41410

Observable Response Discrepancy vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory. The SSHFXPREALPATH handler in sshsftpd calls relatefilename/3 with Canonicalize=false, unlik...

Security update for nodejs22

This update for nodejs22 fixes the following issues: Update to version 22.22.2. CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request bsc1260494. CVE-2026-21716: incomplete fix for CVE-2024-36137...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through improper validation of user-supplied paths in the prefixed function. An attacker can read or write arbitrary files, create directories, and enumerate files outside the intended root directory by sending...

EUVD-2026-17178

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...