rzweb

RzWeb RzWeb è un'interfaccia di reverse engineering basata su browser, alimentata da Rizin compilato in WebAssembly. Trascina un binario nell'app e analizzalo localmente nel tuo browser con sessione persistente, accesso al terminale, supporto alla riapertura dalla cache e viste dedicate per...

vulnrepo

VULNRΞPO - Generatore di Report di Vulnerabilità e Repository Un gestore di report di vulnerabilità lato client, incentrato sulla privacy, per professionisti della sicurezza. Tutti i dati vengono crittografati e memorizzati localmente nel tuo browser — per impostazione predefinita nulla viene...

ST3GG

root@kitploit: ███████╗████████╗██████╗ ██████╗ ██████╗ ██╔════╝╚══██╔══╝╚════██╗██╔════╝ ██╔════╝ ███████╗ ██║ █████╔╝██║ ███╗██║ ███╗ ╚════██║ ██║ ╚═══██╗██║ ██║██║ ██║ ███████║ ██║ ██████╔╝╚██████╔╝╚██████╔╝ ╚══════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═════╝ ⊰•-•✧ DAS ULTIMATIVE STEGANOGRAPHIE-TOOLKIT ✧•-•⊱...

Reachability-Check

Controllo di Raggiungibilità 🌐 EN | TR Controllo di raggiungibilità basato su browser — testa la connettività di rete, le regole del firewall e le restrizioni di accesso. File HTML singolo. Zero dipendenze. Nessun server web necessario per eseguirlo. Caratteristiche Doppia misurazione: HTTP Fetch...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE Questa PoC dimostra come un attaccante può concatenare di Orange Tsai CVE-2024-4577 con il DNS rebinding per ottenere l'esecuzione remota di codice sull'infrastruttura di rete interna direttamente tramite il browser della vittima. Bypassando la Same-Origin Policy SOP e...

LocalExifGeoMap

Mappa Exif Geo Locale 📍 Uno strumento potente, incentrato sulla privacy, basato su browser per visualizzare e analizzare i dati GPS delle tue foto. Basta trascinare e rilasciare le immagini per generare mappe interattive, mappe di calore, profili di elevazione e statistiche di viaggio. Perché? Ho...

Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js

Scanner de CVEs do GitHub 🔍 Escaneie rapidamente repositórios do GitHub em busca de vulnerabilidades críticas do React e Next.js RSC Visão Geral Um scanner baseado em navegador que verifica todos os repositórios do GitHub em busca de vulnerabilidades de segurança conhecidas em React Server...

die-in-browser

die-in-browser Statische Binäranalyse mit Detect It Easy — 100% im Browser, keine Uploads. 🔍 Was ist das? Dieses Projekt führt Detect It Easy DIE — einen leistungsstarken statischen Binäranalysator — vollständig in Ihrem Browser aus, unter Verwendung des v86-Emulators. ✅ Keine Datei-Uploads :...

China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud

The China-linked threat actor known as Jewelbug has been observed carrying out cyber espionage operations targeting governments and militaries, while simultaneously engaging in cryptocurrency fraud. "Both missions are administered from a single control panel, XG-Web , a browser-centric...

PT-2026-53590

Summary Developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. Due to the longstanding decision by the Ray Development team to not implement any sort of authentication on critical endpoints, like the /api/jobs &...

CVE-2026-1789

A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers...

[SECURITY] Fedora 44 Update: roundcubemail-1.7.1-1.fc44

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

CVE-2026-48133

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

CVE-2026-48133

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

CVE-2026-48133

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

EUVD-2026-31820

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

CVE-2026-48133 Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

CVE-2026-48133

The CVE-2026-48133 issue affects the Identity Awareness blade when Browser-Based Authentication is enabled on the Security Gateway, allowing an unauthenticated attacker to read certain internal files. The NVD entry details no exploitation specifics beyond the unauthenticated local file read, and ...

PT-2026-43237

Name of the Vulnerable Software and Affected Versions Check Point Security Gateway affected versions not specified Description When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

CVE-2026-48133 - Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

Symptoms - When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway. - This issue affects: R82.10 with Jumbo Hotfix Take 6 or below R82 with Jumbo Hotfix Take 91 or below R81.20 with...