ScratchABit

ScratchABit ScratchABit est un désassembleur incrémental interactif avec des capacités d'analyse de flux de données et de contrôle. ScratchABit est dédié aux efforts de la communauté de rétro-ingénierie OpenSource rétro-ingénierie pour produire des pilotes/firmware OpenSource pour du matériel mal...

misp-extractor

MISP Extractor This code connects to a given MISP Malware Information Sharing Platform server and parses a given number of events, writing the IP addresses, URLs, and MD5 hashes found in the events to three separate files. Usage To use this script, you will need to provide the URL of your MISP...

SharpHook

SharpHook SharpHook est inspiré du projet SharpRDPThief. Il utilise divers hooks API pour nous fournir les identifiants souhaités. En arrière-plan, il utilise le projet EasyHook. Une fois le processus souhaité en cours d'exécution, SharpHook injecte automatiquement ses dépendances dans le process...

drupalgeddon2-cli

drupalgeddon2-cli Командная строка для перезаписи доказательства концепции Drupalgeddon2 CVE-2018-7600 , создана в качестве учебного упражнения при прохождении модуля Hack The Box Academy Attacking Common Applications. !WARNING Только для авторизованного тестирования безопасности и обучения. Запу...

tracehound

Tampon de sécurité d'exécution déterministe pour les API à haute vélocité Les systèmes externes signalent les menaces. Tracehound préserve les preuves. Site Web · Index de la documentation · Référence API · Configuration · RFCs · Sécurité · Journal des modifications Tracehound est un runtime...

route-detect

route-detect Find authentication authn and authorization authz security bugs in web application routes: Routes fromkoel streaming server Web application HTTP route authn and authz bugs are some of the most common security issues found today. These industry standard resources highlight the severit...

py-amsi

py-amsi py-amsi est une bibliothèque qui analyse des chaînes de caractères ou des fichiers à la recherche de logiciels malveillants en utilisant l'API Windows Antimalware Scan Interface AMSI. AMSI est une interface native de Windows qui permet aux applications de demander à l'antivirus installé s...

IPGeoLocation

IPGeoLocation ==== Un outil pour récupérer des informations de géolocalisation IP Propulsé par ip-api Prérequis Python 3.x termcolor colorama Téléchargement/Installation git clone https://github.com/maldevel/IPGeoLocation pip3 install -r requirements.txt --user si pip3 est manquant : apt-get...

bt2

bt2: Blaze Telegram Backdoor Toolkit bt2 est une porte dérobée basée sur Python sous la forme d'un bot de messagerie instantanée qui utilise l'infrastructure et l'API bot riche en fonctionnalités fournies par Telegram, en réutilisant légèrement sa plateforme de communication comme C&C. Dépendance...

EUVD-2026-93955

Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...

CVE-2026-102158 Security Advisory 0190

Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...

CVE-2026-102158

Improper validation of selected CloudVision CUE application programming interface (API) request parameters allows an authenticated network user to perform SQL injection against the backend. This vulnerability impacts the availability of the system. No specific details regarding affected versions ...

CVE-2026-102158 Security Advisory 0190

Improper validation of selected CloudVision CUE application programming interface API request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability...

CVE-2018-7691

CVE-2018-7691 REST API SSC содержит уязвимости небезопасной прямой ссылки на объект Insecure Direct Object Reference, IDOR, которые позволяют аутентифицированным пользователям получать доступ к произвольным сведениям о локальных пользователях и пользователях LDAP через метод POST, а также к...

CVE-2026-101158 Security Advisory 0185

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting XSS. Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting...

EUVD-2026-93944

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting XSS. Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting...

CVE-2026-101158

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS) . Successful exploitation could enable an attacker to hijack another CloudVision user's web session , potentially resulti...

CVE-2026-101158 Security Advisory 0185

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting XSS. Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting...

CVE-2026-103006

Elasticsearch is vulnerable to Uncontrolled Recursion (CWE-674) in its search aggregation processing . An authenticated user with read access to a single index can submit a specially crafted request containing deeply nested aggregation definitions. This triggers unbounded recursive execution, exh...

CVE-2026-103006 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...