TurkoRat

TELEGRAM VERSION ⚔️ TurkoRat 🛡️ Telegram server: https://t.me/turcoflex Discord server: https://discord.gg/xTsJReFG84 neuem Discord beitreten 🌐 〢 Inhalt 📁 Einrichtung ⚔️ Funktionen 📸 Screenshots 📝 To-do 📜 Lizenz ⚠️ Hinweis 📁 〢 Einrichtung Installiere Node.js WICHTIG: Installiere bei der...

cirro

Cirro ist eine erweiterbare Sicherheitsforschungsplattform, die es Forschern und Penetrationstestern ermöglicht, Cloud-Umgebungen und Identitätsbeziehungen über Graphdatenbanken zu sammeln, zu analysieren und zu visualisieren. Mit einer modularen Architektur aufgebaut, kann Cirro erweitert werden...

sarenka

♥ Kostenlose Software, benötigt nur kostenlose Konten bei Drittanbieterdiensten ♥ Mangel an Wissen ... das ist das Problem. William Edwards Deming SARENKA ist ein Open Source Intelligence OSINT-Tool, das Ihnen hilft, die Angriffsfläche zu ermitteln und zu verstehen. Das Hauptziel ist das Sammeln...

EUVD-2026-96125

The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens...

spyse.py

spyse.py Python API wrapper and command-line client for the tools hosted on spyse.com. "Spyse is a developer of complete DAAS Data-As-A-Service solutions for Internet security professionals, corporate and remote system administrators, SSL / TLS encryption certificate providers, data centers and...

exfil-scan

exfil-scan Analise saídas de LLM e conteúdo gerado por IA para sinais de exfiltração de dados antes que eles cheguem a usuários, logs ou sistemas a jusante. 1 Por que o exfil-scan existe Aplicações modernas de LLM processam rotineiramente prompts sensíveis, documentos internos, respostas de API e...

cyberchef-recipes

O CyberChef é o autodenominado 'Canivete Suíço Cibernético' criado pelo GCHQ. É uma ferramenta fantástica para transformação, extração e manipulação de dados no seu navegador web. Todo o crédito ao @GCHQ por produzir a ferramenta. Veja: https://gchq.github.io/CyberChef/ Dicas Gerais Baixe o...

CVE-2025-55182

Was ist CVE-2025-55182? Auch bekannt als React2Shell, handelt es sich um eine Schwachstelle in React Server Components, die durch einen strukturellen Fehler bei der Deserialisierung von Daten zu einer Prototype Pollution führt und so RCE Remote Code Execution ermöglicht. Betroffene Versionen sind...

Magento-CVE-2019-7139-SQLi-PoC

CVE-2019-7139 PoC: Magento SQL-Injection Dieses Repository enthält einen Proof-of-Concept PoC Exploit für CVE-2019-7139 PRODSECBUG-2198, eine nicht authentifizierte SQL-Injection-Schwachstelle in Magento, entdeckt von Charles Fol von Ambionics Security. Schwachstellendetails CVE ID : CVE-2019-713...

CVE-2026-58025

CVE-2026-58025 — RCE por desserialização de PHP no MediaWiki via importação de entrada de log WikiImporter → LogEntryBase::extractParams → unserialize de logparams controlados pelo usuário → RCE Visão Geral CVE-2026-58025 é uma vulnerabilidade crítica CVSS 9.8 de desserialização de dados não...

rapiddns-cli

RapidDNS CLI 中文文档 Eine leistungsstarke Kommandozeilenschnittstelle für die Interaktion mit der RapidDNS API. Dieses Tool ermöglicht DNS-Suchen, erweiterte Abfragen und den Export großer Datenmengen direkt vom Terminal aus. Funktionen DNS-Suche : Suche nach Domain, IP oder CIDR. Erweiterte Abfrage...

Simple-Live-Data-Collection

Einfaches Live-Datenerfassungstool So funktioniert es? 1- Server erstellen 2- Verbinden Sie Admin und Client mit dem Server 3- Um Informationen zu sammeln, senden Sie die Anfrage über den Admin an den Server und dann an den Client Installation git clone...

CVE-2022-36539

CVE-2022-36539 Referência Direta Insegura a Objetos IDOR WeDayCare B.V. O WeDayCare B.V Ouderapp anterior à v1.1.22 permite que invasores alterem o valor do ID em chamadas interceptadas para obter acesso a dados de outros pais e filhos. O tráfego com a API é tornado transparente por meio de um...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

CVE-2026-103912

The JetFormBuilder WordPress plugin (versions 3.6.6 and below ) is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping involving the parameter. Unauthenticated attackers can inject arbitrary web scripts by tricking ...

CVE-2026-103912 JetFormBuilder <= 3.6.6 - Reflected DOM-Based Cross-Site Scripting via 'query_var' Dynamic Preset via data-jfb-macro / JFB_FIELD:: Macro Renderer

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the '' parameter in all versions up to, and including, 3.6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-14877

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.12.03 . The root cause is insufficient input sanitization and output escaping within the id attribute of the table component. This flaw allows authe...

EUVD-2026-96111

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14877 Data Tables Generator by Supsystic <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table 'id' HTML Attribute

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-104723 LifterLMS <= 10.2.1 - Authenticated (Custom+) PHP Object Injection via 'custom' Lesson Data

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above, ...