CloudGrappler

CloudGrappler Permiso: https://permiso.io Leggi il nostro blog di rilascio: https://permiso.io/blog/cloudgrappler-a-powerful-open-source-threat-detection-tool-for-cloud-environments CloudGrappler è uno strumento progettato appositamente per interrogare senza sforzo rilevamenti ad alta fedeltà e a...

windiff

WinDiff Informazioni WinDiff è uno strumento open-source basato sul web che consente di navigare e confrontare informazioni su symbol, tipi e syscall di binari Microsoft Windows attraverso diverse versioni del sistema operativo. Il database dei binari viene aggiornato automaticamente per includer...

petereport

PeTeReport PeTeReport Pe nTe st Report é uma ferramenta de relatório de vulnerabilidades de aplicações de código aberto projetada para auxiliar esforços de pentest/redteam, simplificando a tarefa de escrever e gerar relatórios. Focada na segurança de produtos, a ferramenta ajuda pesquisadores de...

Supernova

Supernova Crittografo e offuscatore di shellcode. Descrizione Supernova è uno strumento open-source che consente agli utenti di criptare e/o offuscare in modo sicuro il proprio shellcode grezzo. -red?link=https%3A%2F%2Fgithub.com%2Fnickvourd%2FSupernova%2Freleases Supernova supporta diverse...

jsql-injection

Descrizione jSQL Injection è un'applicazione leggera utilizzata per recuperare informazioni dal database di un server. È gratuita , open source e cross-platform per Windows, Linux e Mac, e funziona con Java dalla versione 21 alla 25. jSQL Injection fa anche parte della distribuzione ufficiale per...

PacketSender

Introduzione https://packetsender.com Leggi questo in altre lingue:English, Español, Deutsch, Français, Italiano, 简体中文. Packet Sender è un'utilità open source che permette di inviare e ricevere pacchetti TCP, UDP e SSL TCP crittografato, nonché richieste HTTP/HTTPS e la generazione di pannelli. I...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

vulhunt

VulHunt Community Edition O VulHunt é uma estrutura de caça a vulnerabilidades desenvolvida pela equipa de investigação da Binarly. Foi concebido para ajudar investigadores e profissionais de segurança a identificar vulnerabilidades em binários de software e firmware UEFI. O VulHunt é construído...

byob

Fragen? Schauen Sie sich die Dokumentation an oder treten Sie unserem Discord-Support-Server bei. Haftungsausschluss : Dieses Projekt sollte nur für autorisierte Tests oder zu Bildungszwecken verwendet werden. BYOB ist ein Open-Source-Post-Exploitation-Framework für Studenten, Forscher und...

UBUNTU-CVE-2026-68520

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, asdictsecure in glances/config.py checks only option names and exposes publicusername and credentials embedded in publicapi values through unauthenticated GET /api/4/config and GET /api/4/config/ip requests. This iss...

CVE-2026-19264

Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and the route requires no authentication. Raw...

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent then worked through the ministry's...

XSSer Penetration Testing Tool 1.9

XSSer is an open source penetration testing tool that automates the process of detecting and exploiting XSS injections against different applications. It contains several options to try to bypass certain filters, and various special techniques of code injection. 12 additions, 12 modifications, 10...

CVE-2026-50030

DataEase prior to 2.10.23 exposes the SQL preview path (DatasetDataApi.previewSql/previewSqlCheck) via /de2api/datasetData/previewSql, accepting PreviewSqlDTO.sql, PreviewSqlDTO.datasourceId, and PreviewSqlDTO.isCross. The system stores decoded SQL in datasourceRequest.query and CalciteProvider.f...

EUVD-2026-41983

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the Livewire component Server\Resources exposes public methods startUnmanaged, stopUnmanaged, restartUnmanaged that accept a container ID parameter directly from the browse...

EUVD-2026-41982

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, log drain secret and environment values were interpolated into shell commands without sufficient encoding, allowing an authenticated user to inject commands executed on the...

CVE-2026-42172

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Sanctum API tokens did not expire, allowing a leaked token to retain access indefinitely until manually revoked. This issue is fixed in version 4.0.0-beta.474...

EUVD-2026-41980

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Sanctum API tokens did not expire, allowing a leaked token to retain access indefinitely until manually revoked. This issue is fixed in version 4.0.0-beta.474...

CVE-2026-42153

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, PostgreSQL healthcheck command generation used attacker-controlled database settings postgresuser and postgresdb in shell-form commands, allowing an authenticated user to...

CVE-2026-32885

DDEV is an open-source tool for running local web development environments for PHP and Node.js. Versions prior to 1.25.2 have unsanitized extraction in both Untar and Unzip functions in pkg/archive/archive.go. Downloads and extracts archives from remote sources without path validation. Version...