CVE-2026-33272

A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally...

EUVD-2026-95815

A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally...

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

CVE-2026-85348

The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to change that setting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link...

HardeningKitty

HardeningKitty これは、Michael Schneider による Windows Hardening Project の HardeningKitty の安定版です。 HardeningKitty の安定版は、 scip AG のコード署名証明書で署名されています。安定版であるため、このリポジトリではプルリクエストを受け付けていません。開発リポジトリ に送信してください。 HardeningKitty は Windows システムの堅牢化をサポートします。システムの構成は、検出リスト（finding...

EUVD-2026-95706

The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to change that setting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link...

WhatsApp-OSINT

WHATS OSINT 🕵️‍♂️ WhatsApp용 OSINT 도구 로, 프로필 사진 획득, 비즈니스 계정 확인, 상태 및 사용자 정보 확인, 연결된 기기 분석, 개인정보 설정 검토, WhatsApp OSINT APIRapidAPI를 통한 전체 데이터 접근이 가능합니다. 6개 엔드포인트 지원: about, base64, business, devices, doublecheck, privacy. 🚀 기능 전화번호로 WhatsApp 프로필 사진 검색 WhatsApp 비즈니스 계정 확인 사용자 상태 및 기본 정보 확인 연결된 기기 분석...

MsSettingsDelegateExecute

MsSettingsDelegateExecute Windows 10/11 x64 で ms-settings の DelegateExecute レジストリキーを使用して UAC をバイパスします。 この Visual Studio プロジェクトは、この問題をテストするための静的 x64 バイナリをコンパイルします。 ライセンス これらのファイルは 3-clause BSD ライセンスの下で利用可能です。...

surf

Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

user.js

このリポジトリと、以下のリンク先のインタラクティブなウェブページが 唯一の公式ソース です。Arkenfox を名乗る他のサイトを信頼しないでください。 🟪 user.js user.js は Firefox の設定を制御できる設定ファイルです。より技術的な詳細と説明については、wiki を参照してください。 🟩 arkenfox user.js arkenfox user.js は、可能な限り多くのプライバシーと強化されたセキュリティを提供し、追跡とフィンガープリンティングを可能な限り削減することを目指すテンプレート...

CVE-2019-19651

CVE-2019-19651 Chevereto 반사형 XSS 웹사이트 이름, 문서 제목, 설명에서 - 1.0.0 - 1.1.4 Free, 설정 - 웹사이트 이름, 웹사이트 문서 제목, 웹사이트 설명 이 값을 입력하면 전체 사이트의 모든 사용자에게 반영됩니다. "ChevtChevt...

EUVD-2026-95523

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

CVE-2026-88931 Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update

The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own...

CVE-2026-88931

The Social Web Suite WordPress plugin (versions through 4.1.12 ) is vulnerable to an unauthenticated arbitrary plugin settings update . The root cause is a failure to restrict which settings can be modified via an unauthenticated endpoint. This allows an attacker to overwrite arbitrary plugin opt...

WordPress Social Web Suite plugin <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update vulnerability

Unauthenticated Arbitrary Plugin Settings Update vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Social Web Suite versions = 4.1.12...

adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...