tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

CVE-mitre

CVE-Mitre 일반적인 취약점 노출 단일 CVE 다운로드 변수는 예시일 뿐입니다 ; 단일 폴더 = CVE =를 다운로드하기 위해 자신만의 SVN 스크립트를 만들 수 있습니다 안부 @nu11secur1ty $CVE = CVE-2020-13935 svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE 분석 설명 링크 표: 2022 추가 시작 CVE| CVSS 벡터| 점수 ---|---|--- CVE-2021-26822|...

Kali-Linux

Kali-Linux 해킹과 설정 현재 릴리스 Kali 주간 이미지: href 단일 inode 다운로드 apt install subversion -y svn checkout https://github.com/nu11secur1ty/Kali-Linux/trunk/$inode 소개: Kali Linux가 당신에게 적합한가요? 배포판 개발자로서 우리가 모든 사람이 Kali Linux를 사용해야 한다고 추천할 거라고 기대할 수 있습니다. 그러나 실제로 Kali는 전문 침투 테스터와 보안 전문가를 위해 특별히 설계된 Linux 배포판이며...

CVE-2024-24919

CVE-2024-24919 익스플로잇 개요 이 저장소는 Check Point SVN에서 발견된 중요한 취약점인 CVE-2024-24919에 대한 개념 증명PoC 익스플로잇을 포함합니다. 이 취약점은 시스템 파일을 읽을 수 있게 합니다. CVE ID : CVE-2024-24919 심각도 : 치명적 목차 취약점 세부사항 익스플로잇 세부사항 사용법 1. 저장소를 클론합니다: git clone https://github.com/un9nplayer/CVE-2024-24919.git cd CVE-2024-24919 2. 대상/IP는...

svn-extractor

Svn-Extractor 웹 애플리케이션 침투 테스터는 .svn 폴더가 존재하는 상황을 자주 마주칩니다. 모르는 분들을 위해 설명하면, .svn 폴더는 SVN 버전 관리 시스템이 작업을 수행하는 데 사용하는 폴더입니다. 블랙박스 침투 테스트에서 이 폴더는 엄청난 양의 정보를 담고 있습니다. 이 정보가 도움이 되는 주요 분야는 다음과 같습니다. 1. 숨겨진 파일 및 폴더 이름 찾기 2. 파일의 소스 코드에 접근하기 3. htaccess에 접근 제한이 있어도 파일 다운로드하기 이것을 달성하는 방법. 1. 숨겨진 파일 및 폴더 이름...

CVE-2024-24919

CVE-2024-24919 점검 도구 CVE-2024-24919 취약점을 점검하는 간단한 bash 스크립트입니다. 설치 저장소를 클론하세요: git clone https://github.com/satriarizka/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919-scan.sh 사용법 ./CVE-2024-24919-scan.sh -l ips.txt HUNTER 검색어 product.name="Check Point SSL Network Extender" FOFA 검색어...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

CVE-2024-24919-POC

CVE-2024-24919-POC 민감 정보 노출CVE-2024-24919을 자동화하는 간단한 도구 기능 사용하기 쉬움. 유용한 주석; 여러 도메인 테스트 가능 사용법 git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ cd CVE-2024-24919-POC; chmod +x CVE-2024–24919.sh ./CVE-2024–24919.sh -h 취약한 도메인을 찾기 위한 Shodan Dorks Server: "Check Point SVN Foundation" "or...

CentOS Linux 7 [TuxCare] Security Update: emacs-git-el / git-daemon / git-email / git-hg / git-p4 / git-svn / etc (CENTOS7:CLSA-2025:1752655814)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1752655814 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CentOS Linux 6 [TuxCare] Security Update: mod_dav_svn / subversion / subversion-devel / subversion-gnome / etc (CENTOS6:CLSA-2026:1777038917)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777038917 advisory. - A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 t...

CVE-2026-80190

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

CVE-2026-80190

Apache Allura versions through 1.20.0 are vulnerable to a stored XSS flaw occurring via SVN code repositories . The vulnerability allows for improper neutralization of input during web page generation. It is noted that Git repositories are not known to be affected, and the issue may be mitigated ...

CVE-2026-80190 Apache Allura: Stored XSS via code repositories

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

CVE-2026-80190 Apache Allura: Stored XSS via code repositories

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

EUVD-2026-70951

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

Time-of-Check Time-of-Use (TOCTOU)

Spring Cloud Config is vulnerable to a Time-of-Check Time-of-Use TOCTOU vulnerability. The vulnerability is due to insufficient synchronization between checking and using the SVN repository base directory, which allows an attacker to exploit the time gap to manipulate the directory and potentiall...

CVE-2026-80190: Improper Neutralization of Input During Web Page Generation

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

PT-2026-85429

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers. This issue affects Apache Allura: through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue...

CVE-2026-47836

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

CVE-2026-47836 Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...