Lucene search
+L

20503 matches found

Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•85 views

Node.JS System Information Library <5.3.1 - Remote Command Injection

Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. id: CVE-2021-21315 info: name: Node.JS System...

7.8CVSS7.5AI score0.90675EPSS
SaveExploits4References5
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•40 views

ThinkPHP < 3.2.4 - Remote Code Execution

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via the s parameter in index.php through the invokefunction functionality. id: CVE-2019-9082 info: name: ThinkPHP 3.2.4 - Remote Code Execution author: 0xanis severity: high description: |...

9.3CVSS7.8AI score0.97419EPSS
SaveExploits8References5
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•87 views

Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

7.5CVSS7.2AI score0.02518EPSS
SaveExploits0References2
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•102 views

Processwire CMS <2.7.1 - Local File Inclusion

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...

7.8CVSS7.3AI score0.15737EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•83 views

DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been...

8.6CVSS8.1AI score0.35761EPSS
SaveExploits1References2
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•67 views

LionWiki <3.2.12 - Local File Inclusion

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion. id: CVE-2020-27191 info: name: LionWiki 3.2.12 - Local File Inclusion author: 0xAkoko severity: high description: LionWiki before...

7.5CVSS7.2AI score0.09595EPSS
SaveExploits1References4
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•46 views

DataEase - Remote Code Execution

DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...

9.8CVSS5.9AI score0.50266EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/09/25 1:41 a.m.•7 views

DepAlert

DepAlert Agent CTWall This tool is part of the CTWall platform. See: CTWall Description DepAlert is an open-source security gate for your CI/CD pipeline. It analyzes SBOMs against malware intelligence data and quickly tells you whether your build includes known malicious packages. DepAlert solves...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 1:19 a.m.•8 views

metasploit-framework-nu11secur1ty

Metasploit Framework El Metasploit Framework es una herramienta de código abierto publicada bajo una licencia estilo BSD. Para obtener información detallada sobre la licencia, consulte el archivo COPYING. Última Versión Acceda a la última versión de Metasploit desde la página Instaladores...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 1:18 a.m.•10 views

EDIDFuzzer

EDID fuzzer Una herramienta para realizar fuzzing sobre Enhanced Display Identification Data Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/EDIDFuzzer Publicado bajo AGPL;...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 12:53 a.m.•9 views

awesome-devsecops

Awesome DevSecOps 受到 GitHub 上 awesome- 趋势的启发。这是一个文档、演示文稿、视频、培训材料、工具、服务和通用领导力的集合,支持 DevSecOps 使命。这些是必不可少的构建模块和点滴内容,可以帮助你安排一次 DevSecOps 实验,或帮助你构建自己的 DevSecOps 计划。 此列表不会完全全面,并会随着 DevSecOps 的成熟而改变。我们打算让它成为一个很棒的列表,随着社区学习和改进 DevSecOps 的实施和采用而不断成长和变化。要包含在此列表中,信息、工具、供应商或倡议必须提供免费或开源的能力,以帮助 DevSecOps...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 12:48 a.m.•10 views

Katana

Katana-ds Katana-ds ds for dork scan is a simple python tool that automates Google Hacking/Dorking and supports Tor. It becomes a more powerful in combination with GHDB Note 25/09/2021 : This Repo is New but the script it self is old back when google dorking was something, i wrote this script bac...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 12:45 a.m.•9 views

riskscanner

Open source multi-cloud security compliance scanning platform Chinese Version...

5.7AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/25 12:43 a.m.•15 views

training-security-awareness

Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 12:41 a.m.•9 views

qemu-t8030

=========== QEMU README QEMU is a generic and open source machine & userspace emulator and virtualizer. QEMU is capable of emulating a complete machine in software without any need for hardware virtualization support. By using dynamic translation, it achieves very good performance. QEMU can also...

6AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 12:23 a.m.•12 views

synapse

========================================================================= Synapse |support| |development| |documentation| |license| |pypi| |python| Synapse is now actively maintained at element-hq/synapse Synapse is an open-source Matrix homeserver developed from 2019 through 2023 as part of the...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/25 12:19 a.m.•10 views

PyRIT

Python Risk Identification Tool for generative AI PyRIT The Python Risk Identification Tool for generative AI PyRIT is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems. !WARNING PyRIT has moved! Please see...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 12:10 a.m.•15 views

user-agent-desktop

This project is discontinued. We recommend to use Ghostery Tracker and Ad Blocker in Firefox. Ghostery Private Browser The Ghostery Desktop Browser is a minimal fork of Firefox optimised for privacy. The main extra features are: The Ghostery Privacy Blocker extension is included and enabled by...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 11:30 p.m.•17 views

scenester

Scenester Scenester - una herramienta para capturar visualmente un sitio web proporcionando múltiples user-agents. Diseñada para ayudar en el descubrimiento de diferentes puntos de entrada en una aplicación. Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado p...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 10:56 p.m.•17 views

Python-Honeypot

OWASP Honeypot OWASP Honeypot es un software de código abierto en lenguaje Python diseñado para crear honeypot y honeynet de manera fácil y segura. Este proyecto es compatible con Python 3.x y ha sido probado en Mac OS X y Linux. Agradecemos cualquier contribución, idea o comentario. No dudes en...

6AI score
SaveExploits0References2
Rows per page
Query Builder