1099 matches found
voidaccess
VoidAccess Self-hostable OSINT for turning dark-web research queries into structured threat intelligence. Built for security researchers, threat-intelligence teams, and authorized investigators who need collection, enrichment, relationship mapping, and export in one workflow. Terminal Output Quic...
the-endorser
🚨 The Endorser ya no recibe mantenimiento. Si necesitas soporte o consultoría para tus proyectos OSINT, envíame un correo a [email protected] 🚨 The Endorser Una herramienta OSINT que te permite descubrir relaciones entre personas en LinkedIn a través de recomendaciones/habilidades. Echa un...
Cooper-ndss-2022
Cooper: Testing the Binding Code of Scripting Languages with Cooperative Mutation Cooper utilize cooperative mutation to test the binding code of scripting languages to find memory-safe issues. Cooperative mutation simultaneously modifies the script code and the related document objects to explor...
CVE-2022-30190_EXP_PowerPoint
CVE-2022-30190EXPPowerPoint This is exploit of CVE-2022-30190 on PowerPoint. Modify the suffix of the file to 'zip' and unzip the file, you can edit \ppt\slides\rels\slide1.xml.rels and replace to your vps ip:port like this, then compress them as the same way and change the suffix to 'ppsx'. The...
Just-Metadata
Just-Metadata Just-Metadata es una herramienta que se puede utilizar para recopilar información de inteligencia de manera pasiva sobre un gran número de direcciones IP, e intentar extrapolar relaciones que de otra forma no serían evidentes. Just-Metadata cuenta con módulos de "recolección" que se...
inquisitor
Inquisitor Aviso Este proyecto está solo parcialmente completo y aún tengo que implementar muchas de las características descritas en la siguiente publicación de blog que hice: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor es una herramienta simple para recolectar información sobre...
ngrev
ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...
automation-controller: automation-controller-container: automation-controller: instance group attachment to schedules and workflow job template nodes checks only read permission, allowing use of restricted (controlplane / other-tenant) instance groups and privilege escalation to control-plane code execution
A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching an instance group to a schedule or a workflow job template node through the dedicated API relationship endpoint, the controller verifies only that the requesting user can read view the instance group,...
automation-controller: automation-controller-container: automation-controller: instance group attachment to schedules and workflow job template nodes checks only read permission, allowing use of restricted (controlplane / other-tenant) instance groups and privilege escalation to control-plane code execution
A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching an instance group to a schedule or a workflow job template node through the dedicated API relationship endpoint, the controller verifies only that the requesting user can read view the instance group,...
CVE-2026-84638
A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching an instance group to a schedule or a workflow job template node through the dedicated API relationship endpoint, the controller verifies only that the requesting user can read view the instance group,...
CVE-2020-0665
CVE-2020-0665 - SID Filter Bypass Proof of Concept for CVE-2020-0665, which allows bypassing SID Filtering in Active Directory Forests Cross Forest Attack. Requirements for the attack Target Domain Controller machine must not be patched after February, 2020. Having previously compromised a Domain...
CVE-2026-83801
Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.addrelationship or extras.changerelationship permission can store HTML or JavaScript in a Relationship description, and a user with dcim.addmodulefamily or dcim.changemodulefamily...
EUVD-2026-84814
Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.addrelationship or extras.changerelationship permission can store HTML or JavaScript in a Relationship description, and a user with dcim.addmodulefamily or dcim.changemodulefamily...
CVE-2026-83801 Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text
Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.addrelationship or extras.changerelationship permission can store HTML or JavaScript in a Relationship description, and a user with dcim.addmodulefamily or dcim.changemodulefamily...
CVE-2026-83801 Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text
Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.addrelationship or extras.changerelationship permission can store HTML or JavaScript in a Relationship description, and a user with dcim.addmodulefamily or dcim.changemodulefamily...
CVE-2026-83801
Nautobot is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.4.37 and 3.1.8 . The root cause is the lack of adequate neutralization when user-controlled values—specifically Relationship descriptions (requiring extras.add_relationship / extras.change_relationship) or Module F...
CVE-2025-53786
CVE-2025-53786 Exploit This project provides a proof-of-concept PoC exploit targeting a critical vulnerability in Microsoft Exchange Server hybrid deployments, identified as CVE-2025-53786. This vulnerability allows an attacker with administrative access to an on-premises Exchange server to...
CVE-2026-87142
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...
CVE-2026-87143
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...
CVE-2026-87145
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...