ReconCat

Recon Cat ========================================= Introducción Una pequeña aplicación PHP para obtener instantáneas de URL de archivo de archive.org. usándola puedes obtener una lista completa de URLs de instantáneas de cualquier año o la lista completa de todos los años posibles. Hecha...

CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Nicht authentifiziert Installation Repo klonen root@kitploit: $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Einrichtung Hinweis: Installieren Sie die neueste Version von node root@kitploit: $ npm init $ npm i axios cheerio yargs Verwendung...

dufflebag

Dufflebag Dufflebag è uno strumento che cerca tra gli snapshot pubblici di Elastic Block Storage EBS eventuali segreti accidentalmente lasciati al suo interno. Potresti sorprenderti di quante password e segreti sono sparsi in giro! Lo strumento è organizzato come un'applicazione Elastic Beanstalk...

ir-rescue

ir-rescue ir-rescue é composto por dois scripts irmãos que recolhem uma infinidade de dados forenses de sistemas Windows de 32 e 64 bits ir-rescue-win e de sistemas Unix ir-rescue-nix. Os scripts respeitam a ordem de volatilidade e os artefactos que são alterados com a execução ex. , ficheiros...

CVE-2026-48751

A flaw was found in Incus, a container and virtual machine manager. Instance snapshots do not enforce container restriction settings, allowing a user to execute arbitrary commands on the server through lowlevel hooks. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat produ...

CVE-2026-19197

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

CVE-2026-19197 Broken access control in dashboard snapshots

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

EUVD-2026-66377

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

CVE-2026-19197

CVE-2026-19197 is a broken access control vulnerability in Grafana 's dashboard snapshots feature. An organization administrator on a shared Grafana instance can delete snapshots belonging to other organizations and recover a snapshot's secret delete key using only its public share key , enabling...

Broken access control in dashboard snapshots

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot’s secret delete key using only its public share key broken access control...

CVE-2019-15043

CVE-2019-15043 POC Descrição Escaneamento de prova de conceito para verificar se um servidor Grafana é vulnerável ao CVE-2019-15043. Verifica o número da versão do servidor Grafana e verifica se a API de snapshots permite requisições não autenticadas. CVE-2019-15043 CVE-2019-15043 é uma...

zoneminder-snapshots-rce-poc

POC per RCE non autenticata in Zoneminder tramite Snapshots CVE-2023-26035 Questo è uno script scritto in Python che consente lo sfruttamento della falla di sicurezza di Zoneminder descritta in CVE-2023-26035. Il sistema è vulnerabile nelle versioni precedenti a 1.36.33 e 1.37.33. Utilizzo Clona ...

zoneminder_CVE-2023-26035

Exploit - ZoneMinder CVE-2023-26035 Esiste una Esecuzione di codice in remoto non autenticata RCE che colpisce gli Snapshot di ZoneMinder. Questo è un exploit per CVE-2023-26035. Versioni affette ZoneMinder 1.36.33 e ZoneMinder 1.37.33. Utilizzo Verifica se il target è vulnerabile: root@kitploit:...

CVE-2026-48751

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...

CVE-2026-48751

Incus (a system container and virtual machine manager) prior to version 7.2.0 contains a restricted project bypass: instance snapshots ignore the restricted.containers.lowlevel=block setting, allowing an attacker with low privileges to abuse lowlevel hooks such as raw.lxc and raw.qemu to achieve ...

CVE-2026-48751 Incus has a restricted project bypass leading to arbitrary command execution

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...

CVE-2026-48751

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...

CVE-2026-48751 Incus has a restricted project bypass leading to arbitrary command execution

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the restricted.containers.lowlevel=block setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as raw.lxc and raw.qemu. Version 7.2.0 patches t...

CVE-2026-48756 Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An...

CVE-2026-48756

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An...