Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection

The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the order and orderby parameters to the ajaxfetchreportlist action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscriber. Further, it does not have any CSRF protecti...

Jellyfin <10.7.0 - Local File Inclusion

Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...

adwind-decryptor

AdWind Decryptor AdWind/jRAT/jBifrost Java RAT によって暗号化されたファイルを復号化するシンプルな復号化ツールです。 使用方法 root@kitploit: usage: java -jar AdWindDecryptor -a,--aeskeyfile AES key file path -i,--input input file path -o,--output decrypted output file path -r,--rsakeyfile serialized RSA KeyRep file path 使用例...

aws-key-disabler

AWS Lambda - IAM 액세스 키 비활성화기 AWS 키 비활성화기는 설정된 시간 이후에 AWS IAM 사용자 액세스 키를 비활성화하는 Lambda 함수로, 오래된 액세스 키와 관련된 위험을 줄이기 위한 것입니다. AWS Lambda 아키텍처 최종 사용자를 위한 SysOps 출력 개발자 툴체인 현재 제한 사항 스캔 결과JSON가 포함된 보고서는 단일 정의된 시스템 관리자 계정으로 전송됩니다. 빌드 구성 파일 /grunt/package.json의 reportto 속성을 참조하세요. 키는 비활성화만 되며, 삭제되거나 교체되지...

CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD

COMJOOMANAGER 2.0 -任意ファイルダウンロード プラグインCOMJOOMANAGERを使用してデータベースを一括収集。CMS: Joomlaから。プロジェクトはPython 2.xで開発。詳細はYouTube動画をご覧ください。 CVE: 2017-18345 リスク: 高セキュリティリスク 0day.Today-ID: 29950 ExploitDB-id: 44252 0day db-id: 16348...

SentinelStream-AI

SentinelStream AI | 次世代SIEM & SOARプラットフォーム プロジェクト概要 SentinelStream AIは、資産の脆弱性とリアルタイムの脅威インテリジェンスのギャップを埋めるために設計された、高速なセキュリティ情報・イベント管理（SIEM）プラットフォームです。「ワークショップ対応」製品として構築されており、セキュリティチームはネットワークノードの登録、重大な脆弱性（CVE-2024-21410など）の割り当て、自動化されたインシデントレスポンス（SOAR）の監視を行うことができます。 主な機能 動的アセット登録：...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

Risk-Analysis-Editor

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

CVE-2026-42945

NGINX CVE-2026-42945 Rift — ローカル防御演習ラボ 2つのDocker化されたNGINXインスタンス: パターンベースの「リスクのある rewrite」スニペットと、修正済みの名前付きキャプチャスニペットを、nginx:1.30.0-alpine / nginx:1.30.1-alpine に固定して使用します。スクリプトは良性のcurlを実行し、nginx -T を出力し、証跡をアーカイブします。設定レビュー研修専用です——/health、/nginxstatus、/legacy/ はラボのエンドポイントであり、ラボVLAN外での露出は制限してください。...

scada-scanner

SCADAスキャナーおよびフィンガープリンター 概要 ネットワーク上の産業用制御システムを識別し、フィンガープリントを取得するための、高性能な非同期SCADA/ICSスキャナーです。脆弱性を検出し、ベンダー/製品を特定して、包括的なリスクレポートを生成します。 警告: 許可されたセキュリティ評価専用です。無許可のスキャンは法律および規制に違反する可能性があります。 機能 中核機能 CIDR範囲または個別ターゲットの高速な非同期スキャン 主要な産業用プロトコルModbus、S7、DNP3、BACnet、EtherNet/IPなどのプロトコル検出...

WordPress Accordions - Unauthenticated Settings Update

Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin = 2.0.2 at WordPress. id: CVE-2022-33198 info: name: WordPress Accordions - Unauthenticated Settings Update author: riteshs4hu severity: critical description: | Unauthenticated WordPress Options Change...

FortiOS - Insecure LDAP Configuration Detection

The FortiGate LDAP configuration was detected to be insecure due to missing ca-cert, secure LDAPS, or server-identity-check, potentially exposing LDAP communications to credential interception or man-in-the-middle attacks under specific network conditions. id: CVE-2019-5591 info: name: FortiOS -...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

Integrate Google Drive <= 1.5.3 - Information Disclosure

File Manager for Google Drive - Integrate Google Drive with WordPress plugin for WordPress = 1.5.3 contains sensitive information exposure caused by improper protection of the getlocalizedata function, letting unauthenticated attackers extract Google OAuth credentials and account email addresses,...

Buffalo WSR-2533DHPL2 - Improper Access Control

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor. id: CVE-2021-20092 info: name: Buffalo WSR-2533DHPL2 - Improper Access Control author: gy741,pdteam,par...

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada Fusion Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybedeletefiles function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the filepath parameter in the...

FREEDOM Administration - Default Login

The Web GUI configuration panel of Hirsch formerly Identiv and Viscount Enterphone MESH through 2024 ships with default credentials username freedom, password viscount. The administrator is not prompted to change these credentials on initial configuration, and changing the credentials requires ma...

LatePoint <= 5.0.11 - SQL Injection

The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

W3 Total Cache < 2.8.2 - Log File Exposure

The plugin is vulnerable to Information Exposure through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF...