Horn3t

Horn3t 🐝 - 더 나은 서브도메인 정찰 정찰 - 번개처럼 빠른 속도로 타겟 정찰 생산성 향상 - 흥미로운 외형 의 사이트에 집중하여 생산성 향상 즉시 열거 - 중요 사이트 즉시 열거 타겟을 찌르세요 Horn3t은 서브도메인을 시각적으로 탐색하는 최고의 도구입니다. 훌륭한 Sublist3r 프레임워크를 기반으로 또는 원하는 것으로 확장 가능 서브도메인을 검색하고 멋진 사진 미리보기를 생성합니다. HTTP 상태 코드로 타겟에 대한 빠른 개요를 얻고, 사용자 정의 발견 서브도메인을 추가하며, 한 번의 클릭으로 발견된 URL에...

url-status-checker

ステータスチェッカー URLステータスチェッカー v2.1 ステータスチェッカーは、1つまたは複数のURL/ドメインのステータスをチェックし、HTTPステータスコードに基づいて分類するPythonスクリプトです。 バージョン 2.1.0 特徴 単一または複数のURL/ドメインのステータスをチェック パフォーマンス向上のための非同期HTTPリクエスト リダイレクトを追跡 関連するすべてのIPアドレスを追跡 ステータスコードの視認性を高める色分けされた出力 複数URLチェック時のプログレスバー 結果を出力ファイルに保存 アクセス不能なURLや無効なレスポンスに対するエラーハンドリング...

Parsero

Parsero란 무엇인가? Parsero는 Python으로 작성된 무료 스크립트로, 웹 서버의 Robots.txt 파일을 읽고 Disallow 항목을 확인합니다. Disallow 항목은 검색 엔진에 웹 서버에 호스팅된 디렉터리나 파일이 인덱싱되면 안 된다는 것을 알려줍니다. 예를 들어, "Disallow: /portal/login"은 www.example.com/portal/login의 콘텐츠가 Google, Bing, Yahoo 등 크롤러에 의해 인덱싱되는 것이 허용되지 않는다는 의미입니다. 이것은 관리자가 검색 엔진과...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

SUSE CVE-2026-55227

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

CVE-2026-55227 Observable object existence disclosure in private Weblate projects via globally scoped object lookups

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

CVE-2026-55998

The CVE describes an unauthenticated import endpoint vulnerability: /v3/import/{token}_{clusterId}.yaml returns 502 for valid cluster IDs that reference clusters with private registry secrets due to a null pointer dereference in pkg/systemtemplate/private_registry.go ; non-existent cluster IDs re...

CVE-2026-42041

Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution to silently suppress all HTTP error responses 401, 403, 500, etc., causing them to be...

Axios 授权问题漏洞

Axios is an open-source HTTP client developed by Axios. Versions prior to Axios 1.15.1 and 0.31.1 have a vulnerability related to authorization. This vulnerability stems from the use of the mergeDirectKeys merging strategy in validateStatus. This strategy uses the in operator to traverse the...

FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel

Summary The /api/auth/login authentication endpoint does not execute in constant time. When a non-existent username is supplied, the server returns a 401/403 response almost immediately. When a valid username is provided, the server performs a bcrypt password comparison, causing a measurable dela...

EUVD-2006-5710

Malware in sbrugna...

EUVD-2013-5850

Malware in sbrugna...

EUVD-2023-58908

Malicious code in bioql PyPI...

SUSE CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

CVE-2025-54291: Generation of Error Message Containing Sensitive Information

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

Malicious code in es6-http-status-codes (npm)

The package es6-http-status-codes was found to contain malicious code...

Exploit for CVE-2025-46047

CVE-2025-46047 Silverpeas -u Example...

Url-Status-Checker - Tool For Swiftly Checking The Status Of URLs

Status Checker is a Python script that checks the status of one or multiple URLs/domains and categorizes them based on their HTTP status codes. Version 1.0.0 Created BY BLACK-SCORP10 t.me/BLACK-SCORP10 Features Check the status of single or multiple URLs/domains. Asynchronous HTTP requests for...

Exploit for CVE-2023-22622

DoS WP-Cron - CVE-2023-22622 Exploit PoC Overview This re...

PT-2023-31411 · Elastic · Agent +2

Name of the Vulnerable Software and Affected Versions: Beats versions prior to 7.17.16 Beats versions prior to 8.11.3 Elastic Agent versions prior to 7.17.16 Elastic Agent versions prior to 8.11.3 Description: An issue was discovered whereby Beats and Elastic Agent would log a raw event in its ow...