October CMS - Remote Code Execution

October CMS is susceptible to remote code execution. In affected versions, user input is not properly sanitized before rendering. An authenticated user with the permissions to create, modify, and delete website pages can bypass cms.safemode and cms.enableSafeMode in order to execute arbitrary cod...

SickChill - Open Redirect

SickChill's login endpoint's 'next' parameter accepts arbitrary content, allowing authenticated attackers to perform open redirects, but this was fixed in commit c7128a8946c3701df95c285810eb75b2de18bf82 by redirecting to a default page. id: CVE-2024-53995 info: name: SickChill - Open Redirect...

Invoke-CVE-2022-22965-SafeCheck

Invoke-CVE-2022-22965-SafeCheck Porting PowerShell della versione Python originale di CVE-2022-22965 di colincowie. Installazione: root@kitploit: iexiwr https://raw.githubusercontent.com/daniel0x00/Invoke-CVE-2022-22965-SafeCheck/main/Invoke-CVE202222965-SafeCheck.ps1 -UseBasicParsing.content...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

safe-expr-eval

safe-expr-eval Valutatore di espressioni veloce e leggero per JavaScript e TypeScript. Un parser di espressioni moderno con un'API familiare, zero dipendenze e pieno supporto TypeScript. Funzionalità Parsing e valutazione rapidi delle espressioni Leggero e senza dipendenze Supporto completo per...

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

mcpsafetywarden

MCP Safety Warden ist ein Proxy-Server, der jeden MCP-Server umhüllt und Verhaltensprofilierung, Sicherheitsscans, Risikosteuuerung und sichere Ausführung für dessen Werkzeuge hinzufügt...

fzy

fzy fozzylang Linguaggio per sistemi di uso generale e toolchain di produzione con una superficie linguistica sicura di default, correttitudine verificabile, esecuzione deterministica e debugging basato su replay integrato. fzy fornisce una CLI di produzione, fz, sia per i flussi di lavoro del...

firefox: thunderbird: Mitigation bypass in the Safe Browsing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

cottage

cott age é uma ferramenta GitOps para equipes gerenciarem segredos criptografados com age em repositórios git. Ela fornece um fluxo de trabalho simples para criptografar/descriptografar segredos, gerenciar destinatários e manter segredos fora do repositório enquanto ainda permite compartilhamento...

firefox: thunderbird: Mitigation bypass in the Safe Browsing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

firefox: thunderbird: Mitigation bypass in the Safe Browsing component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

gh-safe-repo

gh-safe-repo Crea repository GitHub con impostazioni predefinite sicure applicate automaticamente. Sostituisce la lista di controllo delle impostazioni post-creazione di cinque minuti con un unico comando. gh-safe-repo create root@kitploit: Protezione dei branch, tag immutabili, Dependabot,...

react2shell-detector

React2Shell Detector Un'estensione Chrome per rilevare le vulnerabilità React2Shell CVE-2025-55182 e CVE-2025-66478 nelle applicazioni web. Panoramica React2Shell Detector è un'estensione del browser che aiuta i ricercatori di sicurezza e gli sviluppatori web a identificare potenziali vulnerabili...

policymaker

policymaker Genera una vera politica di divulgazione delle vulnerabilità — VDP, safe harbor, security.txt e DNS Security TXT — in pochi minuti. Nessun avvocato richiesto...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

keystone

Keystone Engine Keystone è un framework di assembler leggero, multi-piattaforma e multi-architettura. Offre alcune caratteristiche senza pari: Multi-architettura, con supporto per Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, SystemZ e X86 incluse le...

SUSE CVE-2026-74957

Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-74957

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Safe Browsing component...

CVE-2026-63654 Frappe: Unauthenticated Workflow approval via confirm_action

Frappe is a full-stack web application framework. In version 16.31.0 and earlier, the whitelisted frappe.model.workflow.bulkworkflowapproval endpoint in frappe/model/workflow.py accepts safe HTTP methods for state-changing workflow approvals because the endpoint is not restricted to POST. An...