cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

cynative

Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Built-in agents · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning throu...

D-RAT_VB.NET_MySQL_PHP

D-RATVB.NETMySQLPHP D-RAT VB.NET+MySQL+PHP The project is composed of "D-RAT" server and client "D-STUB" Programming for the client and server languages: "VB.NET Framework 2" Database: "MySQL" Web page: "PHP" https://www.youtube.com/watch?v=opBbmQ5BRFk...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. Preview How to use ? git clone...

backdoorme

backdoorme Build Status Tools like metasploit are great for exploiting computers, but what happens after you've gained access to a computer? Backdoorme answers that question by unleashing a slew of backdoors to establish persistence over long periods of time. Once an SSH connection has been...

Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Extracting-User-credentials-For-Hathway-Router Via SPI flash-CVE-2024-44815 Vulnerability Description: During the security assessment of the Router firmware, it was observed that router login credentials of both web portal and Wi-Fi access point are stored in plain text in SPI flash memoey...

CVE-2022-1051

CVE-2022-1051 WPQA 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields Description The plugin, used as a companion plugin for the Discy and Himer themes, does not sanitise and escape the city, phone or profile credentials fields when outputting it in the profile page, allowing any...

CVE-2023-27163

PoC of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and sensitive...

CVE-2026-87668

A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary...

tailsnitch

Tailsnitch A security auditor for Tailscale configurations. Tailsnitch scans your tailnet for 57 misconfigurations, overly permissive access controls, and security best practice violations. Quick Start 1. Set your Tailscale API credentials export TSAPIKEY="tskey-api-..." 2. Run audit tailsnitch 3...

CVE-2021-36393

CVE-2021-36393 Error-based blind SQL injection with bit-shifting approach for Moodle 3.10.4. Allows an attacker to perform arbitrary database queries. For example, you can steal: test answers from the database Modify the script.js file and run it on route /mod/quiz/attempt.php?attempt=...&cmid=...

CVE-2022-22954_VMware_PoC

CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Server-Side Template Injection A vulnerability, which was classified as very critical, was found in Vmware Workspace ONE Access and Identity Manager. Affected component is Template Handler. Reference: https://vuldb.com/?id.196644 Usage:...

kviklet

Kviklet Kviklet.dev | Release Notes | Discord Secure access to production environments without impairing developer productivity. Kviklet pronounced Quick-let applies the Four-Eyes Principle to production database access, with a pull request-like review and approval workflow for individual SQL...

CVE-2019-19609

CVE-2019-19609 Strapi = 3.0.0-beta.17.8 authenticated remote code execution...

CVE-2015-6668

CVE-2015-6668 - Job Manager IDOR A small Rust CLI that reproduces the information-disclosure pattern associated with CVE-2015-6668 Job Manager //filename.ext. Attack pattern: brute-force / enumerate common year/month folders and filename variants to locate accessible files. Indicators: HTTP 200...

minipwner

MiniPwner A script to configure a TP-Link MR3040 running OpenWRT into a simple, yet powerful penetration-testing "drop box". What is the "MiniPwner"? The MiniPwner is a penetration testing "drop box". It is designed as a small, simple but powerful device that can be inconspicuously plugged into a...

EUVD-2026-94676

The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent...

Better-CVE-2022-29464

Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...

cve-2018-10933

CVE-2018-10933 CVE-2018-10933 libssh authentication bypass, a vulnerable Docker container that listens on port 2222 for exploitation. A basic proof-of-concept libssh patch included in the container to bypass auth. To login use the default "myuser" / "mypassword" from libssh. A patch is applied to...