CVE-2026-100694

A flaw was found in Hugo. When processing content files mapped to the Org Mode media type, Hugo renders raw HTML export blocks and snippets without proper escaping. An attacker who can influence or supply content files can exploit this vulnerability to conduct cross-site scripting XSS, executing...

CVE-2026-86334

Canonical LXD versions 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms are vulnerable to a path traversal flaw in the CLI client image export and copy functionality. A remote malicious or machine-in-the-middle image server can exploit this by sending a crafted Content-Disposition h...

CVE-2026-101069 dbgate Export databaseConnections.js exportModelSql path traversal

A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/src/controllers/databaseConnections.js of the component Export Handler. Executing a manipulation of the argument outputFile can lead to path traversal. The attack can be executed...

CVE-2026-101069

A path traversal vulnerability exists in dbgate versions up to 7.3.1 . The flaw is located within the Export Handler component, specifically in the exportModelSql function of the file packages/api/src/controllers/databaseConnections.js. By manipulating the outputFile argument, an attacker can per...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

Sniffle

Sniffle Sniffle is a sniffer for Bluetooth 5 and 4.x LE using TI CC1352/CC26x2 hardware. Sniffle has a number of useful features, including: Support for BT5/4.2 extended length advertisement and data packets Support for BT5 Channel Selection Algorithms 1 and 2 Support for all BT5 PHY modes regula...

pecli

PEcli Herramienta para analizar archivos PE en Python 3. Características actuales: Muestra información sobre el archivo importaciones, exportaciones, recursos Busca información interesante en el archivo recursos anómalos, PEiD... Vuelca dump secciones o recursos Verifica el tamaño Busca una caden...

prithvi

Prithvi Una herramienta de generación de informes para evaluación de seguridad Uso Este proyecto nuestro se puede utilizar para la generación de informes y es muy fácil de usar. Incluye las siguientes características 1. Podemos agregar tipos Owasp y recomendaciones con detalles. 2. Podemos agrega...

Nessus_Map

Nessus Map Nessus XML Praser Requisitos Python3 Django Probado en Ubuntu 18.04 Windows 11 Pro PowerShell Qué hace Análisis basado en vulnerabilidades Análisis basado en servicios Análisis basado en hosts Análisis de SO no compatibles Generar resumen ejecutivo del escaneo Exportar archivos .nessus...

Pentest-Collaboration-Framework

Pentest Collaboration Framework Pentest Collaboration Framework - an opensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing! Explore the docs » ‼️ Important Links...

ConditionalAccessDocumentation

Document Conditional Access with PowerShell This PowerShell script documents your Microsoft Entra Conditional Access policies. The script exports all data as a csv file which can be pretty formatted as excel workbook. To ensure all policies can be retrieved and documented the script uses the...

defenseclaw

root@kitploit: / \ / / / || | / / / / / / /// \ / \ / |/ | | | |/ |\ \ /\ / / / // / / / // /| | | |\ \ /| | | | | | \ V V / // // / || |||/| |||,| // DefenseClaw Security governance for OpenClaw and agentic AI runtimes. Scan capabilities before use, inspect runtime traffic, and export...

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

DllShimmer

DllShimmer Weaponize DLL hijacking easily. Backdoor any function in any DLL without disrupting normal process operation. How it works DllShimmer parses the original DLL and extracts information about exported functions name, ordinal number, and forwarder info. Based on this information, DllShimme...

TwitterSearch2Gephi

TwitterSearch2Gephi TwitterSearch2Gephi es una aplicación CLI para Windows que permite recopilar datos de redes sociales y convertirlos en un conjunto de datos CSV que se puede utilizar con Gephi. Actualmente es compatible con Twitter Reddit Youtube Dominios / URLs de WWW Se añadirán más...

BurpCopyIssues

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. BurpCopyIssues Burp Suite extension for browsing, copying, and exporting scan...

rapiddns-cli

RapidDNS CLI 中文文档 Una interfaz de línea de comandos potente para interactuar con la API de RapidDNS. Esta herramienta te permite realizar búsquedas DNS, consultas avanzadas y exportaciones de datos a gran escala directamente desde tu terminal. Características Búsqueda DNS : Buscar por dominio, IP...

fofa_viewer

Descarga de release · Reportar Bug · Solicitar funciones Chino | EN Introducción Fofa Viewer es un cliente FOFA fácil de usar escrito en JavaFX, que pertenece a la comunidad WgpSec y es mantenido principalmente por f1ashine. Utiliza el potente motor de búsqueda de Internet FoFa, encapsula muchas...

HookDump

HookDump Volcado de hooks de funciones EDR Consulte la publicación del blog de Zeroperil para más información https://zeroperil.co.uk/hookdump/ Compilación del código fuente Para compilarlo necesitará Visual Studio 2019 la edición Community es suficiente y CMake. El archivo por lotes Configure.ba...

CVE-2016-4437

shiro-1.2.4 Vulnerability Tool Decrypt rememberMe value and export corresponding class file Usage xk-mt-rememberMe解码.py Instructions: After running, first enter the key or press Enter to use the default key 'kPH+bIxk5D2deZiIxcaaaA==', then enter the rememberMe value from the request packet. After...