matano

Data lake de segurança open source para AWS O Matano Open Source Security data lake é um data lake de segurança nativo em nuvem e open source , construído para equipes de segurança na AWS...

tinfoleak

tinfoleak Lo strumento open-source più completo per l'analisi dell'intelligence su Twitter Introduzione tinfoleak è uno strumento open-source nell'ambito delle discipline OSINT Open Source Intelligence e SOCMINT Social Media Intelligence, che automatizza l'estrazione di informazioni su Twitter e...

CVE-2024-7808

CVE-2024-7808 💀 $$\colorred THIS \space EXPLOIT \space MAY \space VIOLATE \space THE \space LAW.$$ $$\colorred\space YOU \space ARE \space RESPONSIBLE \space FOR \space YOUR \space ACTIONS.$$ $$\colorredDEMONSTRATION \space PURPOSE \space ONLY.$$ BESCHREIBUNG RCE durch Nicht-Admin-Benutzer via CS...

Gitea <1.16.5 - Open Redirect

Gitea before 1.16.5 is susceptible to open redirect via GitHub repository go-gitea/gitea. An attacker can redirect a user to a malicious site and potentially obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-1058 info: name: Gitea 1.16.5 - Open Redire...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

Apache Tomcat - Open Redirect

Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input. id: CVE-2018-11784 info: name: Apache Tomcat - Open Redirect author: geeknik severity: medium description: | Apache Tomcat versions...

Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter. id: CVE-2008-1547 info: name:...

Apache Struts - Multiple Open Redirection Vulnerabilities

Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. id: CVE-2013-2248 info: name: Apache Struts - Multiple Open Redirection Vulnerabilities author: 0xAkoko severity: medium description: Apache Struts is prone ...

Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. id: CVE-2019-10098 info: name: Apache HTTP server v2.4.0 to v2.4.39 - Open...

Node.JS System Information Library <5.3.1 - Remote Command Injection

Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. id: CVE-2021-21315 info: name: Node.JS System...

Gitea <= 1.27.0 - Pre-Auth Remote Code Execution

Gitea versions 1.17 through 1.27.0 contain a remote code execution vulnerability in the diffpatch endpoint caused by an add/add collision that writes an executable Git hook into the bare repository's GITDIR. An attacker with write access can execute arbitrary commands as the Gitea service account...

DataEase - Remote Code Execution

DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...

WordPress Pie Register <3.8.2.3 - Open Redirect

WordPress Pie Register plugin before 3.8.2.3 contains an open redirect vulnerability. The plugin does not properly validate the redirection URL when logging in and login out. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute...

CVE-2023-38646-Poc

CVE-2023-38646-Poc Utilizzo root@kitploit: python check.py ip port Versioni vulnerabili root@kitploit: Metabase Enterprise 1.46 1.46.6.1 Metabase Enterprise 1.45 1.45.4.1 Metabase Enterprise 1.44 1.44.7.1 Metabase Enterprise 1.43 1.43.7.2 Metabase open source 0.46 0.46.6.1 Metabase open source 0....

An-Integrated-Wireless-Network-Forensic-Analysis-Framework

An-Integrated-Wireless-Network-Forensic-Analysis-Framework Este framework combina um conjunto de ferramentas open source existentes num pacote integrado que automatiza o processo de investigação forense. É capaz de capturar tráfego de rede sem fios, analisar o tráfego capturado de acordo com as...

Malcolm

Malcolm Malcolm è una potente suite di strumenti per l'analisi del traffico di rete progettata con i seguenti obiettivi: Facile da usare – Malcolm accetta dati di traffico di rete sotto forma di catture di pacchetti complete PCAP, log di Zeek e avvisi di Suricata. Questi artefatti possono essere...

CVE-2009-0473-check

Descrição Script simples para explorar vulnerabilidade de redirecionamento aberto no Rockwell ControlLogix 1756-ENBT/A. Detalhes da Vulnerabilidade https://www.cvedetails.com/cve/CVE-2009-0473/ Requisitos Python 2.7 Você deve estar executando um ambiente X Windows antes de executar este script. E...

CVE-2021-43657

CVE-2021-43657 Questo è un riferimento/POC per CVE-2021-43657 Questa vulnerabilità è stata trovata mentre stavo giocando con il software open source responsabile del sistema di gestione dei compiti dei dipendenti...

cryptovenom

CryptoVenom CryptoVenom: Das Taschenmesser der Kryptographie Was ist CryptoVenom? CryptoVenom ist ein OpenSource-Tool, das viele Kryptosysteme und Kryptoanalysemethoden in einem vereint, darunter klassische Algorithmen, Hash-Algorithmen, Kodierungsalgorithmen, Logikgatter, mathematische Funktione...

incriminator

Incriminator Incriminator è un progetto OpenSource con scopi educativi che ti permette di incriminare altri dispositivi durante un crimine informatico. Il progetto è ora alla versione 1.0 Se trovi un bug, per favore segnalalo. Grazie per aver scaricato... SOLO A SCOPO EDUCATIVO!!!!!!! Non sono...