attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

SessionView

SessionView A lightweight C console application for enumerating and displaying all user sessions on Windows Server, including session GUIDs. Features Complete Session Enumeration : Lists all active sessions on the Windows server Detailed Session Information : Displays Session ID, Station Name,...

LolDriverScan

LolDriverScan LolDriverScan is a golang tool that allows users to discover vulnerable drivers on their system. This tool fetches the loldrivers.io list from their APIs and scans the system for any vulnerable drivers This project is implemented in Go and does not require elevated privileges to run...

AddUser-SAMR

AddUser-SAMR Create local administrators using the SAMR API, operating at a lower level than net.exe, PowerShell's New-LocalUser or NetUserAdd API. It requires Administrator privileges and if the user exists, it gets added to the group but the password is not updated. There are 4 implementations ...

heimdall_webserver

ATTENTION, this project is on a beta version, there's a lot of bugs and problem, if you want to help the project use this on a lab not in yout real environment. NO, there's not https implemented yet, it will come on the next upgrade Heimdall It's a tool to manage vulnerables packages in your nix...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2024-6387

Comprobador de Vulnerabilidad CVE-2024-6387 de OpenSSH Este script en Python verifica si los servidores están ejecutando una versión vulnerable de OpenSSH susceptible a la vulnerabilidad CVE-2024-6387. Escanea las direcciones IP o rangos de red especificados en busca del banner de OpenSSH y lo...

CVE-2024-26229

CVE-2024-26229 Windows CSC服务特权提升漏洞。 当程序向缓冲区写入的数据超出其处理能力时，就会发生基于堆的缓冲区溢出，从而导致多余的数据溢出到相邻的内存区域。这种溢出会损坏内存，并可能使攻击者能够执行任意代码或未经授权访问系统。本质上，攻击者可以编写触发溢出的恶意代码或输入，从而控制受影响的系统、执行 任意命令、安装恶意软件或访问敏感数据。 微软已发出警告成功利用此漏洞的攻击者可以获得 SYSTEM 权限，这是 Windows 系统上的最高访问级别。这增加了与 CVE-2024-26229 相关的风险，使其成为恶意行为者的主要目标。 compiled by clx...

ios.CVE-2026-84616-84607

Investigación de CVE en AppleAVE2 — iOS 27.0 !IMPORTANT Este repositorio cuenta con asistencia de investigación por agentes de IA !NOTE Investigación Abierta Las contribuciones son bienvenidas CVE-2026-84607 condición de carrera en AVEVideoEncoder → privilegios de kernel: la corrección, localizad...

CVE-2021-39115

CVE-2021-39115 La inyección de plantillas en las plantillas de correo electrónico conduce a la ejecución de código en Jira Service Management Server I Construcción He explicado cómo desplegar y depurar aquí, pueden consultarlo. II Análisis En la Descripción de este CVE ya se indica claramente que...

acceleratortroll

AcceleratorTroll™ Abusando de CVE-2023-28206 para hacer algo útil. Hoja de ruta Ahora mismo, todavía estamos tratando de entender cómo funciona la vulnerabilidad y cómo explotarla para algo que no sean pánicos. Demostrar que la vulnerabilidad se puede utilizar para obtener privilegios del kernel...

CVE-2024-21388

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我们要求安全归还所有被恐怖组织哈马斯劫持为人质的公民。我们将不懈努力，直到所有人质获释并安全回家。您可以帮助他们回家。https://stories.bringthemhomenow.net/ Microsoft Edge 漏洞利用 CVE-2024-21388 此 Python 脚本利用 Microsoft Edge 中的一个漏洞 CVE-2024-21388，可通过私有 API 以提升的权限静默安装浏览器扩展。 描述 Guardio Labs 发现 Microsoft Edge 中存在一个漏洞，编号为...

macOS-enterprise-privileges

Privileges 透明、免费且安全的 macOS 管理员权限管理。 Privileges 是一款免费的 macOS 应用程序，专为现代企业环境设计。它允许用户在需要时获得临时管理员权限，而无需授予永久管理员权限。该应用程序的设计以简洁、安全性和透明性为核心。用户可以在应用程序的设置中设定一个时间范围，用于执行特定任务，例如安装或卸载应用程序。 使用标准用户账户而非管理员账户，可以为你的 Mac 增加一层额外的安全防护，这被视为一项安全最佳实践。我们相信，所有用户（包括开发者）都能从使用 Privileges 中受益。 当前版本的 Privileges 支持以下 macOS 版本：...

CVE-2020-2038

CVE-2020-2038 Exploit para aprovechar la vulnerabilidad CVE-2020-2038. Según Palo Alto Networks: Una vulnerabilidad de inyección de comandos del sistema operativo en la interfaz de administración de PAN-OS que permite a administradores autenticados ejecutar comandos arbitrarios del sistema...

CVE-2026-79802

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...

CVE-2026-79800

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-102161

An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...

EUVD-2026-93958

An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...

CVE-2026-102161

An unauthenticated attacker positioned on an adjacent private network —or an attacker routed through a reverse proxy/load balancer that forwards client headers—can forge their source IP address . This vulnerability allows the attacker to gain administrative session privileges on the CV-CUE backen...