2551 matches found
RelayKing-Depth
RelayKing v1.10 Dominez le domaine. Relayer vers la royauté. RelayKing est un outil complet de détection et d'énumération de relais conçu pour identifier les opportunités d'attaques par relais dans les environnements Active Directory. Véritables options de rapport. Couverture complète des attaque...
jackson
Análise e Remediação de Vulnerabilidades de Segurança no Jackson core 2.13.5 CVE-2025-52999 SNYK-JAVA-COMFASTERXMLJACKSONCORE-15365924 SNYK-JAVA-COMFASTERXMLJACKSONCORE-15907551 GHSA-2m67-wjpj-xhg9 SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538 Sonatype-2022-6438 Este branch...
jshole
jshole A simple JavaScript components vulnrability scanner, based on RetireJS. Why use JShole instead of RetireJS? By default, RetireJS only searches one page, but JShole tries to crawl all pages. Get Started Requirements requests Install git clone https://github.com/callforpapers-source/jshole.g...
bug-bounty-findings-o-research-disclosures.
bug-bounty-findings-o-research-disclosures. مكافأة الثغرات: تم تحديد ثغرة IDOR برقم CVE-2023-50839 في مكوّن دعم تابع لجهة خارجية عبر 'gau' و'Nuclei'. على الرغم من عمليات إعادة التوجيه المحيطية، ظل البرنامج القديم مكشوفًا. تم التأكيد عبر تحليل الترويسات يدويًا. الخطورة: 5.3 متوسطة. التركيز على...
AgentWard
AgentWard · 玄甲OS AgentWard 玄甲 è un sistema operativo di sicurezza full-stack progettato specificamente per il deployment affidabile e scalabile di agenti AI, con adattamento nativo del codice a OpenClaw. AgentWard unifica l'onboarding degli agenti, il ragionamento sicuro e l'esecuzione affidabile...
CVE-2026-442_
CVE protobuf.js CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44294, CVE-2026-44295 - protobuf.js ⚡ Utilisation simple Utilisez ce projet uniquement dans des environnements sécurisés et autorisés tels que : Machines virtuelles locales Conteneurs Docker Configurations de...
fence
Fence يُغلف الأوامر في صندوق رمل يمنع الوصول إلى الشبكة افتراضيًا ويُقيد عمليات نظام الملفات بناءً على قواعد قابلة للتكوين. وهو مفيد جدًا لتشغيل كود شبه موثوق تثبيت الحزم، نصوص البناء، وظائف CI، المستودعات غير المألوفة مع آثار جانبية مُتحكّم بها، ويمكن أيضًا أن يُكمّل وكلاء الترميز بالذكاء...
CVE-2026-76957
A flaw was found in libexpat. The library's handling of custom encoding callbacks lacks proper tracking of handler call depth, which can lead to a use-after-free vulnerability. This memory corruption flaw could allow a local attacker to cause a denial of service or potentially execute arbitrary...
katana
A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
pmg
Package Manager Guard PMG Schädliche npm- und pip-Pakete blockieren, bevor sie installiert werden. Verteidigung in der Tiefe für die Paketmanager, die Sie bereits verwenden. Warum PMG? Entwickler und KI-Codierungsagenten installieren täglich Pakete. Jedes npm install oder pip install führt Tausen...
jsonorg-fp3
json.org CVE-2022-45688 falso positivo Il progetto contiene una dipendenza json.org con CVE-2022-45688. Il progetto invoca sì la classe vulnerabile, ma i dati di input vengono sanificati con un semplice metodo che conta i caratteri , stimando quindi la profondità massima dell'albero DOM da genera...
graphql-threat-matrix
GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...
CVE-2025-14174-analysis
Analisi di CVE-2025-14174: Scrittura fuori dai limiti dello Staging Buffer Metal di ANGLE Analisi tecnica e proof-of-concept per CVE-2025-14174...
sqlmc
SQLMC - Controllo Massivo di SQL Injection Demo Informazioni Questo strumento è solo per scopi educativi, l'uso di SQLMC per attaccare target senza il preventivo consenso reciproco è illegale. Gli sviluppatori non si assumono alcuna responsabilità e non sono responsabili per qualsiasi uso impropr...
CVE-2026-53531
RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, RaTeX’s recursive-descent parser recurses one or more native stack frame per nesting level at , \left, \sqrt, ^, etc, with no maximum depth limit. A short, 10 KB input of nested groups overflows the 8 MB...
Exploit for Heap-based Buffer Overflow in Google Chrome
CVE-2026-76036 — Dawn WebGPU NPOT Depth/Stencil Mipmap Detec...
h2buster
h2buster v0.4d A fast, threaded, recursive, web directory brute-force scanner over HTTP/2 using hyper, inspired by Gobuster. Features Fast and portable - install hyper and run. Multiconnection scanning. Multithreaded connections. Scalable: scans can be as docile or aggressive as you configure the...