55 matches found
Breacher
Breacher Un script para encontrar páginas de inicio de sesión de administrador y vulnerabilidades EAR. Características Multihilo a demanda Lista grande de rutas 482 rutas Soporta extensiones php, asp y html Verifica posibles vulnerabilidades EAR Verifica robots.txt Soporte para rutas personalizad...
wordlists
Wordlists Real-world infosec wordlists, updated regularly Current Wordlists Technologies These wordlists are based on the source code of the CMSes/servers/frameworks listed here. The current wordlists include: Wordpress Joomla Drupal Magento Ghost Tomcat There are 2 versions of each wordlist: Bas...
ThreatMapper
ThreatMapper - Gestión de amenazas en tiempo de ejecución y enumeración de rutas de ataque para Cloud Native !NOTE Este proyecto es mantenido por https://threatmapper.org Deepfence ThreatMapper busca amenazas en tus plataformas de producción y las clasifica según su riesgo de explotación. Descubr...
rbuster
Rbuster otro rastreador de directorios Opciones comunes de línea de comandos -a - especificar una cadena de agente de usuario para enviar en la solicitud -c - usar esto para especificar cualquier cookie que pueda necesitar simulando autenticación. encabezado. -f - forzar el procesamiento de un...
dirstalk
Dirstalk Dirstalk एक मल्टी-थ्रेडेड एप्लिकेशन है जो वेब सर्वरों पर पथों को ब्रूट फोर्स करने के लिए डिज़ाइन किया गया है। यह टूल dirbuster और dirb द्वारा प्रदान की गई कार्यक्षमताओं के समान कार्यक्षमताएं रखता है। यहां आप इसे क्रियाशील देख सकते हैं: विषय सूची इसका उपयोग कैसे करें स्कैन उपयोगी संसाधन...
CVE-2024-45440
Enumeration tool for CVE-2024-45440 by DividesByZer0 & c0d3Ninja CVE-2024-45440 - Drupal 11.x-dev Full Path Disclosure PoC options: -h, --help show this help message and exit -u URL, --url URL Single URL to scan. -f FILE, --file FILE File containing URLs to scan one per line. -t THREADS, --thread...
EUVD-2026-86251
LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated call...
CVE-2026-47680
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
CVE-2026-47680 Source controller: Improper path handling allows traversal
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
CVE-2026-47680: Relative Path Traversal
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
PT-2026-82672
Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system directory the application code is running by sending a GET request to the endpoint...
CVE-2026-73244
kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...
CVE-2026-12624
Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...
CVE-2026-12624
Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...
EUVD-2026-55677
Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...
CVE-2026-56671 ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...
CVE-2026-56671
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...
CVE-2026-56671: Improper Limitation of a Pathname to a Restricted Directory
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...
CVE-2026-65713 Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension
Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...