LabAutomationCVE-2021-43798

LabAutomationCVE-2021-43798 I make a script for pentest automation where i exploit CVE-2021-43798 a path traversal on Grafana to steal user secrets SSH key and then gain privileges on a Linux system using SUID. I automate this lab to share the pentest methodology...

CVE-2015-3306

CVE-2015-3306 Ceci contient un exploit en un seul fichier pour la vulnérabilité ProFTPd 1.3.5 modcopy CVE-2015-3306, en particulier pour le laboratoire Kenobi de TryHackMe. Description de la vulnérabilité CVE-2015-3306 est une vulnérabilité trouvée dans ProFTPd 1.3.5 due à un défaut dans le modul...

Malicious code in api-rs-tuils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e65df9ad10889610f658c482041bdcf8c06d3c147da5cec709f246a1fa363c4 [email protected] runs a malicious postinstall hook node test.js that executes obfuscated code in index.js against the installer's machine. The code...

EUVD-2025-6993

Malicious code in bioql PyPI...

CVE-2022-26252: Improper Limitation of a Pathname to a Restricted Directory

aaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows attackers to obtain the root user private SSH keyidrsa...