34527 matches found
Empire
Empire Empire Γ¨ un framework di post-exploitation e adversary emulation utilizzato per supportare i Red Team e i Penetration Tester. Il server di Empire Γ¨ scritto in Python 3 ed Γ¨ modulare per consentire flessibilitΓ all'operatore. Empire include nativamente un client che puΓ² essere utilizzato da...
timesketch
Timesketch Indice 1. Informazioni su Timesketch 2. Per iniziare 3. Community 4. Contribuire Informazioni su Timesketch Timesketch Γ¨ uno strumento open-source per l'analisi collaborativa di timeline forensi. Utilizzando gli sketch, tu e i tuoi collaboratori potete organizzare facilmente le vostre...
EUVD-2026-96396
OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header. Attackers who know a victim project id and database config id can query the trace read API to obtain traces including L...
CVE-2026-108596 OpenLIT 2.1.0 Authorization Bypass via x-openlit-project-id Header
OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header. Attackers who know a victim project id and database config id can query the trace read API to obtain traces including L...
CVE-2026-108596 OpenLIT 2.1.0 Authorization Bypass via x-openlit-project-id Header
OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header. Attackers who know a victim project id and database config id can query the trace read API to obtain traces including L...
CVE-2026-108596
OpenLIT 2.1.0 is affected by an authorization bypass vulnerability (CWE-639) that allows authenticated users to access telemetry from other projects. By supplying a forged x-openlit-project-id header, an attacker who possesses a victim project ID and database config ID can query the trace read AP...
CVE-2024-23339
CVE-2024-23339 μ·¨μ½μ κ°μ CVE-2024-23339 CVSS : 6.5 Jan 23, 2024 ProtoType Pollution in node.js package rebob νλ‘μ νΈμ μΌν μ·¨μ½μ μ€λͺ github advisories hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utilit...
log4j-lookups-vulnerability
log4j-lookups-vulnerability The project based on spring-boot,and the code reveals how Log4j2 Vulnerability CVE-2021-44228 works. The solution for CVE-2021-44228 is on the linked url https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot...
CVE-2019-12180
CVE-2019-12180 Advisory & PoC SoapUI and ReadyAPI allow you to create or add dynamic contents to test cases for example, to calculate a timestamp on the fly using Apache Groovy Language scripts. Execution of these scripts can be triggered in many ways and they are stored inside the XML "Project...
RISE-Ultimate_Project_Manager_e_CRM
CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Security vulnerability: IDOR Insecure Direct Object Reference Affected Component: profile image upload endpoint, teammembers controller Software: RISE - Ultimate Project Manager & CRM Vendor: codecanyon Version: 3.8.2 CVE ORG :...
CVE-2020-16012-PoC
M2 Project - Side Channel Attack Client Chrome Version 83 Installation Link https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/756066/ Launch command unzip Linux...chrome.zip cd chrome-linux/ ./chrome --disable-gpu --disable-software-rasterizer...
CVE-2025-26198
π‘οΈ CVE Disclosure: CVE-2025-26198 β SQL Injection in CloudClassroom-PHP-Project Disclosure Date: 18 June 2025 CVE ID: CVE-2025-26198 Severity: CRITICAL CVSS 9.8 𧩠Summary A critical SQL Injection vulnerability exists in CloudClassroom-PHP-Project v1.0, specifically within the loginlinkadmin.php...
CVE_6387
This is a Next.js project bootstrapped with create-next-app. Getting Started First, run the development server: npm run dev or yarn dev or pnpm dev or bun dev Open http://localhost:3000 with your browser to see the result. You can start editing the page by modifying app/page.tsx. The page...
fyp
A desktop-based vulnerability assessment tool that enables security teams to scan, identify, exploit, and report vulnerabilities across web applications and networks. Overview A vulnerability assessment platform built for security administrators and analysts. It automates target scanning,...
joniles__mpxj_CVE-2020-35460_8-3-4
MPXJ Welcome to MPXJ! This library provides a set of facilities to allow project information to be manipulated in Java, .Net, Ruby and other languages. Full documentation including release notes can be found online at http://mpxj.org...
woody-woodpacker
Woody-Woodpacker A 42 school project that implements a binary packer for 64-bit ELF executables. The packer encrypts the executable's code sections and injects a decryption routine that executes at runtime. π― About Woody-Woodpacker is a program that takes a 64-bit ELF binary as input and creates ...
DVSA
un'applicazione serverless deliberatamente vulnerabile Damn Vulnerable Serverless Application DVSA Γ¨ un'applicazione deliberatamente vulnerabile pensata per essere un aiuto per i professionisti della sicurezza che vogliono testare le proprie competenze e i propri strumenti in un ambiente legale,...
caOptics
Note Project archived due to shifting development priorities and refocusing my community efforts to other areas PoCs, other tools and demos/presentation, project is set to read-only. CA Optics - Azure AD Conditional Access Gap Analyzer What is Conditional Access? Notes for early testers Release...
LinuxForensics
Linux Forensics Everything related to Linux Forensics Note: for better navigation, please visit the repo's main page here Index Talks Workshops Current Team Members: Ali Hadi, Twitter Mariam Khader, Twitter, 2019 - present Alayna Cash, Linux GUI Environments, 2022 - present Tom Claflin, Twitter,...
CVE-2025-26199
π‘οΈ CVE-2025-26199 β Insecure Password Transmission via Cleartext in CloudClassroom-PHP-Project v1.0 π Description CloudClassroom-PHP-Project v1.0 is vulnerable to insecure transmission of user credentials. During the authentication process, passwords are submitted over unencrypted HTTP rather than...