cyberange

大家好，我就是那个B站里面的用Kali学渗透。本仓库是网络安全渗透测试学习与训练靶场，包含Web漏洞靶场、渗透工具脚本、攻防手册等。内含：邻里圈靶场16+隐藏漏洞，含SQL注入/XSS/命令注入/文件上传/路径遍历等、零依赖渗透脚本、全工具链渗透脚本、PHP/CGI木马、反向Shell、密码破解工具、蜜罐防御系统、Metasploit精简版、Hacker OS一键构建脚本，以及DVWA攻防手册、Kali工具手册、recon-ng手册等学习文档。适合网络安全入门学习和CTF备赛参考。...

MINI-HCQR-5752-V68J

Bulletin has no description...

MINI-92X5-X256-9QPV

Bulletin has no description...

MINI-JVC5-QR6W-C5RC

Bulletin has no description...

EUVD-2026-36650

The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users had no way to validate the origin's host. In v0.25.0, a new "--allowed-hosts" flag was introduced...

CVE-2026-11624

The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users had no way to validate the origin's host. In v0.25.0, a new "--allowed-hosts" flag was introduced...

Exploit for SQL Injection in Progress Moveit_Cloud

CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Proj...

On Microsoft’s Lousy Cloud Security

ProPublica has a scoop: In late 2024, the federal government's cybersecurity evaluators rendered a troubling verdict on one of Microsoft's biggest cloud computing offerings. The tech giant's "lack of proper detailed security documentation" left reviewers with a "lack of confidence in assessing th...

EUVD-2026-4355

Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through = 11.0.0...

EUVD-2025-204277

WODESYS WD-R608U router also known as WDR122B V2.0 and WDR28 is vulnerable to Broken Access Control in initial configuration wizard.cgi endpoint. Malicious attacker can change admin panel password without authorization. The vulnerability can also be exploited after the initial configuration has...

EUVD-2015-8123

Malware in sbrugna...

EUVD-2005-3449

Malware in sbrugna...

EUVD-2017-8323

Malware in sbrugna...

CVE-2025-8495

creationtimestamp| type| source ---|---|--- 2025-08-03 04:08:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvhsma4shh26...

CVE-2025-50090

Oracle E-Business Suite - Oracle Applications Framework Personalization vulnerability (CVE-2025-50090) affects 12.2.3–12.2.14. A low-privileged, network-access attacker can exploit via HTTP with user interaction to cause unauthorized data modification, insertion, deletion, or read access. Root ca...

CVE-2025-50065

...

CVE-2025-38089

creationtimestamp| type| source ---|---|--- 2025-06-30 07:56:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19908 2025-06-30 11:13:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lst2io2txr2r 2025-07-02 08:43:25+00:00| published-proof-of-concept|...

CVE-2025-46258

creationtimestamp| type| source ---|---|--- 2025-06-05 18:54:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquylr3voa2r...

CVE-2025-47599

creationtimestamp| type| source ---|---|--- 2025-05-23 14:56:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptvaxgiyq2j...

CVE-2022-27139

An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file. NOTE: Vendor states that as outlined in Ghost's security documentation, upload of SVGs is only possible by trusted authenticated users. The uploadin...