trape

trape 稳定版 v2.0 互联网上的人员追踪器：学习追踪世界，以避免被追踪。 Trape 是一款 OSINT 分析与研究工具，能够实时追踪并执行智能化的 社会工程学 攻击。它创建的初衷是向世人揭示，大型互联网公司如何能在用户毫不知情的情况下，获取其网站或服务的会话状态等 机密信息 ，并通过浏览器控制用户。然而，该工具也在不断演进，旨在帮助 政府 机构、企业和 研究人员 追踪网络犯罪分子。 2018 年初，它曾在 新加坡 BlackHat Arsenal...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

Authenticated Privilege Escalation via Command Injection in Timezone Configuration Processing

: An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values...

Command injection vulnerability exists in the REST API management interface of Brocade Fabric OS (CVE-2026-94581)

: An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

Brocade Fabric OS path traversal with USB management privileges (CVE-2026-94580)

: An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary...

Command Injection vulnerability exists in Brocade Fabric OS REST API management interface

: A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters...

Stack-based Buffer Overflow in REST API device management component of Brocade Fabric OS

: Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads—such as device configuration attributes or port mapping requests—the REST API service fails to properly validate...

Authentication & Authorization Header Spoofing Bypasses Brocade Fabric OS SANnav-Internal REST API Gate

: An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these header...

Heap-Based Buffer Overflow in Port List Parsing within Brocade Fabric OS

: When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can...

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 一键WP临时环境与迁移 = 0.1.0.38 - 缺少对未认证API设置/任意选项更新/管理员用户创建的授权...

VulnerableSpringDataRest

易受攻击的 Spring DataRest 应用 这是一个特意构建的 Spring Data REST 应用程序，用于测试和演示 CVE-2017-8046 漏洞，以及通过 REST API 测试命令注入和远程代码执行所面临的挑战。 它支持 Swagger UI，以便与那些依赖 Swagger 文档进行发现和爬取的工具配合使用，例如 OWASP ZAP（Zed Attack Proxy）的 Swagger 插件。 使用方法 在本地克隆仓库 使用 Maven 构建 运行于 关于该项目在渗透测试练习中如何使用的更多详细信息，请参阅...

CVE-2026-11991-Exploit

CVE-2026-11991 — Publicación No Autorizada de Formularios en FlowForms Omisión de Autorización Autenticada Contributor+ para Publicar Cualquier Formulario Borrador en FlowForms ≤ 1.1.1 Resumen de la Vulnerabilidad Propiedad| Valor ---|--- ID CVE| CVE-2026-11991 Puntuación CVSS| 6.2 — Media Vector...

Doozer

Doozer Doozer es una utilidad extensible y automatizada para el descifrado de hashes que automatiza el análisis, el descifrado y la organización de hashes de contraseñas. Actualmente, Doozer admite hashes nt/lm, ntlmv1 y ntlmv2 de Responder o SAM, pero cuenta con una arquitectura modular que...

freki

Freki 是一个免费开源的恶意软件分析平台。 目标 1. 促进恶意软件分析和逆向工程； 2. 为不同项目提供易用的 REST API； 3. 简化部署（通过 Docker）； 4. 允许社区添加新功能。 当前功能 哈希提取。 VirusTotal API 查询。 PE 文件的静态分析（头部、节区、导入表、功能和字符串）。 使用 Yara 进行模式匹配。 Web 界面和 REST API。 用户管理。 社区评论。 下载样本。 查看我们的在线文档以获取更多详情。 提交问题以建议新功能。欢迎所有贡献。 如何获取源代码 git clone...

CVE-2026-71298

A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the orderBy query parameter of its REST API list endpoints. This flaw, which does not require authentication, allows for read-only blind extraction of data from the database...

CVE-2026-71299

A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write operations, such as creating, modifying, or deleting consumers and resource bundles. This could lead to data integrity...

CVE-2023-23752

CVE-2023-23752 Joomla 未授权访问漏洞 CVE-2023-23752 漏洞描述 Joomla是一款开源的内容管理系统（CMS），使用PHP编写，支持MySQL、MSSQL和PostgreSQL等多种数据库系统。访问限制不当导致未经授权访问服务器REST API接口。 受影响版本：Joomla 4.0.0 - 4.2.7 使用帮助 optional arguments: -h, --help show this help message and exit -u URL, --url URL 指定url地址 -f FILE, --file FILE 指定文件 -p...

BurpSuite_Pro_v1.7.37

Actualización de burpsuiteprov2.0beta.jar Burp Suite 2.0 beta ya está disponible para los usuarios profesionales. Esta es una actualización importante con muchas funciones nuevas, incluyendo: - Un nuevo rastreador, capaz de manejar sesiones automáticamente, detectar cambios en el estado de la...

EUVD-2026-92758

A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write operations, such as creating, modifying, or deleting consumers and resource bundles. This could lead to data integrity...

CVE-2026-71299

A flaw was discovered in Maestro where its REST API write endpoints were registered without proper authentication middleware . This vulnerability allows a remote attacker to perform unauthorized write operations, specifically creating, modifying, or deleting consumers and resource bundles . Such ...