CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: CVE-2025-13834 RFCOMM Bluetooth「Heartbleed」エクスプロイテーションフレームワーク 著者: Sastra Adi Wiguna Purple Elite Teaming 日付: 2026年1月20日 バージョン: 1.0（完全なシステム再現） ライセンス: レッドチーム専用 （許可なく配布禁止） 🔴 エグゼクティブサマリー CVE-2025-13834 は、RFCOMM...

NFtables-IPtables-integration-script

🛡️ Q-Feeds Linux 방화벽 블록리스트 통합 리눅스 서버용 자동화된 악성코드 IP 블록리스트 — nftables 및 iptables+ipset 지원 📋 목차 빠른 시작 개요 작동 방식 사전 요구 사항 상세 설치 가이드 설정 사용 및 확인 문제 해결 제거 라이선스 🚀 빠른 시작 1단계: API 토큰 받기 tip.qfeeds.com에서 무료 API 키를 받으세요. 2단계: 스크립트 다운로드bash git clone...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

CVE-2026-65400

CVE-2026-65400 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage このプロジェクトは、以下のような安全で許可された環境でのみ使用してください。 ローカル仮想マシン Docker コンテナ 分離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例: root@kitploit: git clone cd Project use python follow below Create a virtua...

EUVD-2026-69458

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

CVE-2026-73731

A reflected cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to execute arbitrary script code in a victim's browser. The attack requires user interaction (e.g., clicking a crafted link) and r...

CVE-2026-73731 Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

CVE-2026-73731 Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

CVE-2025-49844

CVE-2025-49844 RediShell AI 製のリバースシェル PoC AI によって作られた Redishell PoC の未検証の完成版。 元の PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py 韓国人のピース: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua 進捗状況は？ その後、GDB...

CVE-2026-73703 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

EUVD-2026-69430

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

CVE-2026-73703

CVE-2026-73703 is a stored cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated adjacent attacker can inject malicious script that executes in a victim's browser within the context of the interface, requiring user in...

CVE-2026-73703 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

CVE-2024-48652

CVE-2024-48652 Vulnerabilidad de Cross Site Scripting en camaleon-cms v.2.7.5 permite a un atacante remoto ejecutar código arbitrario a través del campo de nombre del grupo de contenido Pasos para reproducir: 1. Abra la URL: http://127.0.0.1/admin/dashboard 2. Inicie sesión con credenciales de...

CVE-2024-6387-nmap

OpenSSH 漏洞检查器 Nmap 脚本 描述 openssh-vuln-checker.nse 脚本用于检查服务器是否运行存在漏洞的 OpenSSH 版本（CVE-2024-6387）。它会连接到 SSH 端口，获取 SSH 横幅，并将其与已知存在漏洞的版本列表进行比对。 存在漏洞的版本 该脚本会检查以下存在漏洞的 OpenSSH 版本： SSH-2.0-OpenSSH8.5p1 SSH-2.0-OpenSSH8.6p1 SSH-2.0-OpenSSH8.7p1 SSH-2.0-OpenSSH8.8p1 SSH-2.0-OpenSSH8.9p1 SSH-2.0-OpenSSH9.0p...

SR-71

オールインワンの偵察ツール このツールの目的は、バグハンターやペネトレーションテスターが偵察を行うのを支援することです... インストール: python3 が動作する任意のシステムで使用できます pip を使用して SR-71 を簡単にインストールできます: root@kitploit: pip3 install SR-71 使用するには、ターミナルで "SR-71 " と入力してください ソースからインストールする場合: root@kitploit: git clone https://gitlab.com/Edu0x01/SR-71.git cd SR-71 pip3 instal...

SleuthQL

SleuthQL 説明 SleuthQLは、SQLに類似した構文を含むパラメータと値を特定するためのpython3スクリプトです。特定されると、SleuthQLはSQL風の変数が特定された各パラメータにSQLMap識別子（）を挿入します。 対応リクエストタイプ SleuthQLはBurpのプロキシ履歴のエクスポートを必要とします。このエクスポートを取得するには、プロキシ履歴タブに移動し、すべての項目をハイライトして「Save...

CVE-2022-35513

blink1-pass-decrypt ⭐ blink1control2 설치버전 =2.2.7의 API 서버에 있는 /blink/input에서 발견되는 암호문을 복호화하도록 설계된 PoC 및 간단한 스크립트입니다. 익스플로잇 - CVE-2022-35513 ❗ blink1control2 앱은 취약한 비밀번호 암호화와 안전하지 않은 저장 방식을 사용하며, 이는 API 서버의 /blink1/input URL에 접근하여 확인할 수 있습니다. Skype 로그인 및 이메일의 비밀번호 암호문이 나열되어 있으며 복호화할 수 있습니다. 사전 요구 사...

bro-shellshock

Bro 用 ShellShock 検出器 このスクリプトは、通称「ShellShock」と呼ばれる Bash の脆弱性（CVE-2014-6271）の悪用に成功した動作を検出します。攻撃を受けたホストの、実際の侵害や脆弱性を示す可能性のある挙動を監視している点で、既存のほとんどの検出方法よりも包括的です。 ホストが HTTP 経由で攻撃を受けているのが確認された場合、Bro はそのホストがドロッパーペイロードをダウンロードするか、ICMP ping...