rawsec-cybersecurity-inventory

Rawsec's Cybersecurity Inventory Name| Link ---|--- Website| link Documentation| link Git repository| link Git repository mirror| link Merge Requests| link Issues| link Wiki| link Chat| link For contribution, development, usage or questions check the documentation. Sponsors Please contact me or...

geiger

geiger A Geiger counter for AI agents. One read-only command that inventories every AI agent, harness, MCP server, plugin, and AI extension on a machine — and tells you, in plain language, what each one can touch. npx geiger-scan No install. No account. No telemetry. Reads configs and directories...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

aws-inventory

Introduction This is a tool that tries to discover all AWS resources created in an account. AWS has many products a.k.a. services with new ones constantly being added and existing ones expanded with new features. The ecosystem allows users to piece together many different services to form a...

CVE-2020-14947

CVE-2020-14947 The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

ClientInspectorV2

Introduction to ClientInspector v2 Are you in control? - or are some of your core infrastructure processes like patching, antivirus, bitlocker enablement drifting? Or would you like to do advanced inventory , where you can lookup your warranty state against Lenovo or Dell warranty, then keep...

PowerHuntShares

PowerHuntShares v2 PowerHuntShares is PowerShell tool designed to help cybersecurity teams and penetration testers better identify, understand, attack, and remediate SMB shares in the Active Directory environments they protect. Every hacker has a story about abusing SMB shares, but it’s an attack...

ADB-Toolkit

!made-with-bashhttps://img.shields.io/badge/-Made%20with%20Bash-1f425f.svg?logo=image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAYAAADgdz34AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyZpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlk...

SCOPE

SCOPE: Security Cloud Ops Purple Engagement SCOPE runs AWS purple-team workflows with deterministic Python inventory and bounded AI agents. It audits AWS resources, validates attack paths, generates review-only exploit playbooks, produces controls, and guides Splunk investigations. How It Works R...

CVEs

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md...

pharmacy-sqli-CVE-2026-7392

Pharmacy Sales and Inventory System 1.0 - CVE-2026-7392 SQL Injection SourceCodester Pharmacy Sales and Inventory System V1.0 pure PHP/MySQL version CVE : CVE-2026-7392 Endpoint : /ajax.php?action=deletesupplier id parameter Type : SQL Injection CWE-89 CVSS 3.1 : 6.3 Medium Author : oretnom23...

CVE-2026-11518-XSS

Stored XSS in Inventory System using PHP and MySQL Vulnerability Details Field| Details ---|--- Vulnerability Type| Stored Cross-Site Scripting XSS Affected Application| Inventory System using PHP and MySQL Vendor| SourceCodester Affected Version| 1.0 Affected File| register.php Parameters|...

CVE-2026-76904

GeoServer WFS Inventory and Authorized Verification This repository contains two Python scripts for investigating GeoServer WFS endpoints. Overview wfsinventory.py Purpose: Inventory layers, XSD fields, and WFS values, and optionally verify candidates via a time-based check. Execution examples:...

CVE-2023-46449

CVE-2023-46449 Incorrect Access Control VIDEO POC LINK https://www.youtube.com/watch?v=H5QnsOKjs3s Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via...

CVE-2024-24135

CVE-2024-24135: Product Inventory with Export to Excel - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24135.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24135/blob/main/CVE-2024-24135.md...

exploit-cve-2023-36808

CVE-2023-36808 - GLPI Unauthenticated SQL Injection Vulnerability GLPI versions field is injected directly into a SQL query without sanitisation: SELECT id FROM glpiagents WHERE deviceid = '' No authentication is required. The vulnerability allows full database read access via blind SQL injection...

-CVE-2023-46450

-CVE-2023-46450 Description Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function. Additional Information A video POC stored XSS vulnerability exists in the add supplier functionality in free and open source...

CVE-2026-126433

OpenEMR before 8.5.0 contains an improper authorization vulnerability in interface/drugs/dispensedrug.php, which checks only for admin/drugs view permission instead of write permission before dispensing medication. Authenticated users with read-only drug administration access can send GET request...

EUVD-2026-125010

OpenEMR before 8.5.0 contains an improper authorization vulnerability in interface/drugs/dispensedrug.php, which checks only for admin/drugs view permission instead of write permission before dispensing medication. Authenticated users with read-only drug administration access can send GET request...