354318 matches found
CVE-2021-22555-Poc
Heap OVerflow CVE CVE-2021-22555 List of Bugs Heap Out-of-Bounds WriteThe core Bug Data Corruption The Immediate Effect Memory Leak / Information Disclosure Privilege Escalation The Final Goal 1. Install compilation tools do NOT run apt upgrade Download iso wget...
CVE-2026-34494
A vulnerability in the On-Chip Debug Interface of Johnson Controls Neo Series MVP2 (versions before 3.3b63 ) allows an attacker to Collect Data from Common Resource Locations . The issue is associated with CWE-1191 (On-Chip Debug and Test Interface With Improper Access Control). The CVSS 4.0 scor...
CVE-2026-34494
On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...
CVE-2026-34493
On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...
CVE-2026-34493
A vulnerability in the On-Chip Debug Interface of Johnson Controls EasyIO FS32 (versions before 3.3b63 ) allows an attacker to Collect Data from Common Resource Locations . This issue is associated with CWE-1191 , involving an On-Chip Debug and Test Interface with Improper Access Control . The vu...
CVE-2026-71449
The Johnson Controls EasyIO FS32 software contains a Use of Hard-coded Cryptographic Key vulnerability (CWE-321) affecting versions prior to 3.0b63 . The flaw stems from the use of a fixed secret key for encryption or decryption processes, which enables an attacker to retrieve embedded sensitive ...
CVE-2026-71449
: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...
CVE-2026-71449
: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...
exfilkit
exfilkit 検知能力をテストするためのデータ漏洩ツール 説明 セキュリティ製品の検知能力をテストするために使用されるデータ漏洩ツールです。当然、合法的な目的にのみ使用してください。 データ漏洩の方法 /etc/shadow - HTTP GETリクエスト サーバー ./exfilkit-cli.py -m exfilkit.methods.http.paramcipher.GETServer -lp 80 -o output.log クライアント $ ./exfilkit-cli.py -m exfilkit.methods.http.paramcipher.GETClient -...
Extractor
Installation Instructions For Those That Don't Want to Compile Themselves: 1. Download Google's GSON library from Maven http://central.maven.org/maven2/com/google/code/gson/gson/2.8.2/gson-2.8.2.jar wget http://central.maven.org/maven2/com/google/code/gson/gson/2.8.2/gson-2.8.2.jar 2. In Burp's...
CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...
CVE-2026-104002
The data masking utility in Powertools for AWS Lambda (Python) is vulnerable to a fail-open error handling issue in versions prior to 3.35.0 . This flaw allows actors to read sensitive field values that the application intended to mask because the system continues to operate rather than denying a...
CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...
pip3line
pip3line Raw bytes manipulation utility, able to apply well known and less well known transformations. The developpement and main page as moved to : https://github.com/metrodango/pip3line...
memscan
memscan Searches for strings, regex, credit card numbers of magnetic stripe card tracks in a process's memory space Memory/Process Scanner Written by Matt Lewis, NCC Group 2014 Updated by Tom Watson, NCC Group 2015 Thanks to Jesse Bullock for lots of great ideas Released as open source by NCC Gro...
Solitude
Solitude Solitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced researcher, Solitude makes the process of evaluating user privacy within an app accessible for everyone. Important Note Prior to installing...
React2Shell
React2Shell – Advanced Discovery & Exploitation Framework An advanced React Server Components RSC vulnerability scanner and exploiter for CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications. This tool expands upon the original React2Shell research and proof-of-concept by introducing...
mosint
機能 • インストール • サービス • 使い方 • Docker • 設定 • スクリーン MosintはGoで書かれた自動化されたメールOSINTツールで、ターゲットのメールを迅速かつ効率的に調査することができます。多数のサービスを統合し、セキュリティ研究者が迅速に豊富な情報にアクセスできるようにします。 機能 高速でシンプルなメールベースのスキャン 使いやすさとリソースの軽量 さに最適化 メールの確認と検証 ソーシャルメディア アカウントの確認 データ漏洩 とパスワード漏洩 の確認 関連 メールとドメインの検索 Pastebinダンプ のスキャン Google検索...
buster
説明 Buster は、以下のために使用される高度な OSINT ツールです: 複数のソース（gravatar、about.me、myspace、skype、github、linkedin、過去の侵害）を使用してメールのソーシャルアカウントを取得 Google、Twitter、darksearch、ペーストサイトを使用して、メールが見つかった場所へのリンクを取得 メールの侵害情報を取得 メールで登録されたドメインを取得（逆 whois） 人物の可能性のあるメールやユーザー名を生成 ソーシャルメディアアカウントのメールを見つける ユーザー名からメールを見つける 人物の仕事用メールを見つける...
SIGINT_THROUGH_BROTHER_PRINTERS
SIGINTTHROUGHBROTHERPRINTERS My toolkit to collect data through vulnerable printers. uses cve 2017-7588 as entry access, need to develop the implant for the custom firmware, probably will use it for simulating a cyber attack one day...