818 matches found
S3Scanner
S3Scanner Features - Usage - Quick Start - Installation - Discuss A tool to find open S3 buckets in AWS or other cloud providers: AWS DigitalOcean DreamHost GCP Linode Scaleway Custom Features тЪбя╕П Multi-threaded scanning ЁЯФн Supports many built-in S3 storage providers or custom ЁЯХ╡я╕ПтАНтЩАя╕П Scans all...
gobuster
Gobuster ЁЯТ╗ Introduction A fast and flexible brute-forcing tool written in Go Gobuster is a high-performance directory/file, DNS and virtual host brute-forcing tool written in Go. It's designed to be fast, reliable, and easy to use for security professionals and penetration testers. тЬи Features ЁЯЪА...
dumper
About Dumper This is a CLI utility for creating backups databases of various types with flexible connection and storage settings. Opportunities: Multiple database systems can be managed. Support PostgreSQL , MySQL , MongoDB and etc. Work with SSH-Keys include passphrase. Custom dump name template...
s3dns
S3DNS s3dns рдПрдХ рд╣рд▓реНрдХрд╛ DNS рд╕рд░реНрд╡рд░ рд╣реИ рдЬреЛ DNS рдЕрдиреБрд░реЛрдзреЛрдВ рдХреЛ рд╣рд▓ рдХрд░рдХреЗ, CNAME рдХреЛ рдЯреНрд░реЗрд╕ рдХрд░рдХреЗ рдФрд░ рдЬреНрдЮрд╛рдд рдмрдХреЗрдЯ URL рдкреИрдЯрд░реНрди рд╕реЗ рдорд┐рд▓рд╛рди рдХрд░рдХреЗ рдХреНрд▓рд╛рдЙрдб рд╕реНрдЯреЛрд░реЗрдЬ рдмрдХреЗрдЯ AWS S3, Google Cloud Storage, рдФрд░ Azure Blob рдХрд╛ рдкрддрд╛ рд▓рдЧрд╛рдиреЗ рдореЗрдВ рдорджрдж рдХрд░рддрд╛ рд╣реИред рдпрд╣ рдкреЗрдирдЯреЗрд╕реНрдЯрд░реНрд╕ , рдмрдЧ рдмрд╛рдЙрдВрдЯреА рд╣рдВрдЯрд░реНрд╕ рдФрд░ рдХреНрд▓рд╛рдЙрдб рд╕реБрд░рдХреНрд╖рд╛ рд╡рд┐рд╢реНрд▓реЗрд╖рдХреЛрдВ рдХреЗ рд▓рд┐рдП рдПрдХ рдЙрдкрдпреЛрдЧреА рд╕рд╛...
SubDomainizer
Buy Me A Coffee SubDomainizer SubDomainizer is a tool designed to find hidden subdomains and secrets present is either webpage, Github, and external javascripts present in the given URL. This tool also finds S3 buckets, cloudfront URL's and more from those JS files which could be interesting like...
covert-control
рдХреЛрд╡рд░реНрдЯ-рдХрдВрдЯреНрд░реЛрд▓ рдлрд╝рд╛рдЗрд▓реЛрдВ рдХреЛ Google Drive, OneDrive, Youtube рдпрд╛ Telegram рдкрд░ рдЕрдкрд▓реЛрдб рдХрд░рдХреЗ рд╕рд┐рд╕реНрдЯрдо рдХреЛ рджреВрд░рд╕реНрде рд░реВрдк рд╕реЗ рдирд┐рдпрдВрддреНрд░рд┐рдд рдХрд░реЗрдВред рдлрд╝рд╛рдЗрд▓реЗрдВ рдФрд░ рд▓рд┐рд╕рдирд░ рдмрдирд╛рдиреЗ рдХреЗ рд▓рд┐рдП Python рдХрд╛ рдЙрдкрдпреЛрдЧ рдХрд░реЗрдВред рдпрд╣ рдЯреЗрдХреНрд╕реНрдЯ рдлрд╝рд╛рдЗрд▓реЗрдВ, рдЗрдореЗрдЬ, рдСрдбрд┐рдпреЛ рдпрд╛ рд╡реАрдбрд┐рдпреЛ рдмрдирд╛рдиреЗ рдХреА рдЕрдиреБрдорддрд┐ рджреЗрддрд╛ рд╣реИ, рдЬрд┐рд╕рдореЗрдВ рдХрдорд╛рдВрдб рд╕рд╛рджреЗ рдкрд╛рда рдореЗрдВ рдпрд╛ AES рдХрд╛ рдЙрдкрдпреЛрдЧ рдХрд░рдХреЗ...
EUVD-2026-70489
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxyapi.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents...
DoodleCloud
DoodleCloud тШБя╕П Instagram рдХреЛ рдЕрдкрдиреЗ рд╡реНрдпрдХреНрддрд┐рдЧрдд, рдЕрд╕реАрдорд┐рдд рдХреНрд▓рд╛рдЙрдб рд╕реНрдЯреЛрд░реЗрдЬ рдореЗрдВ рдмрджрд▓реЗрдВред DoodleCloud рдПрдХ Proof-of-Concept PoC рдЯреВрд▓ рд╣реИ рдЬреЛ Instagram рдХреЗ рдЖрдВрддрд░рд┐рдХ API рдХрд╛ рдЙрдкрдпреЛрдЧ рдХрд░рдХреЗ рдореБрдлреНрдд рдореЗрдВ рдЕрд╕реАрдорд┐рдд рдлрд╝рд╛рдЗрд▓реЗрдВ рд╕рдВрдЧреНрд░рд╣реАрдд рдХрд░рддрд╛ рд╣реИред рдлрд╝рд╛рдЗрд▓реЛрдВ рдХреЛ "рд╡рд┐рдЬрд╝реБрдЕрд▓ рдиреЙрдЗрдЬрд╝" рдЫрд╡рд┐рдпреЛрдВ рдореЗрдВ рдкрд░рд┐рд╡рд░реНрддрд┐рдд рдХрд░рдХреЗ рдФрд░ рдЙрдиреНрд╣реЗрдВ DM рдбреВрдбрд▓ рдХреЗ рд░реВрдк рдореЗрдВ рдЕрдкрд▓реЛрдб рдХрд░рдХреЗ,...
