CVE-2026-55227

Weblate , a web-based localization tool, is affected by an information disclosure vulnerability in versions prior to 2026.7 . Several endpoints perform object lookups in a globally scoped manner rather than restricting them to projects the requesting user can access. As a result, they return HTTP...

CVE-2026-55227 Observable object existence disclosure in private Weblate projects via globally scoped object lookups

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

CVE-2026-55227 Observable object existence disclosure in private Weblate projects via globally scoped object lookups

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

CVE-2026-55227 Observable object existence disclosure in private Weblate projects via globally scoped object lookups

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

misp-taxonomies

MISP Taxonomies MISP Taxonomies è un insieme di librerie di classificazione comuni per etichettare, classificare e organizzare le informazioni. La tassonomia consente di esprimere lo stesso vocabolario tra un insieme distribuito di utenti e organizzazioni. Le tassonomie che possono essere...

CaA

Insight sobre informações, explorando com inteligência de mil maneiras. Primeiro Autor: EvilChen Segundo Autor: 0chenccMystery Security TeamTerceiro Autor: Mystery Security Team...

GooFuzz

GooFuzz - O Poder dos Google Dorks Créditos Autor: M3n0sD0n4ld Twitter: @DavidUton Descrição: GooFuzz é um script escrito em Bash Scripting que usa técnicas avançadas de busca do Google para obter informações sensíveis em arquivos ou diretórios sem fazer requisições ao servidor web. Novidades Que...

dns-zone-audit

Auditoria de Zona DNS Uma ferramenta de segurança leve baseada em Bash para testar configurações incorretas de transferência de zona DNS AXFR, associadas ao CVE-1999-0532. Este script consulta servidores de nomes autoritativos para um domínio e tenta transferências de zona completas. Se...

killshot

Questo progetto non è più mantenuto ! KILLSHOT Un framework per il penetration testing, strumento di raccolta informazioni e scanner di vulnerabilità web Perché KillShot? Puoi utilizzare questo strumento per eseguire lo spider del tuo sito web, raccogliere informazioni importanti e automatizzare ...

s3-leaks

s3-leaks Liste der AWS-S3-Lecks Wenn dir weitere Lecks bekannt sind, sende gerne einen PR...

cpufetch

Strumento semplice ma elegante per ottenere informazioni sull'architettura della CPU cpufetch è uno strumento da riga di comando scritto in C che mostra le informazioni sulla CPU in modo pulito e bello...

CVE-2023-4966

CVE-2023-4966 Эксплойт-скрипт, разработанный для эксплуатации уязвимости раскрытия информации CVE-2023-4966 Citrix Bleed Хакеры активно эксплуатируют эту уязвимость шлюза Citrix. Данный эксплойт-скрипт поддерживает конкурентность и может эксплуатировать как отдельные цели, так и файлы с целями...

CVE-2025-56499

CVE-2025-56499 قراءة ملف عشوائي عبر عدم التحقق من صحة المسار في موفر القاعدة المحلي الإصلاح في المصدر: https://github.com/MetaCubeX/mihomo/pull/2177 الإصدارات المتأثرة: mihomo = v1.19.11 ملخص عند تحليل تكوين rule-providers، يفشل الفرع type = "file" في التحقق من صحة المسار المقدم. يمكن للمهاجم...

CVE-2022-37205

CVE-2022-37205 CVE-2022-37205 POC Descrição sugerida RESERVED O JFinal CMS 5.1.0 é afetado por: Injeção SQL. Essas interfaces não usam o mesmo componente, nem possuem filtros, mas cada uma usa seu próprio método de concatenação SQL, resultando em injeção SQL. Informações adicionais...

CVE-2023-32784-keepass-linux

KeePass 2.53/cmdline 文件，并存储命令行参数中包含关键字 KeePass 的进程的 pid。 然后，它会获取 /proc//maps 中未直接关联库（即文件路径为空）的内存映射的地址。 接着，它利用 /proc//mem 将所有映射的内存存储到缓冲区中。这是在 Linux 上转储任意进程内存的一种基本行为。 它会解析内存，尝试查找用户输入主密码时留下的残存字符串，这些字符串看起来像 •a, ••s, •••s 这样的序列。第一个字符会缺失。您可以通过查看代码找到其他功能。 gcc dumppwd.c -o dump 然后就可以运行了。...

EXP-CVE-2017-75

EXP-CVE-2017-75 Этот скрипт на Python предназначен для проверки и эксплуатации определенной уязвимости в серверах NGINX известной как CVE-2017-75. Он был разработан для программы публичного раскрытия уязвимостей, в которую я недавно отправил отчет. Он использует специально сформированный заголово...

CVE-2026-49809

Dell PowerProtect Cyber Recovery , versions 20.2 and prior , is affected by an SQL Injection vulnerability (Improper Neutralization of Special Elements used in an SQL Command). A low-privileged attacker with remote access could exploit this flaw to achieve information disclosure . The assigned CV...

EUVD-2026-66703

Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-49809

Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

fsociety

fsociety A Modular Penetration Testing Framework Install root@kitploit: pip install fsociety Update root@kitploit: pip install --upgrade fsociety Usage root@kitploit: usage: fsociety -h -i -s A Penetration Testing Framework optional arg...