60 matches found
Azur3Alph4
Azur3Alph4 关于 Azur3Alph4 是一个 PowerShell 模块，用于自动化红队操作任务。该模块适用于后渗透（已获得 RCE）阶段。未从此阶段开始，令牌提取和许多其他工具将无法成功执行。 该模块应用于对属于托管身份的受损应用进行进一步枚举和横向移动。 Azur3Alph4 目前正在开发中。模块正在工作和更新中。大部分内容尚未经过测试。 脚本存放在仓库中供单独使用和便于识别，但 .psm1 文件将持续更新。 安装与使用 Import-Module Azur3Alph4 将 $envendpoint 指向 cmd 执行，并将 "env" 传递给 Azure 后端。 更新 ...
CVE-2025-5777-Exploit
CVE-2025-5777 利用工具 🔥 一个强大的教育工具 ，旨在演示和分析影响 Citrix NetScaler VPN 的漏洞 CVE-2025-5777 。 本项目是 GO-TO CVE 倡议的一部分。 ⚠️ 仅供教育目的。请勿在您未拥有或未获得明确测试许可的系统上使用。 📌 关于 该脚本尝试检测并提取由存在漏洞的 Citrix VPN 端点泄露的敏感内部令牌、内部 IP 和隐藏端点路径。 它旨在帮助学生、安全研究人员和红队成员更好地了解真实世界中的 CVE 是如何被发现和分析的。 🚀 功能特性 基于异步的快速扫描 提取泄露的身份验证令牌 发现隐藏/内部VPN路径...
CVE-2020-35847_CVE-2020-35848
Cockpit CMS NoSQL注入（CVE-2020-35847，CVE-2020-35848） Cockpit CMS 0.11.2之前版本在 /auth/resetpassword 和 /auth/newpassword 接口中存在NoSQL注入漏洞，可导致密码重置令牌泄露，进而实现用户信息枚举及密码重置。 阅读更多 - https://swarm.ptsecurity.com/rce-cockpit-cms/ 此Python脚本用于枚举系统用户并重置密码。 使用方法 python3 exploit.py -u http://cockpit-site-url 脚本首先枚举系统用户...
PYSEC-2026-3759
opensslencrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser history, and HTTP Referer headers to gain unauthorized access...
Malicious code in vtranalytic (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897fa80f1d8a55ff480d6c7e7a71200ac31530a9f5d928389545b597c7b45903 The package implements a full remote-administration toolkit controlled through a Telegram bot. It polls the Telegram Bot API at...
PT-2026-64094
X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token Summary AuthInjectionMiddleware in meta-ads-mcp rejects HTTP MCP requests only when both auth token and pipeboard token are absent. Because extract token from headers does not recognise the X-Pipeboard-Token header, an attacker who...
GHSA-2V2F-MVFG-PH56 meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token Summary AuthInjectionMiddleware in meta-ads-mcp rejects HTTP MCP requests only when both authtoken and pipeboardtoken are absent. Because extracttokenfromheaders does not recognise the X-Pipeboard-Token header, an attacker who sends...
📄 Strapi CMS 5.36.1 Account Takeover
This Metasploit module exploits a critical bypass vulnerability in Strapi CMS that allows unauthenticated attackers to take over the Super Admin account. ================================================================================================================================== | Title :...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: rxgk: Fixed potential integer overflow in the length check. Fixed potential integer overflow in rxgkextracttoken, when checking the length of the ticket. Instead of rounding up the value to be tested which might cause an overflow...
Exploit for CVE-2026-8732
CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Aut...
CVE-2026-46010
A flaw was found in the Linux kernel's rxrpc component. Missing error handling in the rxgkextracttoken function, specifically when rxgkdecryptskb returns an out-of-memory error -ENOMEM, could lead to an unexpected system abort. This vulnerability could allow a local attacker to cause a Denial of...
CVE-2026-46010
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix error handling in rxgkextracttoken Fix a missing bit of error handling in rxgkextracttoken: in the event that rxgkdecryptskb returns -ENOMEM, it should just return that rather than continuing on for anything else, it...
UBUNTU-CVE-2026-46010
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix error handling in rxgkextracttoken Fix a missing bit of error handling in rxgkextracttoken: in the event that rxgkdecryptskb returns -ENOMEM, it should just return that rather than continuing on for anything else, it...
CVE-2026-46010 rxrpc: Fix error handling in rxgk_extract_token()
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix error handling in rxgkextracttoken Fix a missing bit of error handling in rxgkextracttoken: in the event that rxgkdecryptskb returns -ENOMEM, it should just return that rather than continuing on for anything else, it...
EUVD-2026-32307
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix error handling in rxgkextracttoken Fix a missing bit of error handling in rxgkextracttoken: in the event that rxgkdecryptskb returns -ENOMEM, it should just return that rather than continuing on for anything else, it...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of error handling in the rxgxkextracttoken function. When rxgxkdecryptskb returns -ENOME...
Use of a Broken or Risky Cryptographic Algorithm
Overview @haxtheweb/haxcms-nodejs is a HAXcms nodejs backend Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm via the hmacBase64 function. An attacker can obtain sensitive cryptographic material by sending a single unauthenticated HTTP request t...
Information Disclosure
strapi/strapi is vulnerable to information disclosure. The vulnerability is due to insufficient sanitization of relational query parameters in the where filter, which allows an unauthenticated attacker to perform a boolean-oracle attack against restricted adminusers table fields and potentially...
CVE-2026-45321 Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/ packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself...