lazywarden

Sistema Seguro, Automatizado e Multi-Nuvem de Backup e Importação do Bitwarden Lazywarden é uma ferramenta de automação em Python projetada para fazer Backup e Restaurar dados do seu cofre, incluindo anexos do Bitwarden. Ela permite fazer upload de backups para vários serviços de armazenamento em...

gobuster

Gobuster 💻 Introduzione Uno strumento di brute-forcing veloce e flessibile scritto in Go Gobuster è uno strumento di brute-forcing per directory/file, DNS e virtual host ad alte prestazioni, scritto in Go. È progettato per essere veloce, affidabile e facile da usare per professionisti della...

restic

Einführung restic ist ein Backup-Programm, das schnell, effizient und sicher ist. Es unterstützt die drei wichtigsten Betriebssysteme Linux, macOS, Windows und einige kleinere FreeBSD, OpenBSD. Detaillierte Anweisungen zur Verwendung und Installation findest du in der Dokumentation. Du kannst...

cve-2025-0364

CVE-2025-0364: Bypass de Registro de Conta do BigAntSoft BigAnt Server para RCE via Upload de Arquivo O BigAntSoft BigAnt Server, que fornece um servidor de chat on-premises hospedado em Windows focado em casos de uso empresarial, é vulnerável a execução remota de código não autenticada por meio ...

covert-control

covert-control Controlla sistemi da remoto caricando file su Google Drive, OneDrive, Youtube o Telegram usando Python per creare i file e i listener. Permette di creare file di testo, immagini, audio o video, con i comandi in chiaro o crittografati usando AES. covert-googledrive.py - Controlla...

dumper

Über Dumper Dies ist ein CLI-Dienstprogramm zum Erstellen von Backup-Datenbanken verschiedener Typen mit flexiblen Verbindungs- und Speichereinstellungen. Möglichkeiten: Mehrere Datenbanksysteme können verwaltet werden. Unterstützt PostgreSQL , MySQL , MongoDB usw. Arbeiten mit SSH-Keys mit...

DoodleCloud

DoodleCloud ☁️ Trasforma Instagram nel tuo archivio cloud personale e infinito. DoodleCloud è uno strumento Proof-of-Concept PoC che utilizza l'API interna di Instagram per archiviare file illimitati gratuitamente. Convertendo i file in immagini "Visual Noise" e caricandoli come doodle nei DM,...

SubDomainizer

Offrimi un Caffè SubDomainizer SubDomainizer è uno strumento progettato per trovare sottodomini nascosti e segreti presenti sia in pagine web, che in Github, che in javascript esterni presenti nell'URL dato. Questo strumento trova anche bucket S3, URL di CloudFront e altro da quei file JS che...

S3Scanner

S3Scanner Caratteristiche - Utilizzo - Avvio Rapido - Installazione - Discussioni Uno strumento per trovare bucket S3 aperti in AWS o altri provider cloud: AWS DigitalOcean DreamHost GCP Linode Scaleway Personalizzato Caratteristiche ⚡️ Scansione multi-thread 🔭 Supporta molti provider di...

s3dns

S3DNS s3dns è un server DNS leggero che aiuta a scoprire bucket di cloud storage AWS S3, Google Cloud Storage e Azure Blob risolvendo richieste DNS, tracciando i CNAME e confrontando i pattern URL noti dei bucket. È un pratico compagno per pentester , cacciatori di bug bounty e analisti di...

MAL-2026-14068 Malicious code in depcruise-wrap-stream-in-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce3c6c9707df3626f30cbf434aa298d1df5cda4cf7b06b76ad4c92d04004a1c [email protected] is a hollow package: index.js is module.exports = and the name mimics an internal helper of dependency-cruiser...

EUVD-2026-50562

Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials...

Malicious code in consumerweb-creditcollection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d673b014d7769d23ec9252c38424a3d1e2b400756cafa605f65383d93da348 [email protected] is a hollow package whose main index.js exports an empty object. Its sole runtime effect is pulling in a dependen...

MAL-2026-13441 Malicious code in consumerweb-creditcollection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d673b014d7769d23ec9252c38424a3d1e2b400756cafa605f65383d93da348 [email protected] is a hollow package whose main index.js exports an empty object. Its sole runtime effect is pulling in a dependen...

MAL-2026-13440 Malicious code in connect-contingency (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a03c555705f2bfa2e63b96e9ea5740196d1ea5ca8be0f1acce290c771f01ea [email protected] is a hollow package whose index.js is an empty stub. Its package.json declares its sole dependency ltidisafe as a direct...

Linux Distros Unpatched Vulnerability : CVE-2026-71309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does...

GHSA-GX4C-2HQX-CW2R rclone: S3 backend does not strip X-Amz-Security-Token on a same-host HTTPS->HTTP redirect

Vulnerability Details File: backend/s3/s3.go Lines: 1359-1380 functions s3CheckRedirect / s3RedirectCrossesHost Root Cause Commit e7b1eb774 released in v1.74.3 added a CheckRedirect policy for the S3 HTTP client whose purpose is to strip the X-Amz-Security-Token header the AWS STS session token...

MAL-2026-12465 Malicious code in streak-daykey-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bfd8e4427384eea912513d380b6615e3213b2df455b3dd42e2292467127b307 On module load, index.mjs invokes flushInternalData, which creates /.cache/openlarq, downloads a binary from a base64-obfuscated Backblaze B2 URL...

Malicious code in streak-daykey-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bfd8e4427384eea912513d380b6615e3213b2df455b3dd42e2292467127b307 On module load, index.mjs invokes flushInternalData, which creates /.cache/openlarq, downloads a binary from a base64-obfuscated Backblaze B2 URL...

CVE-2026-47682

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.6.0 through 2.64.0, an attacker with write access to a cloud storage that's been added to a CVAT instance, or ability to add new cloud storages, is able to overwrite arbitrary files on the server...