Horn3t

Horn3t 🐝 - बेहतर सबडोमेन रिकॉनिसेंस रिकॉन करें अपने लक्ष्यों को तेज़ गति से बढ़ाएँ अपनी उत्पादकता दिलचस्प दिखने वाली साइटों पर ध्यान केंद्रित करके गणना करें महत्वपूर्ण साइटों की तुरंत डंक मारें अपने लक्ष्य को Horn3t आपका नंबर 1 टूल है जो सबडोमेन को दृश्य रूप से खोजने के लिए है। महान Sublist3r...

url-status-checker

مدقق الحالة مدقق حالة URL v2.1 مدقق الحالة هو سكريبت بايثون يتحقق من حالة عنوان URL واحد أو أكثر ويصنفها بناءً على رموز حالة HTTP الخاصة بها. الإصدار 2.1.0 الميزات التحقق من حالة عنوان URL واحد أو أكثر. طلبات HTTP غير متزامنة لتحسين الأداء. متابعة عمليات إعادة التوجيه. تتبع جميع عناوين IP المعنية...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

Parsero

ما هو Parsero؟ Parsero هو سكربت مجاني مكتوب بلغة Python يقرأ ملف Robots.txt الخاص بخادم ويب وينظر في إدخالات Disallow. تخبر إدخالات Disallow محركات البحث بالدلائل أو الملفات المستضافة على خادم الويب والتي يجب ألا تتم فهرستها. على سبيل المثال، "Disallow: /portal/login" تعني أن المحتوى الموجود على...

CVE-2026-55227 Observable object existence disclosure in private Weblate projects via globally scoped object lookups

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

CVE-2026-55998

The CVE describes an unauthenticated import endpoint vulnerability: /v3/import/{token}_{clusterId}.yaml returns 502 for valid cluster IDs that reference clusters with private registry secrets due to a null pointer dereference in pkg/systemtemplate/private_registry.go ; non-existent cluster IDs re...

CVE-2026-42041

CVE-2026-42041 affects Axios, a promise-based HTTP client for browser and Node.js. The issue is a prototype pollution gadget in the validateStatus merge strategy (uses the in operator), allowing pollution of Object.prototype to cause HTTP error responses (401/403/500, etc.) to be treated as succe...

Axios 授权问题漏洞

Axios is an open-source HTTP client developed by Axios. Versions prior to Axios 1.15.1 and 0.31.1 have a vulnerability related to authorization. This vulnerability stems from the use of the mergeDirectKeys merging strategy in validateStatus. This strategy uses the in operator to traverse the...

FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel

Summary The /api/auth/login authentication endpoint does not execute in constant time. When a non-existent username is supplied, the server returns a 401/403 response almost immediately. When a valid username is provided, the server performs a bcrypt password comparison, causing a measurable dela...

EUVD-2013-5850

Malware in sbrugna...

EUVD-2006-5710

Malware in sbrugna...

EUVD-2023-58908

Malicious code in bioql PyPI...

SUSE CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

Malicious code in es6-http-status-codes (npm)

The package es6-http-status-codes was found to contain malicious code...

Exploit for CVE-2025-46047

CVE-2025-46047 Silverpeas -u Example...

Url-Status-Checker - Tool For Swiftly Checking The Status Of URLs

Status Checker is a Python script that checks the status of one or multiple URLs/domains and categorizes them based on their HTTP status codes. Version 1.0.0 Created BY BLACK-SCORP10 t.me/BLACK-SCORP10 Features Check the status of single or multiple URLs/domains. Asynchronous HTTP requests for...

Exploit for CVE-2023-22622

DoS WP-Cron - CVE-2023-22622 Exploit PoC Overview This re...

PT-2023-31411 · Elastic · Agent +2

Name of the Vulnerable Software and Affected Versions: Beats versions prior to 7.17.16 Beats versions prior to 8.11.3 Elastic Agent versions prior to 7.17.16 Elastic Agent versions prior to 8.11.3 Description: An issue was discovered whereby Beats and Elastic Agent would log a raw event in its ow...

K15939: pl_tree.php XSS vulnerability CVE-2014-9342

Security Advisory Description Cross-site scripting XSS vulnerability in the tree view pltree.php feature in Application Security Manager ASM in F5 BIG-IP 11.3.0 allows remote attackers to inject arbitrary web script or HTML by accessing a crafted URL during automatic policy generation...

CVE-2021-43206

A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.x and FortiProxy 7.0.0 through 7.0.1, 2.0.x allows malicious webservers to retrieve a web proxy's client username and IP via same origin HTTP requests...