408 matches found
WMD
WMD Weapon of Mass Destruction This is a python tool with a collection of IT security software. The software is incapsulated in "modules". The modules does consist of pure python code and/or external third programs. Main functions 1. To use a module, run the command "use modulecall", e.g. "use...
ThreatHunting
The ThreatHunting Project An informational repo about hunting for adversaries in your IT environment. Be sure to visit ThreatHunting.net for more info about this repo. License Here's the deal, in plain English: This repo is here for the community. You are free to use it for personal or commercial...
HackingAllTheThings
HackingAllTheThings Summary This repository is to keep a structure on my tools an notes that I use when working on archive some IT-Security certifications. Some tools will be written by me and others will be resources found from different locations...
dradis-ce
Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...
Bramble
🌱 Bramble, un nuevo conjunto de herramientas de hacking de código abierto. 📜 Resumen El software de Bramble ha sido diseñado para el proyecto Bramble. Incorpora muchas características de pentesting y seguridad informática. Es fácil de usar y completamente editable. Permite a los principiantes...
hackazon
Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...
CVE-2026-70834
creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61291
creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
EUVD-2018-5740
Malware in sbrugna...
EUVD-2021-16230
Malware in sbrugna...
EUVD-2021-26923
Malware in sbrugna...
EUVD-2023-27677
Malicious code in bioql PyPI...
EUVD-2022-1795
Malicious code in bioql PyPI...
CVE-2024-51094
An issue in Snipe-IT v.7.0.13 build 15514 allows a low-privileged attacker to modify their profile name and inject a malicious payload into the "Name" field. When an administrator later accesses the People Management page, exports the data as a CSV file, and opens it, the injected payload will be...
North Korean Hackers Stole $88M by Posing as US Tech Workers
Flashpoint uncovers how North Korean hackers used fake identities to secure remote IT jobs in the US, siphoning…...
The IT help desk kindly requests you read this newsletter
Welcome to this week's edition of the Threat Source newsletter. Authority bias is one of the many things that shape how we think. Taking the advice of someone with recognized authority is often far easier and usually leads to a better outcome than spending time and effort in researching the...
Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Envoy denial of service vulnerabilitiy( CVE-2024-45810).
Summary Potential Envoy denial of service vulnerabilitiy CVE-2024-45810 has been identified that affects IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-45810 DESCRIPTION: Envoy is vulnerable to ...
Navigating the Future: Key IT Vulnerability Management Trends
As the cybersecurity landscape continues to evolve, proactive vulnerability management has become a critical priority for managed service providers MSPs and IT teams. Recent trends indicate that organizations increasingly prioritize more frequent IT security vulnerability assessments to identify...
CVE-2025-22313
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Reflected XSS.This issue affects Widgetize Pages Light: from n/a through = 3.0...