CVE-2026-102135 Kiteworks Email Protection Gateway Deserialization of Untrusted Data

On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could submit a crafted serialized object that was deserialized without sufficient validation, potentially allowing code execution as the gateway service account. Replication is disabl...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example $...

lst2x64dbg

lst2x64dbg Este comando extrae todas las etiquetas encontradas en el archivo LST que se proporciona como único argumento. Se crea una base de datos de x64dbg en el directorio actual basada en las etiquetas extraídas. El archivo LST se puede generar en IDA desde el menú Archivo : Producir archivo ...

Cve-api

Parse & filter the latest CVEs from https://cve.mitre.org Docs Usage http://localhost:4000/cve?target=KEYWORD The year parameter is optional. http://localhost:4000/cve?target=KEYWORD&year=YEAR Examples http://localhost:4000/cve?target=ruby%20on%20rails...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

Process-Dump

Process Dump Process Dump is a Windows reverse-engineering command-line tool to dump malware memory components back to disk for analysis. Often malware files are packed and obfuscated before they are executed in order to avoid AV scanners, however when these files are executed they will often...

comission

CoMisSion - WhiteBox CMS analysis CoMisSion is a tool to quickly analyze a CMS setup. The tool: checks for the core version; checks for modifications made on the core additions, alterations, deletions with a fresh archive downloaded from CMS official website; looks for the last core version; look...

CVE-2021-36393

CVE-2021-36393 Error-based blind SQL injection with bit-shifting approach for Moodle 3.10.4. Allows an attacker to perform arbitrary database queries. For example, you can steal: test answers from the database Modify the script.js file and run it on route /mod/quiz/attempt.php?attempt=...&cmid=...

ctftools

CTF-Tool Database Twitter: @hydr0nium Dependencies: sudo apt install python2 Installation: git clone https://github.com/white-hood/ctftools.git cp .ctftools cd /bin ln -s ctftools /path/to/ctftools.py Usage: ./ctftools | normal use ./ctftools --remove | remove tool from database ./ctftools --add ...

OFFPORT_KILLER

.. raw:: html .. raw:: html KILLER PROJECT .. image:: https://img.shields.io/github/last-commit/TH3xACE/OFFPORTKILLER?style=plastic :target: https://github.com/TH3xACE/SUDOKILLER :alt: Last Commit .. raw:: html Manual Port Scanning Enumerate Potential Service If you like the tool and for my...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

CVE-2024-7928

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances. How to Use FOFA : app="FASTADMIN" Install the script requirements: pip install -r requirements.txt Single Target: python CVE-2024-7928.py -u https://target:9090 Bulk Sscan: python CVE-2024-7928.py -f...

CVE-2021-21311

CVE-2021-21311 Description SSRFServer-side Request Forgery in Adminer Open Source Database Management tool from v4.0.0 v4.7.8 patched at v4.7.9 Patch commit Usage exploit.py -h -target TARGET -redirect REDIRECT -host HOST -port PORT options: -h, --help show this help message and exit -target TARG...

slater

Slater Current version:v0.25.2 — all releases. In one line: Slater serves graphs that don't fit in memory — hundreds of millions of nodes and billions of edges in low hundreds of MB of RAM — over standard Bolt , so any neo4j driver just works, with disk-native vector search sitting next to the...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py is a Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool is particularly useful for security researchers and penetration testers. Features Scans URLs for a...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool es una herramienta de pruebas de penetración de código abierto que evalúa la seguridad de bases de datos Oracle de forma remota. Ejemplos de uso de ODAT: Tiene una base de datos Oracle...

DbDat

DbDat Db Database Assessment Tool DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is ...

cve-2025-57819

🛡️ FreePBX Hunter - CVE-2025-57819 🛡️ A powerful Nuclei toolkit for detecting and validating the critical FreePBX authentication bypass vulnerability. 📖 Table of Contents Click to expand About This Project Key Features Vulnerability Breakdown Templates in Action Finding Targets with Shodan Legal...

kcmdump

KCM dumper Script rápido para volcar la base de datos KCM utilizada por SSSD y recuperar tickets de Kerberos en formato CCACHE. Inicialmente basado en SSSDKCMExtractor y KCMTicketFormatter. Descripción Desde la versión 2.0.0 2018-08-13, el almacenamiento backend del respondedor KCM de SSSD ya no...