The Vault by Focused Hunts

The Vault Your Secrets. Your Control. Most password managers want you to trust a company you don't know with your sensitive data. They control the servers and the keys, and you have to hope nothing goes wrong. The Vault does things differently. Your encrypted vault files stay on cloud storage you...

bramble

Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...

ret-sync

ret-sync ret-sync 代表逆向工程工具同步（Reverse-Engineering Tools SYNChronization）。它是一组插件，用于将调试会话（WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg）与反汇编器（IDA/Ghidra/Binary Ninja）同步。其核心理念很简单：从静态分析和动态分析两个世界中各取所长。 调试器和动态分析为我们提供： 局部视图，具有实时动态上下文（寄存器、内存等） 内置的特殊功能/API（例如：WinDbg 的 !peb、!drvobj、!address 等） 反汇编器和静态分析为我们提供：...

wBlock

wBlock The end of Safari ad-blocking B.S. A Safari content blocker for macOS, iOS, iPadOS, and visionOS. 750,000 rules across 5 extensions, Protocol Buffer storage, LZ4 compression, and iCloud sync. !NOTE Looking for a detailed comparison? Check out my comparison guide to see how wBlock stacks up...

RedGridLink

Red Grid Link Offline MGRS navigation and proximity team coordination for small teams 2-8 people. No cell service needed. Built on the MGRS engine from Red Grid MGRS. Field Link adds zero-config proximity sync over Bluetooth, with Apple Multipeer Connectivity iOS and Google Play Services Nearby...

app

Standard Notes Standard Notes es una aplicación para tomar notas cifrada de extremo a extremo, pensada para digitalistas y profesionales. Captura tus notas, archivos y el trabajo de tu vida en un solo lugar seguro. ¿Por qué Standard Notes? Sincronización cifrada de extremo a extremo. Solo tú pued...

cloudquery

云端运维，告别混乱 CloudQuery 是一款专为平台团队打造的云资产清单工具。将您的云基础设施元数据同步到数据仓库，赋能洞察与自动化。在 AWS、Azure、GCP 以及 Wiz、Finout、GitHub 等 70 多个云和 SaaS 数据源中统一数据并提供上下文。 安装 root@kitploit: brew install cloudquery/tap/cloudquery 查看快速入门指南以获取 Linux 和 Windows 的安装说明，以及使用 CloudQuery 完成首次同步的逐步教程。 为什么选择 CloudQuery？ 专业插件覆盖 - 支持云基础设施、安全性和...

Osint-Sync

Osint Sync - OSINT Browser Extension A powerful browser extension for Open Source Intelligence OSINT research. Search usernames, emails, and phone numbers across 20+ platforms with integrated access to premium OSINT tools like GHunt, IntelX, Epieos, and OSINT Industries. Features Username Search...

Post Sync Plugin <= 1.1 - Cross-Site Scripting

Post Sync WordPress plugin = 1.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a maliciou...

CData Sync < 23.4.8843 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Sync CData - Sync' - r...

FineCMS <5.0.9 - Open Redirect

FineCMS 5.0.9 contains an open redirect vulnerability via the url parameter in a sync action. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2017-11586 info: name: FineCMS 5.0.9 - Open...

WordPress Videos sync PDF <=1.7.4 - Local File Inclusion

WordPress Videos sync PDF 1.7.4 and prior does not validate the p parameter before using it in an include statement, which could lead to local file inclusion. id: CVE-2022-1392 info: name: WordPress Videos sync PDF =1.7.5 or apply the vendor-provided patch to mitigate the vulnerability. reference...

WordPress VR Calendar <=2.3.2 - Remote Code Execution

WordPress VR Calendar plugin through 2.3.2 is susceptible to remote code execution. The plugin allows any user to execute arbitrary PHP functions on the site. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without...

DCSYNCMonitor

DCSYNCMonitor Description This tool is an application/service that can be deployed on Domain controllers to alert on Domain Controller Syncronization attempts. When an attempt is detected, the tool will write an event to the Windows Event Log. These events can be correlated in a SIEM. In addition...

authkeysync

AuthKeySync Automatically synchronize SSH public keys from remote URLs to your servers 📖 Full Documentation The Problem Managing SSH access across multiple servers is painful: Team members join or leave, and you need to update authorizedkeys on every server Developers rotate their SSH keys, and n...

CVE-2018-6537.RCE

CVE-2018-6537 该漏洞利用针对运行在 Windows 10 x86, build: 16299 上的 Sync Breeze ，影响 版本 10.4.18 ，未认证的攻击者可以通过 TCP 连接执行 SEH 溢出 ，导致 远程代码执行 。该利用假设所有安全缓解措施均已禁用（例如 ASLR、DEP）。 过程 1. 覆盖指向Handler 的地址 新地址 1015a2f0 用于覆盖引用 excepthandler 函数的旧地址。该新地址指向以下汇编指令： root@kitploit: pop eax ; esp += 0x04 pop ebx ; esp += 0x04 ret ...

CVE-2017-14980.RCE

CVE-2017-14980 该漏洞利用针对运行在 Windows 10 x86, build: 16299 上的 Sync Breeze Enterprise ，影响版本 10.0.28 ，未认证的攻击者可以通过 HTTP 请求体 执行 缓冲区溢出 ，从而实现 任意代码执行 。此漏洞利用假设所有安全缓解措施均已禁用（例如 ASLR、CFG、DEP）。 !NOTE 该项目是在针对 Windows 二进制文件进行基础缓冲区溢出实验时开发的。这是我开发的 第一个 漏洞利用程序。 该漏洞利用程序已完全可用，发布它是为了记录我在漏洞研究和利用开发方面的进展。 步骤 1. 发送 HTTP 请求...

automation-controller: automation-controller: Project scm_branch/scm_refspec argument injection into git during project sync allows arbitrary file read on the sync host (control-plane ServiceAccount token, SECRET_KEY, and DB credentials on control-plane deployments) leading to full AAP and Kubernetes-namespace compromise

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The Project SCM branch and SCM refspec fields are accepted without rejecting values that begin with a dash and are passed to the git module during project synchronization, where they reach a git checkout/git fetch...

REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames

Summary The mediapool sync page sync.php renders filenames from the /media filesystem directory directly into HTML without applying rexescape i.e., htmlspecialchars. Any file placed in the media directory whose filename contains HTML metacharacters will execute JavaScript in the browser of any...

CVE-2026-63002 REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames

REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts filenames held in $diffFiles from the media filesystem into the Mediapool Sync page without rexescape. An attacker who can place an unregistered file with HTML metacharacters in th...