firefox: thunderbird: Mitigation bypass in the Storage: Cache API component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...

firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component...

gerobug

Gerobug: A Primeira Plataforma de Bug Bounty Open Source. Gerobug A primeira plataforma de bug bounty open source autogerenciada. Você é uma empresa, planejando ter seu próprio programa de bug bounty, com orçamento mínimo? NÓS TE AJUDAMOS! Estamos cientes de que algumas organizações têm dificulda...

probo

Probo Open-Source-GRC-Plattform für Ingenieure. Probo ist eine selbst hostbare Governance-, Risiko- und Compliance-Plattform GRC, die für Engineering- und Sicherheitsteams entwickelt wurde. Sie deckt den gesamten GRC-Lebenszyklus ab: Risikoidentifizierung, Kontrollverfolgung, Lieferantenrisiko,...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

BoxPwnr-Traces

BoxPwnr-Traces Traces et résultats de benchmark de BoxPwnr sur plusieurs plateformes de sécurité. Chaque trace comprend l'interaction complète avec le LLM, les commandes exécutées, un rapport markdown + un graphique d'attaque, les statistiques et la configuration utilisée. Parcourez les...

prey-android-client

Qui troverai tutto il codice sorgente delle release attuali e in fase di sviluppo del client Prey per dispositivi Android. Prey è una piattaforma SaaS per il tracciamento dei dispositivi, il monitoraggio, la protezione dei dati e la gestione dei dispositivi. Il suo agente open-source gira sugli...

Termix-research

Termix-Sicherheitsforschung Schwachstellenforschung zu Termix, einer webbasierten SSH- und Serververwaltungsplattform 13k+ Sterne. CVE| Schwachstelle| Schweregrad| Behoben| Sicherheitsempfehlung ---|---|---|---|--- CVE-2026-45746| Session-Hijacking → RCE| 9.0 Kritisch| v2.3.2| GHSA-cx2r-843c-vww8...

statecraftcyber

Statecraft Cyber Intelligence Plataforma de threat intelligence em português construída do zero como projeto pessoal de Blue Team. Agrega dados de fontes abertas globais e os transforma em briefings técnicos, notícias classificadas, CVEs enriquecidos e IOCs estruturados — tudo em PT-BR, atualizad...

aisecplus-week01-servicenow-ai-security-incident

AISec Plus Week01 - Die Bedrohung kartieren KI-Sicherheitsvorfall-Forschung: ServiceNow Virtual Agent Schwachstelle CVE-2025-12420 Was ist passiert? Eine kritische Schwachstelle wurde in der ServiceNow KI-Plattform entdeckt, die es einem nicht authentifizierten Angreifer ermöglichte, sich als...

ServiceNow UI Macros - Template Injection

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...

bissap

bissap root@kitploit: %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...

CVE-2026-9999-Serverless-Event-Injection-to-Code-Overwrite

3. CVE-2026-9999 – Event-Injection in Serverless-Funktionen Path Traversal → Code-Überschreibung Überblick Eine Serverless-Plattform, die Objektspeicher-Events verarbeitet, bereinigt das Feld object.key nicht, sodass ein Angreifer den Quellcode der Funktion per Path Traversal überschreiben kann...

xsubfind3r

xsubfind3r xsubfind3r is a command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicl...

ICSFuzz

ICSFuzz: strumento di fuzzing per applicazioni di controllo ICS Panoramica ICSFuzz è uno strumento di fuzzing lato PLC per scoprire vulnerabilità nelle applicazioni di controllo ICS di Dimitris Tychalas @ditihala .. @ditihala: https://www.twitter.com/ditihala Installazione Il tool richiede un...

tap

Die TrustedSec-Angriffsplattform TAP TAP - Remote-Builder für Penetrationstest-Plattformen. Geschrieben von: David Kennedy @HackingDave Firma: TrustedSec https://www.trustedsec.com Projektseite: https://github.com/trustedsec/tap Ein TrustedSec-Projekt - Copyright 2020 Unterstützte Betriebssysteme...

gitlab-profile

STATO TEST : ↳ tester core-orchestrator ↳ tester documentazione DATA DI CREAZIONE: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ Questo progetto è in beta! 🎉 sì! Siamo felici di annunciare che la versione beta sarà presto completa! Dalla versione 0.153 sono attualmente avviati...

CVE-2025-55182-research

🚀 CVE-2025-55182-research - خطوات بسيطة لتأمين نظامك 📥 التحميل الآن Download CVE-2025-55182-research 📘 الوصف يساعدك CVE-2025-55182-research على فهم ومعالجة الثغرات الأمنية المرتبطة بـ CVE-2025-55182. توفر هذه الأداة إثباتًا للمفهوم POC يوضح كيفية تحديد هذه المشكلات الأمنية ومعالجتها في تطبيقاتك. ...

cuckoo3

Cuckoo3 - Strumento di analisi malware Informazioni Cuckoo3 è uno strumento open-source per testare file sospetti o link in un ambiente controllato. Li testerà in uno o più emulatori di piattaforma in sandbox e genererà un report che mostrerà cosa hanno fatto i file o i siti web durante il test. ...