Binary Exploits

Exploit Database's Binary Exploits Binary exploits are located in the /bin-sploits/ directory. This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploitdb Binary...

FEP3370-advanced-ethical-hacking

DynoRoot CVE-2018-1111 Final project for the course Advanced Ethical Hacking at KTH, Stockholm This project demonstrates a known vulnerability of Fedora and RedHat machines related to an unsafe client-side implementation of the Dynamic Host Configuration Protocol DHCP. A rogue DHCP server can cra...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

bluewall

BLUEWALL Bluewall 是一个为进攻型和防御型网络专业人士设计的防火墙框架。 该框架允许网络安全专业人员快速搭建其环境，同时保持在授权范围内。 致谢 灵感来源于 Andrew Benson 的 hostfw iptable 生成脚本。 功能特点 Bluewall 配置防火墙 配置主机名 配置网络接口 支持的操作系统 Redhat/CentOS 可生成 Windows 配置，但不执行。 命令行 bluewall -c config/example.ini 参阅示例配置 工具 枚举 - 识别网络中的在线主机（即将推出） 术语 目标主机 - 出站通信 信任主机 - 双向通信 禁止通...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

CVE-2021-3754

CVE-2021-3754 该仓库记录了由本人于2021年8月21日发现并报告的CVE-2021-3754漏洞详情及利用方法。 指标 CWE-20: 输入验证不恰当 CVSS: 5.3（中危） 描述 在Apache Keycloak和Redhat SSO中发现一个缺陷：攻击者能够以与任何现有用户邮箱相同的用户名进行注册。 这是由于用户名在邮箱之前被评估所致。 Keycloak允许将邮箱用作用户名，且未检查该邮箱是否已存在对应账户。 影响 上述行为会导致用户忘记密码时无法正常收到密码恢复邮件，从而暂时锁定用户账户。 缓解措施（Redhat建议）...

Ruby On Rails - Local File Inclusion

Ruby On Rails is vulnerable to local file inclusion caused by secondary decoding in Sprockets 3.7.1 and lower versions. An attacker can use %252e%252e/ to access the root directory and read or execute any file on the target server. id: CVE-2018-3760 info: name: Ruby On Rails - Local File Inclusio...

Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)

Keycloak 12.0.1 and below allows an attacker to force the server to request an unverified URL using the OIDC parameter requesturi. This allows an attacker to execute a server-side request forgery SSRF attack. id: CVE-2020-10770 info: name: Keycloak = 12.0.1 - requesturi Blind Server-Side Request...

Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure

Red Hat JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 is susceptible to sensitive information disclosure. A remote attacker can obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true...

CVE-2016-3113

CVE-2016-3113 PoC 这是一个利用 oVirt 网络界面（RedHat）中反射型 XSS 漏洞的概念验证。在该 PoC 中，将通过受害者的浏览器会话启动 oVirt IaaS 环境中的一台虚拟机。由于时间紧迫，JS 代码保持简单。 更多信息请访问： https://www.itskritis.de/uploads/jk17/StudentsFreigabeversion/DURMAZPraesentation.pdf（德语幻灯片） https://access.redhat.com/security/cve/cve-2016-3113...

Jboss Application Server - Remote Code Execution

Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2 is susceptible to a remote code execution vulnerability because the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization, thus allowing a...

bash-fix-exploit

bash-fix-exploit 一个用于检查CVE-2014-6271漏洞是否仍然有效的小角色 使用风险自负... 在这里了解该漏洞：https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 要求 假设你正在使用bash作为shell 角色变量 updatebash - 默认为 "no"。如果设置为 "yes"，则会在基于RedHat的系统上更新bash 依赖 无 示例剧本 - hosts: all sudo:...

patch-openssl-CVE-2014-0291_CVE-2015-0204

patch-openssl-CVE-2015-0291CVE-2015-0204 使用 Ansible 修补 OpenSSL 使用方法： pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2015-0291CVE-2015-0204 你的 inventory 文件只需包含你的服务器列表： 192.168.0.10 webserver1.example.com webserver2.example.com db1.example.com 支持 在 RedHat 系列操作系统上升级...

CVE-2026-19267

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...

CVE-2026-19179

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a boolean expression...

CVE-2026-18184

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external entity XXE injection flaw...

CVE-2026-18505

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to open redirect in the PMP HostHeaderFilter HostHeaderFilter.java:151. An unauthenticated attacker can craft a request with a manipulated Host header to redirect authenticated operators to attacker-controlled sites, enablin...

CVE-2026-18872

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to stored cross-site scripting CWE-79 in the FTM UI NetworkAcknowledgement React component NetworkAcknowledgement.jsx:42. A malicious actor can inject script into stored network acknowledgement data that executes in...