badBANANA-threat-observatory

badBANANA // OSSERVATORIO DI MINACCE Un sistema di osservazione delle minacce incentrato sulle evidenze che mantiene semanticamente separati lo stato corrente della fonte, gli eventi di modifica sostanziale e la telemetria operativa di recupero. I dati mancanti, obsoleti, disabilitati o non...

kit-oauth

kit-oauth Libreria client OAuth 2.0 per applicazioni Kit TOC File File| Descrizione ---|--- .editorconfig| Configurazione di formattazione dell'editor .gitignore| Regole Git ignore per artefatti di build e dipendenze .tool-versions| Versioni degli strumenti asdf Zig, Kit LICENSE| File di licenza...

PT-2026-81042

Name of the Vulnerable Software and Affected Versions libp2p versions prior to 4.2.9 Description In the reservation refresh path within reservation-store.ts, the software reuses the same retimeableSignal but unconditionally registers a new abort listener during every refresh. A remote peer can...

selenium-wire

Selenium Wire wird nicht mehr gepflegt. Vielen Dank für deine Unterstützung und alle deine Beiträge. Selenium Wire Selenium Wire erweitert die Python-Bindings von Selenium , um dir Zugriff auf die zugrunde liegenden Anfragen des Browsers zu geben. Du schreibst deinen Code auf dieselbe Weise wie m...

westone-CVE-2022-1388-scanner

westone-CVE-2022-1388-scanner Richieste non divulgate possono bypassare l'autenticazione REST di iControl. Installazione e Utilizzo git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd westone-CVE-2022-1388-scanner cmd CVE-2022-1388.exe...

CVE-2024-7954POC

CVE-2024-7954POC Esiste una vulnerabilità di esecuzione arbitraria di codice nel plugin porteplume utilizzato nelle versioni di SPIP precedenti a 4.30-alpha2, 4.2.13 e 4.1.16. Un attaccante remoto non autenticato può sfruttare questa vulnerabilità inviando richieste HTTP appositamente create per...

BurpSuite-Team-Extension

BurpSuite-Team-Extension Questo plugin Burpsuite consente a più tester di condividere in tempo reale richieste proxy live/storiche, scope e payload Repeater/Intruder, permettendo un testing di applicazioni web davvero collaborativo. Quando sei connesso al Team Server e in una stanza del team, tut...

Burp-Recordadora

🧙‍♂️ Recordadora Recordadora è un'estensione per BurpSuite ispirata a Harry Potter. Come la ricordella di Neville, ti aiuta a non dimenticare né perdere il contesto dei tuoi test. ✨ Funzionalità Salvare e ripristinare la cronologia del Proxy Esportare e importare le richieste del Repeater Rendere...

CVE-2026-27654-PoC

CVE-2026-27654 – nginx ngxhttpdavmodule PoC per la gestione dei percorsi alias DAV Questo repository fornisce un proof-of-concept exploit per CVE-2026-27654 , una vulnerabilità di heap overflow nel modulo ngxhttpdavmodule di nginx. Il bug deriva da un underflow di tipo sizet durante la gestione d...

Malicious code in requests-crypt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f971c743a8c6661c9078bdb6486843bb50831fadf9a9a6943e8231fac374ac2f requests-crypt wraps an HTTP client so that every JSON response passes through a DataProcessor that reads a configurable field default 'cos' from the...

MAL-2026-14351 Malicious code in requests-crypt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f971c743a8c6661c9078bdb6486843bb50831fadf9a9a6943e8231fac374ac2f requests-crypt wraps an HTTP client so that every JSON response passes through a DataProcessor that reads a configurable field default 'cos' from the...

CVE-2026-59085

Server-Side Request Forgery SSRF vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery requests. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1....

gitls

Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline This tool is available when the repository, such as github, is included in the bugbounty scope. Sometimes specified as an org name or user name rather than a specific repository, you can use this tool to extract url...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

lazyCSRF

LazyCSRF LazyCSRF è un generatore di PoC CSRF più utile che funziona su Burp Suite. Non più in manutenzione🙇 Quando ho iniziato a sviluppare lazyCSRF, pensavo erroneamente che il generatore di PoC CSRF integrato in Burp Professional non potesse generare PoC usando XHR e non supportasse richieste...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

reverseip_py

reverseippy Domain parser for IPAddress.com Reverse IP Lookup. Writen in Python 3. What is Reverse IP? Reverse IP refers to the process of looking up all the domain names that are hosted on a particular IP address. This can be useful for a variety of reasons, such as identifying all the websites...

UBUNTU-CVE-2026-63481

Hurl is a command line tool that runs and tests HTTP requests defined...

Apache Struts < 7.3.0 Multiple Vulnerabilities (S2-070) (S2-071)

The version of Apache Struts installed on the remote host is 7.2.1. It is, therefore, affected by multiple vulnerabilities in the JSON plugin, as referenced in the S2-070 and S2-071 advisories: - A component of the JSON plugin that holds per-request parsing state could be shared between concurren...

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Zimbra Collaboration Suite ZCS contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user...