PowerGram

PowerGram PowerGram é um Bot do Telegram puro em PowerShell que pode ser executado no Windows, Linux ou Mac OS. Para usá-lo, você só precisa do PowerShell 4 ou superior e de uma conexão com a internet. Toda a comunicação entre o Bot e os servidores do Telegram é criptografada com HTTPS, mas todas...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

faraday_addon

Über Faraday Addon ist ein einfaches Addon zur Automatisierung der Meldung von Schwachstellen über den Browser an Ihre eigene Faraday-Instanz. Faraday Addon fängt jede einzelne Anfrage aus dem Browser ab und fügt eine Funktion hinzu, um auf jede einzelne zuzugreifen und sie als Schwachstelle zu...

shadowd

Logo Shadow Daemon è un firewall per applicazioni web che intercetta le richieste a livello applicativo. Questo repository contiene il componente principale di Shadow Daemon che gestisce l'analisi e l'archiviazione delle richieste. Documentazione Per la documentazione completa, fare riferimento a...

drift-node-sdk

Il SDK Node.js Tusk Drift consente test API veloci e deterministici catturando e riproducendo le chiamate API fatte verso/da il tuo servizio. Registra automaticamente chiamate API reali, poi riproducile come test utilizzando la CLI Tusk per trovare regressioni. Durante la riproduzione, tutte le...

Eclipse Jetty 环境问题漏洞

Eclipse Jetty is an open-source Java-based web server and Java Servlet container developed by the Eclipse Foundation. Eclipse Jetty has a vulnerability related to environmental issues, which stems from the HTTP/1.1 parser’s request interception vulnerability when using chunked extensions...

CVE-2023-50811

An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a specific reception by POST HTTP request interception. Iterating that parameter, it has been possible to access to the application and take control of many...

CVE-2025-65827

The CVE describes a mobile application configured to allow clear text traffic to all domains and to communicate with its API server over HTTP. The underlying issue is that traffic can be intercepted and modified by an upstream adversary, potentially leading to a total compromise of a user’s accou...

EUVD-2020-3165

Malware in sbrugna...

EUVD-2020-19214

Malware in sbrugna...

EUVD-2021-21224

Malware in sbrugna...

EUVD-2021-28608

Malicious code in bioql PyPI...

EUVD-2024-16200

Malicious code in bioql PyPI...

CVE-2025-40646

Exposure of sensitive information in Viday. This vulnerability could allow an attacker to obtain sensitive information about customers by intercepting HTTP requests and searching for the JWT containing sensitive user information in the JWT payload...

CVE-2025-40646

CVE-2025-40646 describes a Stored Cross-Site Scripting (XSS) in Energy CRM v2025 by Status Tracker Ltd. The vulnerability arises from insufficient validation of user input in a POST to /crm/create_job_submit.php, using the JobCreatedBy parameter. An attacker could craft a request that, when viewe...

CVE-2025-40646 Multiple vulnerabilities in Energy CRM by Status Tracker

Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createjobsubmit.php”, using the “JobCreatedBy” parameter. This vulnerability could allow a remote...

PT-2025-38759

Name of the Vulnerable Software and Affected Versions 2wcom IP-4c version 2.15.5 Description The 2wcom IP-4c device version 2.15.5 is subject to a Broken Access Control issue. Manager-level users can bypass intended access restrictions on sensitive endpoints by intercepting and modifying requests...

CVE-2025-57438

The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability. Certain sensitive endpoints are intended to be accessible only after the admin explicitly grants access to a manager-level account. However, a manager-level user can bypass these controls by intercepting and modifyi...

CVE-2021-41594

In RSA Archer 6.9.SP1 P3, if some application functions are precluded by the Administrator, this can be bypassed by intercepting the API request at the /api/V2/internal/TaskPermissions/CheckTaskAccess endpoint. If the parameters of this request are replaced with empty fields, the attacker achieve...

CVE-2024-50565

A improper restriction of communication channel to intended endpoints vulnerability CWE-923 in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15 and 6.2.0 through 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through...