CVE-2026-79031

Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-72924

GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...

CVE-2026-65088

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

CloakQuest3r

If you find this GitHub repo useful, please consider giving it a star! ⭐️ CloakQuest3r is a Python-based security research tool designed to analyze and identify potential origin IP exposure of websites protected by Cloudflare and other reverse proxy or CDN services. Websites often rely on...

CVE-2026-72924

GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...

CVE-2026-72924

GitHub CLI (gh) versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default, rather than restricting it to loopback. This exposes the forwarded Codespaces service through a wildcard-bound listener on the user's local ...

CVE-2026-72924 GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default

GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...

EUVD-2026-66116

GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...

CVE-2024-28000

CVE-2024-28000 पीओसी यह रिपॉजिटरी LiteSpeed Cache प्लगइन का उपयोग करने वाले WordPress साइटों को प्रभावित करने वाली CVE-2024-28000 भेद्यता के शोषण के लिए उपकरण शामिल करती है। शामिल स्क्रिप्ट एक्सपोज़्ड debug.log फ़ाइलों का पता लगाने और एक विशेषाधिकार वृद्धि भेद्यता के शोषण को स्वचालित करती हैं जो...

kygocera

kygocera CVE-2022-1026 Versione migliorata in Golang del PoC di Rapid7 per CVE-2022-1026 https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ crediti a Aaron Herndon / https://twitter.com/ac3lives saluti a https://github.com/D4RKMATT3R CVE-2022-1026...

phonepe-sensitive-data-exposure-cve-2025-5154

-Archiviazione Locale Non Sicura di Dati Sensibili degli Utenti nell'App Android di PhonePe Non Corretta- Scoperto dahc4 Data del Report: Aprile 2025 Stato CVE: CVE Richiesto In Attesa Richiesta CVE 1862785 per ID CVE 📌 Panoramica È stata scoperta una vulnerabilità locale critica nell'app Android...

CVE-2025-49132

🛡️ Pterodactyl Panel Vulnerability Checker & Exploit Tool ✨ Informazioni Uno script Python che automatizza la scoperta e lo sfruttamento di vulnerabilità nei pannelli Pterodactyl configurati in modo non sicuro. 🔍 Rileva l'esposizione della configurazione sensibile file locale.json. 🔑 Estrae le...

CVE-2025-9209

🍔 RestroPress – Online Food Ordering System 3.0.0 - 3.1.9.2 🛡️ CVE-2025-9209.py — Ferramenta de Exploração e Extração Automática em Massa ⚠️ Visão Geral da Vulnerabilidade RestroPress – Online Food Ordering System as versões 3.0.0 a 3.1.9.2 são afetadas por uma Exposição de Informações sem...

CVE-2024-10140

CVE-2024-10140 यह स्क्रिप्ट /php/managesupplier.php?action=delete&id=32 एंडपॉइंट में पाई गई SQL Injection भेद्यता का दोहन करती है। यह भेद्यता एक हमलावर को id पैरामीटर के माध्यम से मनमाने SQL कमांड इंजेक्ट करने की अनुमति देती है, जिससे डेटाबेस से समझौता हो सकता है और संवेदनशील जानकारी उजागर हो सकत...

BlobHunter

BlobHunter Uno strumento open-source per scansionare gli account di archiviazione blob di Azure alla ricerca di blob aperti pubblicamente. BlobHunter fa parte della ricerca Hunting Azure Blobs Exposes Millions of Sensitive Files. Panoramica BlobHunter ti aiuta a identificare i contenitori di...

bucket-stream

🚨 Bucket Stream não é mais mantido. Se precisar de suporte ou consultoria para seus esforços de red teaming, envie-me um e-mail para [email protected] 🚨 Bucket Stream Encontre buckets interessantes do Amazon S3 monitorando logs de transparência de certificados. Esta ferramenta simplesmente...

sish

sish Tunneling SSH open source per HTTPS, WSS, TCP, alias e SNI. Se ti piace la semplicità della condivisione in stile serveo/ngrok ma vuoi usare SSH semplice e gestire la tua infrastruttura, sish è costruito per questo. Nessun client personalizzato richiesto per gli utenti finali Flussi di lavor...

goblob

Goblob 🫐 Goblob ist ein leichtgewichtiges und schnelles Aufzählungstool, das entwickelt wurde, um die Entdeckung sensibler Informationen zu unterstützen, die öffentlich in Azure-Blobs zugänglich sind. Es kann für verschiedene Forschungszwecke nützlich sein, wie z. B. Schwachstellenbewertungen,...

CVE-2026-65088

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

ledger-app-monero-1.42-vuln

CVE-2020-6861: Extração da chave de gasto do aplicativo Monero da Ledger Repositório de PoC para o artigo: https://deadcode.me/blog/2020/04/25/Ledger-Monero-app-spend-key-extraction.html...