1926811 matches found
HackSysExtremeVulnerableDriver
HackSys Extreme Vulnerable Driver ooooo ooooo oooooooooooo oooooo oooo oooooooooo. 888' 888' 888' 8 888. .8' 888' Y8b 888 888 888 888. .8' 888 888 888ooooo888 888oooo8 888. .8' 888 888 888 888 888 " 888.8' 888 888 888 888 888 o 888' 888 d88' o888o o888o o888ooooood8 8' o888bood8P' Discord Server...
algo
Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...
system_prompts_leaks
Thanks to Open Source Agent Analytics Understand your agents in production System Prompts Leaks The full verbatim system prompts behind the most popular chatbots in the world. Carefully curated and complete. Feel free to open up a PR or get in contact if you got a different result. The Washington...
rustdesk
Build • Docker • Structure • Snapshot Українська | česky | 中文 | Magyar | Español | فارسی | Français | Deutsch | Polski | Indonesian | Suomi | മലയാളം | 日本語 | Nederlands | Italiano | Русский | Português Brasil | Esperanto | 한국어 | العربي | Tiếng Việt | Dansk | Ελληνικά | Türkçe | Norsk | Română We...
CVE-2026-108581
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which only validate the JWT, to obtain...
CVE-2026-108582
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...
CVE-2026-108585
The argocd-mcp (Argo CD MCP Server) versions through 0.9.0 are vulnerable to a path traversal flaw within the delete_application tool. The root cause is the lack of validation on applicationName values, which allows MCP clients or prompt-injected models to use dot-segment sequences (e.g., ../repo...
EUVD-2026-96372
argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...
CVE-2026-108585 argocd-mcp through 0.9.0 Path Traversal via delete_application Tool
argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...
CVE-2026-108583
creationtimestamp| type| source ---|---|--- 2026-10-10 16:03:31+00:00| seen| https://infosec.exchange/users/cve/statuses/117417457166179681...
CVE-2026-108582
creationtimestamp| type| source ---|---|--- 2026-10-10 16:02:51+00:00| seen| https://infosec.exchange/users/cve/statuses/117417454521016939...
CVE-2026-108581
creationtimestamp| type| source ---|---|--- 2026-10-10 16:02:10+00:00| seen| https://infosec.exchange/users/cve/statuses/117417451861239911...
CVE-2026-108580
creationtimestamp| type| source ---|---|--- 2026-10-10 16:01:30+00:00| seen| https://infosec.exchange/users/cve/statuses/117417449196431265...
ftw
Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...
pwnflow
Pwnflow 🎯 Visualize Your Security Testing & Analysis Journey Pwnflow is a mind-mapping platform designed specifically for cybersecurity professionals. it helps you visualize, track, and share your security testing methodologies while maintaining complete control over your sensitive data. 🚀 Key...
StandIn
StandIn StandIn is a small AD post-compromise toolkit. StandIn came about because recently at xforcered we needed a .NET native solution to perform resource based constrained delegation. However, StandIn quickly ballooned to include a number of comfort features. I want to continue developing...
toolkit
English | Español Indetectables Toolkit Designed as a Swiss Army knife, this curated toolkit is invaluable for malware analysts, crackers, and cybersecurity experts. It is meticulously crafted to support both novice and experienced users. This toolkit complements the manuals and the numbered...
rdesktop
IMPORTANT: rdesktop is no longer maintained Please, beware that this project is no longer maintained and hadn't received a patch in many years. There are reported security vulnerabilities, yet those haven't been reviewed. Use with caution and use it at your own risk. rdesktop - A Remote Desktop...
Brida
Brida Brida is a Burp Suite Extension that, working as a bridge between Burp Suite and Frida, lets you use and manipulate applications’ own methods while tampering the traffic exchanged between the applications and their back-end services/servers. It supports all platforms supported by Frida...