Swiss Army Suite (SAS)

Posté dans 2 juillet 2025 9:09 am par

[featured_image]

Télécharger

Download is available until [expire_date]

Version
Télécharger 481
Taille du fichier 9.35 MB
Nombre de fichiers 1
Date de création 2 juillet 2025
Dernière mise à jour 2 juillet 2025

Swiss Army Suite (SAS)

Outils

Swiss Army Suite (SAS) | 9.35 MB

Télécharger

Mango Keywords 3.4.1 | 25.26 MB

Télécharger

Dork Searcher V3 | 64.46 MB

Télécharger

Magic Dork V3.4.5 | 14.59 MB

Télécharger

SQLi Dorks Generator | 1.62 MB

Télécharger

SQLi Dumper 10.5 | 31.46 KB

Télécharger

Scan Now UPnP | 5.91 MB

ScanNowUPnP

CVE-2026-75931 24 août 2026

High Severity Description fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference such as a host preceded by two slashes is returned with its host verbatim and no error set. As a result fast-uri's own entry points […]

CVE-2026-75975 24 août 2026

High Severity Description fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be silently discarded and a malformed attacker-controlled host is turned into a different valid IPv6 destination. For example, a bracketed literal with invalid […]

CVE-2026-78314 24 août 2026

High Severity Description SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. Read more at https://www.tenable.com/cve/CVE-2026-78314

CVE-2026-78315 24 août 2026

High Severity Description SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. Read more at https://www.tenable.com/cve/CVE-2026-78315

CVE-2026-78316 24 août 2026

High Severity Description SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. Read more at https://www.tenable.com/cve/CVE-2026-78316

[0day-rubbish] VMS 6.48.809 Authenticated command injection to root RCE (8.8) 20 août 2026

Posted by disclosure via Fulldisclosure on Aug 190day Rubbish Research Team is publicly disclosing a vulnerability in VMS 6.48.809. Type: Authenticated command injection to root RCE (CWE-78) CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Impact: Authenticated attacker executes arbitrary commands as root via unsanitized command injection Authentication: authenticated Full technical analysis and a reproducible proof-of-concept:...

[0day-rubbish] ONE Reporter 13.1 Authenticated RCE / privilege escalation via CommandExecutor (8.8) 20 août 2026

Posted by disclosure via Fulldisclosure on Aug 190day Rubbish Research Team is publicly disclosing a vulnerability in ONE Reporter 13.1. Type: Authenticated RCE / privilege escalation via CommandExecutor (CWE-78) CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Impact: Low-privilege user executes arbitrary commands as local-admin service account Authentication: authenticated Full technical analysis and a reproducible proof-of-concept:...

[0day-rubbish] Gemini 7.3.0 Authenticated SQL injection to xp_cmdshell RCE (8.8) 20 août 2026

Posted by disclosure via Fulldisclosure on Aug 190day Rubbish Research Team is publicly disclosing a vulnerability in Gemini 7.3.0. Type: Authenticated SQL injection to xp_cmdshell RCE (CWE-89) CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Impact: Authenticated user executes OS commands via stacked SQL and xp_cmdshell as sa/sysadmin Authentication: authenticated Full technical analysis and a reproducible proof-of-concept:...

[0day-rubbish] RoboTask 11.0.5.1229 Unauthenticated REST API remote task execution (9.8) 20 août 2026

Posted by disclosure via Fulldisclosure on Aug 190day Rubbish Research Team is publicly disclosing a vulnerability in RoboTask 11.0.5.1229. Type: Unauthenticated REST API remote task execution (CWE-306) CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Impact: Unauthenticated attacker enumerates and triggers pre-existing tasks with Administrator privileges Authentication: unauthenticated / pre-auth Full technical analysis and a reproducible proof-of-concept:...

[0day-rubbish] ActiveFax Server 10.70 Unauthenticated LPD Ghostscript %pipe% SYSTEM RCE (9.8) 20 août 2026

Posted by disclosure via Fulldisclosure on Aug 190day Rubbish Research Team is publicly disclosing a vulnerability in ActiveFax Server 10.70. Type: Unauthenticated LPD Ghostscript %pipe% SYSTEM RCE (CWE-78) CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Impact: Unauthenticated attacker executes arbitrary commands as SYSTEM via an LPD print job Authentication: unauthenticated / pre-auth Full technical analysis and a reproducible proof-of-concept:...

Swiss Army Suite (SAS)

Swiss Army Suite (SAS)

Related Posts

Comment installer SilverBullet Pro 1.5.8

20 commandes essentielles de Meterpreter