restic
Introduction restic est un programme de sauvegarde rapide, efficace et s├йcuris├й. Il prend en charge les trois principaux syst├иmes d'exploitation Linux, macOS, Windows et quelques autres moins r├йpandus FreeBSD, OpenBSD. Pour des instructions d├йtaill├йes d'utilisation et d'installation, consultez la...
lazywarden
рд╕реБрд░рдХреНрд╖рд┐рдд, рд╕реНрд╡рдЪрд╛рд▓рд┐рдд рдФрд░ рдорд▓реНрдЯреА-рдХреНрд▓рд╛рдЙрдб рдмрд┐рдЯрд╡рд░реНрдбрди рдмреИрдХрдЕрдк рдФрд░ рдЖрдпрд╛рдд рдкреНрд░рдгрд╛рд▓реА Lazywarden рдПрдХ Python рдСрдЯреЛрдореЗрд╢рди рдЯреВрд▓ рд╣реИ рдЬреЛ рдЖрдкрдХреЗ рд╡реЙрд▓реНрдЯ рд╕реЗ рдбреЗрдЯрд╛ рдХрд╛ рдмреИрдХрдЕрдк рдФрд░ рдкреБрдирд░реНрд╕реНрдерд╛рдкрди рдХрд░рдиреЗ рдХреЗ рд▓рд┐рдП рдбрд┐рдЬрд╝рд╛рдЗрди рдХрд┐рдпрд╛ рдЧрдпрд╛ рд╣реИ, рдЬрд┐рд╕рдореЗрдВ Bitwarden рдЕрдЯреИрдЪрдореЗрдВрдЯ рд╢рд╛рдорд┐рд▓ рд╣реИрдВред рдпрд╣ рдЖрдкрдХреЛ рдХрдИ рдХреНрд▓рд╛рдЙрдб рд╕реНрдЯреЛрд░реЗрдЬ рд╕реЗрд╡рд╛рдУрдВ рдкрд░ рдмреИрдХрдЕрдк рдЕрдкрд▓реЛрдб рдХрд░рдиреЗ рдФрд░ рдХрдИ рдкреНрд▓реЗрдЯрдлрд╛рд░реНрдореЛрдВ рдкрд░...
cve-2025-0364
CVE-2025-0364 : Contournement de l'inscription de compte BigAntSoft BigAnt Server menant ├а un RCE par t├йl├йversement de fichier Le serveur BigAnt de BigAntSoft, un serveur de messagerie d'entreprise h├йberg├й sur Windows et destin├й aux cas d'usage professionnels, est vuln├йrable ├а une ex├йcution de co...
MAL-2026-14068 Malicious code in depcruise-wrap-stream-in-html (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce3c6c9707df3626f30cbf434aa298d1df5cda4cf7b06b76ad4c92d04004a1c [email protected] is a hollow package: index.js is module.exports = and the name mimics an internal helper of dependency-cruiser...
EUVD-2026-50562
Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials...
Malicious code in consumerweb-creditcollection (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d673b014d7769d23ec9252c38424a3d1e2b400756cafa605f65383d93da348 [email protected] is a hollow package whose main index.js exports an empty object. Its sole runtime effect is pulling in a dependen...
MAL-2026-13441 Malicious code in consumerweb-creditcollection (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d673b014d7769d23ec9252c38424a3d1e2b400756cafa605f65383d93da348 [email protected] is a hollow package whose main index.js exports an empty object. Its sole runtime effect is pulling in a dependen...
MAL-2026-13440 Malicious code in connect-contingency (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a03c555705f2bfa2e63b96e9ea5740196d1ea5ca8be0f1acce290c771f01ea [email protected] is a hollow package whose index.js is an empty stub. Its package.json declares its sole dependency ltidisafe as a direct...
Linux Distros Unpatched Vulnerability : CVE-2026-71309
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does...
GHSA-GX4C-2HQX-CW2R rclone: S3 backend does not strip X-Amz-Security-Token on a same-host HTTPS->HTTP redirect
Vulnerability Details File: backend/s3/s3.go Lines: 1359-1380 functions s3CheckRedirect / s3RedirectCrossesHost Root Cause Commit e7b1eb774 released in v1.74.3 added a CheckRedirect policy for the S3 HTTP client whose purpose is to strip the X-Amz-Security-Token header the AWS STS session token...
MAL-2026-12465 Malicious code in streak-daykey-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bfd8e4427384eea912513d380b6615e3213b2df455b3dd42e2292467127b307 On module load, index.mjs invokes flushInternalData, which creates /.cache/openlarq, downloads a binary from a base64-obfuscated Backblaze B2 URL...
Malicious code in streak-daykey-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bfd8e4427384eea912513d380b6615e3213b2df455b3dd42e2292467127b307 On module load, index.mjs invokes flushInternalData, which creates /.cache/openlarq, downloads a binary from a base64-obfuscated Backblaze B2 URL...