FudgeC2

FudgeC2 FudgeC2 is a Powershell C2 platform designed to facilitate team collaboration and campaign timelining, released at BlackHat Arsenal USA 2019. This aims to help clients better understand red team activities by presenting them with more granular detail of adversarial techniques. Built on...

Reel

Reel 用于网络钓鱼模拟和安全意识培训的框架，支持可配置工作流、活动管理以及可选凭据代理。 快速开始（运维用途） 1. 克隆仓库并 cd 进入目录。 2. 运行 ./deploy.sh — 假设你在 Ubuntu 上，该脚本会为你配置好所有前置依赖。 3. 运行 ./start.sh --preload-ml。这会启动服务器并预加载我们使用的 ML 模型。 你会获得 http://localhost:8000 上的管理后台 UI 和 http://localhost:1234 上的钓鱼服务器。默认登录：admin / admin123。首次登录后请修改密码。 通过 ssh 将 8000...

FiercePhish

FiercePhish FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more. The features will continue to be expanded and will include website spoofing, click tracking, and extensiv...

gophish

Gophish Gophish: 오픈소스 피싱 툴킷 Gophish는 기업과 침투 테스터를 위해 설계된 오픈소스 피싱 툴킷입니다. 신속하고 쉽게 피싱 캠페인과 보안 인식 교육을 설정하고 실행할 수 있는 기능을 제공합니다. 설치 Gophish 설치는 매우 간단합니다. 시스템에 맞는 릴리스가 포함된 zip 파일을 다운로드하여 압축을 풀고 바이너리를 실행하면 됩니다. Gophish는 Windows, Mac, Linux 플랫폼용 바이너리 릴리스를 제공합니다. 소스에서 빌드하기 소스에서 빌드하는 경우 Gophish에는 Go v1.10 이상...

Cartero

Cartero Cartero is now a Go CLI with an embedded, no-configuration workspace database instead of the old MongoDB-dependent runtime. The current implementation provides: a polished terminal experience powered by Cobra and Lip Gloss a local admin web UI and safe testing pages via cartero serve...

phishing-frenzy

Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...

CVE-2026-9236

CVE-2026-9236 concerns the WordPress plugin CM Ad Changer. The vulnerability is a Cross-Site Request Forgery flaw in all versions up to and including 2.0.7 caused by missing or incorrect nonce validation in the cmac_campaigns_action function. This enables unauthenticated attackers to permanently ...

CVE-2026-42192

Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, a stored cross-site scripting XSS vulnerability exists in the campaign management feature, where the email body content created by authenticated project members is stored and later rendered in the admin...

EUVD-2026-28831

Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, a stored cross-site scripting XSS vulnerability exists in the campaign management feature, where the email body content created by authenticated project members is stored and later rendered in the admin...

CVE-2026-42192 Plunk: Stored XSS in campaign view

Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, a stored cross-site scripting XSS vulnerability exists in the campaign management feature, where the email body content created by authenticated project members is stored and later rendered in the admin...

CVE-2026-42192

Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, a stored cross-site scripting XSS vulnerability exists in the campaign management feature, where the email body content created by authenticated project members is stored and later rendered in the admin...

PT-2026-39195

Name of the Vulnerable Software and Affected Versions Plunk versions prior to 0.9.0 Description A stored cross-site scripting XSS issue exists in the campaign management feature. Authenticated project members can embed malicious scripts in a campaign's email body, which are stored and subsequentl...

PT-2026-34814

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to version 4.4.1, any authenticated user can manually construct a URL to preview campaigns/regions, and export saved reports belonging to other users. Exploitation of th...

listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover

Security Advisory: Stored XSS Leading to Admin Account Takeover Affected Versions: ≤ 5.1.0 Vulnerability Type: CWE-79: Stored Cross-Site Scripting --- Summary A lower-privileged user with campaign management permissions can inject malicious JavaScript into campaigns or templates. When a...

CVE-2026-21483

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to version 6.0.0, lower-privileged user with campaign management permissions can inject malicious JavaScript into campaigns or templates. When a higher-privileged user Super Admin views or previews this content, the...

HCL Unica 安全漏洞

HCL Unica is an enterprise-level marketing automation and campaign management platform from HCL India. A security vulnerability exists in HCL Unica version 12.0.0 that stems from vulnerability to file upload attacks...

EUVD-2013-0393

Malware in sbrugna...

EUVD-2025-1743

Malicious code in bioql PyPI...

编号撤回

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications, and forms from the American company Audobee Adobe. The solution supports mobile content management, marketing and sales campaign management, and multi-site management. Th...

编号撤回

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications, and forms from the American company Audobee Adobe. The solution supports mobile content management, marketing and sales campaign management, and multi-site management. Th...