Nginx UI - Broken Access Control

Network attackers can fully control nginx service, including config modification and service restart, leading to complete service takeover. id: CVE-2026-33032 info: name: Nginx UI - Broken Access Control author: DhiyaneshDk severity: critical description: | Network attackers can fully control ngi...

Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure

Nginx UI 2.0.0 to 2.3.8 contains an authentication bypass caused by unauthenticated access to /api/install during first-run setup, letting remote attackers claim the initial admin account, exploit requires attacker to access the service before legitimate operator. id: CVE-2026-42221 info: name:...

Mailcow Dockerized Swagger UI - Cross-Site Scripting

Mailcow-dockerized before 2022-09a uses a vulnerable version of Swagger UI before 4.11.1 that is affected by a DOM-based Cross-Site Scripting XSS vulnerability. When a user accesses the Swagger documentation with a crafted configUrl or url parameter containing JavaScript payloads, arbitrary code...

Provectus kafka-ui <=0.7.2 - Remote Code Execution

Provectus kafka-ui versions 0.7.0 through 0.7.2 are vulnerable to code injection in the /api/smartfilters/testexecutions endpoint. The filterCode parameter is evaluated as a Groovy expression without sandboxing, allowing an unauthenticated attacker to execute arbitrary code and operating-system...

Fastify Swagger-UI - Information Disclosure

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...

CVE-2020-1947

CVE-2020-1947 Apache ShardingSphere UI Análisis YAML Replicación de Vulnerabilidad de Ejecución Remota de Código 0x01 Descargar el paquete binario de shardingsphere wget https://mirror-hk.koddos.net/apache/incubator/shardingsphere/4.0.0/apache-shardingsphere-incubating-4.0.0-sharding-ui-bin.tar.g...

jaeles-signatures

This project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine This repo only contain Default Signatures for Jaeles project. Pull requests or any ideas are welcome. Please read the Official Documentation here for writing your own signature. Installation jaeles config...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

CVE-2023-34840

CVE-2023-34840 漏洞说明 angular-ui-notification 的所有版本都存在 XSS 漏洞，因为该库没有对用户提供的输入进行转义。 为了安全使用该库，强烈 建议对传递给该库的参数进行转义/编码，例如以下方式： private sanitizeHTMLstr: string return str.replace/^\w. /gi, c = &$c.charCodeAt0;; 利用 假设该库已经导入并被某个项目使用。该库的使用方式可能如下： private showNotificationmessage: string, delay: number, type:...

poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

Telerik_CVE-2019-18935

TelerikUI Python 扫描器 telerikrcescan.py 示例 评估一个 IP 是否存在 CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 评估一个主机名是否存在 CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net 评估一个 CIDR 网络范围是否存在 CVE-2019-18935 $ python3 telerikrcescan.py -r 23.253.4.0/24 评估目标列表 $ python3...

Malicious code in ui-base-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f7251d8342fbc78bb25925a713153e0bd22f820c678fde7e2ffa0db10fbd151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: hubble-ui, kubescape-operator, cilium, hubble, kubescape...

CVE-2026-63766_exploit

CVE-2026-63766 — GPT-SoVITS 未认证操作系统命令注入 GPT-SoVITS 的 Gradio Web UI （webui.py）中存在未认证的远程代码执行漏洞。 音频处理辅助函数（openasr、openslice、opendenoise、openuvr5）会将未经净化的 Gradio 文本框路径 值直接拼接到通过 Popen..., shell=True 运行的 shell 命令中。路径仅会经过 cleanpath 处理，而该函数只会去除首尾的引号和空格——位于 中间 的 shell 元字符会原样保留。asroptdir...

Simple-Ansible-for-CVE-2023-20198

Simple-Ansible-for-CVE-2023-20198 这是一个非常简单的 playbook，用于检测并禁用 http/https 服务器，以防止该漏洞。 快速开始 只需使用 Cisco Always on Sandbox 来测试示例 1. 登录沙箱路由器并启用 http/https 服务器 ssh [email protected] pass=lastorangerestoreball8876 conf t ip http server ip http secure-server 2. 运行 http.yml playbook，以确定配置状态并禁用...

CVE-2021-21972

CVE-2021-21972 vCenter CVE-2021-21972 漏洞利用概念验证代码 研究致谢：https://swarm.ptsecurity.com/unauth-rce-vmware/，http://noahblog.360.cn/vcenter-6-5-7-0-rce-lou-dong-fen-xi/ 已在 Windows 和 Unix vCenter VCSA 目标上测试通过。 使用方法 如果仅需无害地检查目标是否易受攻击，只需提供 --target 参数。 若要利用漏洞，请提供 --file、--path 和 --operating-system 标志。 将...

dp_crypto

dpcrypto 基于Base64的加密预言机漏洞利用工具，针对CVE-2017-9248（Telerik UI for ASP.NET AJAX 对话框处理程序） 发布在 exploit-db 上 更新于 2020 年——请注意，exploit-db 上的版本与 GitHub 上的最新版本相比已经非常过时。 https://www.exploit-db.com/exploits/43873/ 另请参阅 我的另一个 Telerik UI 漏洞利用工具（针对 CVE-2017-11317 和 CVE-2017-11357）可能也会引起你的兴趣。可在以下地址获取：...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198是思科IOS XE软件Web UI功能中的一个严重漏洞，允许未经身份验证的远程攻击者在受影响的系统上创建具有特权级别15的账户，从而完全控制设备。 该漏洞的产生主要源于Web UI功能中路径解析的不当处理。攻击者通过精心构造的HTTP请求，利用双重URL编码绕过Nginx的路径过滤机制，直接访问受保护的内部端点，如/webuiwsmahttp。通过这些端点，攻击者可以发送特制的SOAP请求，执行任意CLI命令或进行配置更改。...