CVE-2026-28648

A permission bypass vulnerability exists in the Settings application due to a confused deputy issue. This flaw can lead to local escalation of privilege without requiring additional execution privileges. Exploitation does not require user interaction . No specific software versions or remediation...

EUVD-2026-92630

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

WhatsApp-OSINT

WHATS OSINT 🕵️‍♂️ WhatsApp 开源情报工具 ，允许你获取个人资料照片、验证企业账户、检查状态和用户信息、分析关联设备、查看隐私设置，并通过 RapidAPI 上的 WhatsApp OSINT API 访问完整数据。 支持 6 个端点： about, base64, business, devices, doublecheck, privacy 。 🚀 功能特性 通过电话号码获取 WhatsApp 个人资料照片 验证 WhatsApp 企业账户 检查用户状态和基本信息 分析关联设备 获取完整的 OSINT 信息 查看隐私设置 自动验证电话号码格式...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

CVE-2026-102776

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

packages_apps_settings_AOSP10_r33_CVE-2020-0416

此存储库没有 README。...

EUVD-2026-92451

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

CVE-2026-102776 Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

CVE-2026-102776 Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

Zeus

Zeus AWS 审计与加固工具 Zeus 是一款强大的工具，用于 AWS EC2 / S3 / CloudTrail / CloudWatch / KMS 的最佳安全实践。它根据用户创建的配置文件检查安全设置，并根据用户的请求，基于 CIS AWS 基准源将其更改为推荐设置。 目前，它仅包含日志记录机制。 身份与访问管理 避免使用 "root" 账户 确保所有拥有控制台密码的 IAM 用户启用了多因素认证（MFA） 确保禁用超过 90 天或更长时间未使用的凭证 确保访问密钥每 90 天或更短时间轮换一次 确保 IAM 密码策略要求至少一个大写字母 确保 IAM 密码策略要求至少一个小写...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

CVE-2024-23738

CVE-2024-23738 Postman 10.22 及更早版本在 macOS 上存在一个安全问题，允许远程攻击者通过 RunAsNode 和 enableNodeClilnspectArguments 设置执行任意代码。 有一个用于自动搜索 Electron 漏洞的工具：https://github.com/r3ggi/electroniz3r 使用该工具，我们可以检查应用是否存在漏洞： 验证后，我们可以注入代码并获取 Shell： 享受你的 Shell :...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

user.js

本仓库及下方链接的交互式网页是 唯一官方来源 ——不要相信任何其他声称是 Arkenfox 的网站。 🟪 user.js user.js 是一个可以控制 Firefox 设置的配置文件——如需更技术性的细分和说明，你可以在 wiki 中了解更多。 🟩 arkenfox user.js arkenfox user.js 是一个模板 ，旨在尽可能提供隐私和增强安全性，并尽可能减少跟踪和指纹识别——同时最大限度地减少功能损失和破坏（但这仍会发生）。 每个人，包括专家，至少应该阅读 wiki，因为它包含了一些 user.js 设置的重要信息。还有一个交互式当前版本，感谢 icpantsparti...

packages_apps_Settings_AOSP10_r33_CVE-2020-0416

Este repositorio no tiene un README...

allstar

Allstar !IMPORTANT 由 OpenSSF 托管的 Allstar GitHub App 已退役。 Allstar 作为 OpenSSF Scorecard 子项目，其本身仍在持续维护中——您现在必须自行运行它，可以 作为 GitHub Action 或 作为服务守护进程 运行。 更多详情请参阅 ossf/allstar881。 如果您的组织一直依赖托管应用，请参阅 从托管应用迁移。 概述 什么是 Allstar？ Allstar 的新功能 whats-new.md 禁用不需要的问题 救命！Allstar 创建了我不想要的问题！ 入门指南 背景 组织级选项 安装选项 创建您...

packages_apps_Settings_AOSP10_r33_CVE-2020-0188_CVE-0219

此存储库没有 README。...

packages_apps_Settings_AOSP10_r33_CVE-2020-0219

此存储库没有 README。...

CVE-2021-46074

CVE-2021-46074 漏洞标题：车辆服务管理系统 - 'Settings' 存储型跨站脚本（XSS） 漏洞作者：SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 中危 参考链接： https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46074 https://vulners.com/cve/CVE-2021-46074 描述：...