wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

sdrtrunk

Utilizadores do MacOS Tahoe 26.1 - Atenção: As alterações ao suporte USB na versão Tahoe 26.x fazem com que o sdrtrunk falhe ao iniciar. Siga os passos abaixo para instalar a versão mais recente do libusb e criar um link simbólico e, em seguida, utilize a compilação noturna que inclui uma...

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

CVE-2010-1240

Ferramenta de Pesquisa para Ação de Lançamento de PDF CVE-2010-1240 Ferramenta educacional de pesquisa que demonstra a vulnerabilidade CVE-2010-1240 no Adobe Reader por meio de Ações de Lançamento maliciosas em PDF. ⚠️ Aviso Legal Esta ferramenta é criada estritamente para fins educacionais e...

CVE-2010-1240

CVE-2010-1240 - Incorporando backdoor em um PDF ⚠️ Apenas para fins educacionais e de pesquisa de segurança autorizada Descrição O Adobe Reader e o Acrobat 9.x anteriores à versão 9.3.3, e 8.x anteriores à 8.2.3 no Windows e Mac OS X, não restringem o conteúdo de um campo de texto na caixa de...

porterminal

Give your agent any computer One command. One URL. A real terminal for your agent, a live view for you. Run Porterminal on a Windows, macOS, or Linux computer and give the generated link to your AI agent. It gets a real shell with the files, tools, and projects on that machine. Open the same link...

preflight

Preflight.sh Preflight.sh é uma ferramenta de linha de comando que analisa seu código em busca de prontidão para lançamento. Identifica configurações ausentes, problemas de integração, preocupações de segurança, lacunas de metadados de SEO e outros erros comuns antes de você implantar em produção...

vibe-coding-security

Segurança em Vibe Coding Antes de anunciar seu lançamento, execute estas 69 verificações. Elas correspondem aos padrões exatos por trás da CVE RLS do Lovable CVE-2025-48757, 170+ apps, 2025, do vazamento do Moltbook 1,5M de tokens de API, fev 2026 e da violação da plataforma Lovable em abril de...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: Serviço HTTP não autenticado do ES File Explorer Uma ferramenta de pesquisa e análise técnica, implementada de forma independente e com foco em segurança, para CVE-2019-6447 , um serviço HTTP não autenticado exposto por versões vulneráveis do ES File Explorer para Android. Somente...

OrganizerTransaction

هذا هو PoC لـ CVE-2021-39749، والذي يسمح بتشغيل أنشطة تطبيقات أخرى على Android 12L Beta بغض النظر عن إعدادات permission و exported الخاصة بها في Android 12L، الوصول إلى TaskFragmentOrganizer عن قصد لم يعد يتطلب صلاحية MANAGEACTIVITYTASKS يتطلب استخدام التطبيق المقدم هنا تعطيل فحوصات واجهات برمجة...

PT-2026-106748

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run shell tool in the CommandLineExecutor component of ufo/client/mcp/local servers/cli mcp server.py validates only the first token of the bash command parameter and permits...

cve-2026-0013-poc

CVE-2026-0013 Vulnerabilidade do tipo agente confuso Confused Deputy no Android DocumentsUI - Projeto de validação de pesquisa de segurança Aviso importante Este repositório é um repositório derivado de compilação, afiliado ao repositório principal original. Papel| Repositório| Descrição...

CVE-2019-12594

CVE-2019-12594 यह CVE-2019-12594 के लिए एक PoC है, जो DOSBox 0.74-2 में एक कमजोरी है। DOSBox 0.74-2 से होस्ट पर कैलकुलेटर लॉन्च करना इस कमजोरी के लिए PoC को निम्नलिखित कॉन्फ़िगरेशन के साथ परीक्षण किया गया है: DOSBox 0.74-2 Debian 10 amd64 Libc6 2.28-10...

CLEANSTART-2026-XZ43182 launch-editor allows users to open files with line numbers in editor from Node

Security vulnerability affects the argo-workflows package. launch-editor allows users to open files with line numbers in editor from Node...

automation-controller: automation-controller-container: automation-controller: bulk job launch allows setting a workflow node's job reference to an arbitrary unified job, enabling a low-privileged user to cancel and read metadata of jobs in other organizations

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The bulk job launch endpoint builds workflow job nodes from client input using a serializer that leaves the node's job reference -- a field normally set by the workflow task manager after it spawns a child job --...

automation-controller: automation-controller-container: automation-controller/AWX: Bulk Job Launch checks instance_groups at read level instead of use level, allowing execution-placement authorization bypass

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...

CVE-2026-84689

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The bulk job launch endpoint builds workflow job nodes from client input using a serializer that leaves the node's job reference -- a field normally set by the workflow task manager after it spawns a child job --...

CVE-2026-40534

An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Video API in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to read or write limited files when the player is launched...

CVE-2026-67071

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure valu...

CVE-2026-67071 HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or Transfer

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure valu...