awesome-incident-response

Awesome Incident Response A curated list of tools and resources for security incident response, aimed to help security analysts and DFIR teams. Digital Forensics and Incident Response DFIR teams are groups of people in an organization responsible for managing the response to a security incident,...

delve

/statusIcon.svg The GitHub issue tracker is for bugs only. Please use the developer mailing list for any feature proposals and discussions. About Delve Installation Getting Started Documentation Command line options Command line client Plugins and GUIs Frequently Asked Questions Contributing AI...

dbeaver

DBeaver Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Has a lot of features including schema editor, SQL editor, data editor, AI integration, ER diagrams, data export/import/migration, SQL execution plans, database administration tools,...

CVE-2026-63766_exploit

CVE-2026-63766 — GPT-SoVITS Unauthenticated OS Command Injection Unauthenticated remote code execution in GPT-SoVITS's Gradio web UI webui.py. The audio-processing helpers openasr, openslice, opendenoise, openuvr5 interpolate unsanitised Gradio textbox path values straight into shell commands run...

CVE-2026-68573

Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cleanup actions. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin...

CVE-2026-59966

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, executes user-controlled Automation regular-expression patterns with Python re.sub without complexity validation or an execution timeout when an authenticated user stores a...

CVE-2026-59963

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies...

CVE-2026-59970

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space,...

CVE-2026-61726

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated...

CVE-2026-102607

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events...

wordpress-cve-scanner

WordPress CVE Scanner Scan your WordPress core, themes and plugins for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT CVE API. Part of the ValtersIT platform — CVE & Threat-IP data you can query or run yourself. Explore both API and scanners:...

CVE-2026-0049

CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Full research material and PoC. Narrative analysis: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : unsigned integer overflow on fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388. Impact...

CVE-2024-32002-poc

Bash Script: !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path telltalepath="$PWD/tell.tale" Initialize...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: An SQL Injection vulnerability exists in the Event management software version 2.3.0. An attacker can leverage the vulnerable "id" parameter in the...

sniffglue

sniffglue sniffglue is a network sniffer written in rust. Network packets are parsed concurrently using a thread pool to utilize all cpu cores. Project goals are that you can run sniffglue securely on untrusted networks and that it must not crash when processing packets. The output should be as...

firmware-mod-kit

Disclaimer Automatically exported from code.google.com/p/firmware-mod-kit Firmware Modification Kit This kit is a collection of scripts and utilities to extract and rebuild linux based firmware images. Extract a firmware image into its component parts User makes desired modification to the...

prey-android-client

Here you will find all the source code for the current and in development releases of the Prey client for Android devices. Prey is a SaaS platform for device tracking, monitoring, data protection, and device management. Its open-source agent runs on endpoints and connects to a centralized control...

mole

Mole A framework for identifying and exploiting out-of-band OOB vulnerabilities. Installation & Setup Mole Install Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in...

Docker-Security

Docker Security This is the OWASP Docker Top 10. It's a work in progress. About this document This document describes the most important 10 security bullet points for building a secure containerized environment. You can use it as a specification sheet if you start from scratch, alternatively...

xed

Intel® X86 Encoder Decoder Intel® XED Doxygen API manual and source build manual: https://intelxed.github.io Bugs: https://github.com/intelxed/xed/issues/new Abbreviated GITHUB building instructions: git clone https://github.com/intelxed/xed.git xed git clone https://github.com/intelxed/mbuild.gi...