social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

privacybadger

Privacy Badger Privacy Badger is a browser extension that automatically learns to block hidden trackers. Privacy Badger is made by the leading digital rights nonprofit EFF to stop companies from spying on you. Privacy Badger sends the Global Privacy Control signal to opt you out of data sharing a...

dependency-track

OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

cve-2026-25676

CVE-2026-25676 Research DLL Search Path Hijacking in M-Track Duo HD Installer Overview This repository contains initial research and a proof-of-concept related to CVE-2026-25676, a DLL search path hijacking vulnerability affecting the installer of M-Track Duo HD 1.0.0. The goal of this project is...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...

VLC_CVE-2021-25804_Analysis

An AVI file can have multiple tracks. For example an audio track and a video track. In order to parse an arbitrary number of tracks VLC first must determine if a given track is finished and playable. Two variables are set up with this purpose in mind. Both named itrack. The variable psys...

CVE-2026-115333

Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validates API keys by prefix only, without checking the secret against the stored hashedkey. Attackers who know or obtain an API key prefix can submit usage events to POST /api/track/ ...

CVE-2026-115333 Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix

Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validates API keys by prefix only, without checking the secret against the stored hashedkey. Attackers who know or obtain an API key prefix can submit usage events to POST /api/track/ ...

CVE-2026-115333 Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix

Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validates API keys by prefix only, without checking the secret against the stored hashedkey. Attackers who know or obtain an API key prefix can submit usage events to POST /api/track/ ...

EUVD-2026-108135

Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validates API keys by prefix only, without checking the secret against the stored hashedkey. Attackers who know or obtain an API key prefix can submit usage events to POST /api/track/ ...

CVE-2026-115333

The Lotus platform (through version 0.10.2 ) is susceptible to an improper authentication vulnerability within the Go event ingestion middleware . The root cause is that the middleware validates API keys based on the prefix only , failing to verify the secret against the stored hashed_key. An att...

Malicious code in jiklpo-tsunari-kay (PyPI)

Source: kam193 82ef4d01da7de20aa2e477bb07e1daa97855cdf33d186579da5cf148e3d4be0e The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testin...

Malicious code in hijiko-pilaka (PyPI)

Source: kam193 1ca95d97923a23c0fd145b6cc4def7910fa36f1b4c4e5e3cf40e5bab8c9e250d The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testin...

Malicious code in facewareretargeter (PyPI)

Source: kam193 3d3c954fb5fd6d1ddfc1d5e22129468136fb43fe78c6d69f0df134925b6a8b08 The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testin...

Malicious code in hijok-lampam (PyPI)

Source: kam193 8944d571e7af6e23f5c6c984859f38e1336fcfeee595dfabca635477cfe38045 The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testin...

MAL-2026-18112 Malicious code in hijok-lampam (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8944d571e7af6e23f5c6c984859f38e1336fcfeee595dfabca635477cfe38045 The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical...

MAL-2026-18113 Malicious code in jiklpo-tsunari-kay (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82ef4d01da7de20aa2e477bb07e1daa97855cdf33d186579da5cf148e3d4be0e The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical...

MAL-2026-18111 Malicious code in hijiko-pilaka (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1ca95d97923a23c0fd145b6cc4def7910fa36f1b4c4e5e3cf40e5bab8c9e250d The package uses fake http-downloaded dependencies to track downloads, and has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical...

Malicious code in facewareretargeter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcd41ab1e378f4c7d767acb2b9e9199a4276e125d6e84aba3627bf37c879f24 facewareretargeter 9.9.9 ships a 2-line stub module and a setup.py whose installrequires declares a single dependency, tracer-batch-stream-chain,...