OpenCLAW-P2P

P2PCLAW - Coletivo de Pesquisa Autônomo Descentralizado P2PCLAW é uma rede de pesquisa descentralizada onde agentes de IA e pesquisadores humanos publicam, validam, preservam e avaliam trabalhos científicos por meio de infraestrutura aberta. Artigo público mais recente: arXiv:2604.19792, atualmen...

gitlab-profile

STATUS DO TESTE : ↳ core-orchestrator tester ↳ documentation tester DATA DE CRIAÇÃO: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ Este projeto está em beta! 🎉 Sim! Estamos felizes em anunciar que a versão beta estará em breve completa! A partir da versão 0.153 foram iniciados...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

Invoke-ATTACKAPI

Invoke-ATTACKAPI OBSOLETO RECOMENDAMOS USAR: https://github.com/Cyb3rWard0g/ATTACK-Python-Client Um script PowerShell para interagir com o MITRE ATT&CK Framework através de sua própria API, a fim de coletar informações sobre técnicas, táticas, grupos, softwares e referências fornecidas pela equip...

chatter

9 апреля 2023 заброшенное ПО - извините - занят другими делами. перепишу с нуля на кроссплатформенном языке в обмен на кучу денег. 6 октября 2021 возможно, это скоро перестанет быть заброшенным ПО. на данный момент оно очень нестабильно. хотел бы переписать его с нуля. описание chatter — это proo...

Paste2Web

Paste2Web - बीटा संस्करण एक python3 स्क्रिप्ट जो गुप्त संदेश भेजने और प्राप्त करने के लिए cl1p वेबसाइट का उपयोग करती है यह कैसे काम करता है ? -भेजते समय यह संदेश को शब्दों में विभाजित करता है फिर एक यादृच्छिक शब्द उत्पन्न करता है और इसका उपयोग प्रत्येक शब्द को एक लिंक में अकेले पोस्ट करने के लिए...

Baskerville

Baskerville फ़ाइलों या इंटरफ़ेस से पढ़ता है और निर्दिष्ट निर्देशिका में फ़ाइलों में लिखता है, जिसमें फ़ाइल का नाम प्रत्येक फ़ाइल के पहले पैकेट के unixtime पर आधारित होता है। कुछ प्रोटोकॉल को दबाया जा सकता है, ऐसी स्थिति में केवल पहले N पैकेट डिस्क पर रिकॉर्ड किए जाते हैं। यह डिस्क उपयोग को कम करत...

featherduster

फेदरडस्टर और क्रिप्टैनालिब FeatherDuster मुख्य रूप से Daniel "unicornfurnace" Crowley द्वारा लिखा गया एक टूल है, जिसमें समुदाय के योगदान भी शामिल हैं, जो क्रिप्टो को तोड़ने के लिए है; यह कमजोर क्रिप्टोसिस्टम की पहचान और शोषण की प्रक्रिया को यथासंभव आसान बनाने की कोशिश करता है। Cryptanalib,...

CVE-2026-19965

The CVE-2026-19965 affects automad up to version 2.0.0-beta.32. It targets the Password Reset Endpoint’s requestPasswordResetToken in automad/src/server/Controllers/API/UserController.php, where manipulation of the name-or-email argument causes observable response discrepancies. The issue can be ...

CVE-2026-73421 NextAuth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)

NextAuth.js provides authentication for Next.js. From next-auth 5.0.0-beta.0 until 5.0.0-beta.32, applications that gate access by checking only for the existence of the auth object returned by the auth wrapper can fail open when Auth.js has a server configuration error. In middleware, Route...

CVE-2026-73299 Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer

Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...

CVE-2026-73286

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS getconditionvalues folds attacker-controlled request headers from HeaderMap into server-derived userid, username, principaltype, groups, versionid, signatureversion, jwt:, and ldap: condition keys, allowin...

CVE-2026-73287

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS handles FTPS MKD in FtpsDriver::mkd in crates/protocols/src/ftps/driver.rs by calling storage.createbucket without authorizeoperation for S3Action::CreateBucket, allowing authenticated FTPS users denied...

CVE-2026-73265

RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, CopyObject sources, and UploadPartCopy sources with s3:GetObject instead of s3:GetObjectVersion, allowing principals without historical-version permission to disclose known...

CVE-2026-73290 RustFS: Anonymous ListObjectVersions bypasses RestrictPublicBuckets through the ListBucket fallback

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, an anonymous ListObjectVersions request in rustfs/src/storage/access.rs that lacks a direct bucket-policy grant falls back to an s3:ListBucket check and returns before the policyallowed path applies...

CVE-2026-73284 RustFS: AddServiceAccount Handler Allows Creation of Root-Parent Service Accounts

RustFS is a distributed object storage system built in Rust. RustFS AddServiceAccount in rustfs/src/admin/handlers/serviceaccount.rs accepts an attacker-controlled targetuser after only checking CreateServiceAccountAdminAction, passes it to newserviceaccount, and prepareserviceaccountauth sets...

PT-2026-71089

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS get condition values folds attacker-controlled request headers from HeaderMap into server-derived userid, username, principaltype, groups, versionid, signatureversion, jwt:, and ldap: condition keys,...

Prototype Pollution

Overview mermaid is a package for generation of diagrams and flowcharts from text in a similar manner as markdown. Affected versions of this package are vulnerable to Prototype Pollution via the architecture-beta diagram rendering process. An attacker can inject arbitrary properties with the valu...

Mermaid Architecture diagrams are vulnerable to prototype pollution

Rendering an untrusted architecture-beta diagram lets the diagram author write an arbitrary property with the value horizontal or vertical onto Object.prototype. A group id of proto is accepted as a valid parent. Impact Any code in the same realm that reads a property of that name from an arbitra...

Prototype Pollution

Overview org.webjars.npm:mermaid is a package for generation of diagrams and flowcharts from text in a similar manner as markdown. Affected versions of this package are vulnerable to Prototype Pollution via the architecture-beta diagram rendering process. An attacker can inject arbitrary properti...