3550 matches found
npcap
Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...
tookie-osint
Tookie-OSINT V4 is here! Tookie-OSINT has been re-written 100% from scratch for ultimate performance! Translations are still not ready yet. The wiki and readme are going through some changes. š Language Select your language / čØčŖćéøęćć¦ćć ćć / éę©ä½ ēčÆčØ / SĆ©lectionnez votre langue / Seleccione su idioma...
CVE-2020-24033
The latest version of fs.com S3900 24T4S 1.7.1 and all previous version, CSRF backstage admin The form does not have a authentication or token authentication mechanism, so there is a Cross-Site Request Forgery Add user account to add an user with full access. All form on the S3900 24T4S are subje...
CVE-2021-38699
CVE-2021-38699 TastyIgniter 3.0.7 allows XSS via the name field during user-account creation. A Stored Cross Site Scripting Vulnerability exists in multiple pages of TastyIgniter v3.0.7 that allows for arbitrary execution of JavaScript. https://vulners.com/cve/CVE-2021-38699 Vulnerable Pages:...
sh00t
A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...
username-anarchy
Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...
CVE-2026-28766
CVE-2026-28766 Missing Authentication: User Account Endpoint Field| Value ---|--- CVE| CVE-2026-28766 Severity| Critical 9.3 CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N Weakness CWE| CWE-306: Missing Authentication for Critical Function Affected components| Cloud API 2.12.2026 Vendo...
linux-malware-detect
Linux Malware Detect LMD Malware scanner for Linux ā multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...
CVE-2022-26138
CVE-2022-26138 POC Description The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the...
WSO2 User Registration - Arbitrary Account Creation
The SOAP admin service in WSO2 products has a security vulnerability that allows the creation of new user accounts regardless of the self-registration configuration settings. id: CVE-2024-7097 info: name: WSO2 User Registration - Arbitrary Account Creation author: iamnoooob,rootxharsh,pdresearch...
git-alerts
GitAlerts What problem does it solve? GitHub repositories created under any organization can be controlled by the GitHub administrators. However any repository created under an organization's user account is not controllable unless the organisation has adopted the GitHub enterprise-managed user E...
CVE-2023-32749
PoC for CVE-2023-32749 This is a quick and dirty PoC I wrote for CVE-2023-32749 for Pydio Cells. The scripts creates a new user account with the all the roles available when provided with a valid credential. All credits goes to the original researchers. Installation The only requirements is the...
refreshing-mcp-tool
This isn't really done or ready yet, but I wanted to get the code checked in. This basically implements F5's database protocol, "mcp", which operates through a UNIX domain socket. That means that you need a shell on the F5 device before you can use any of these. You'll typically forward the outpu...
CVE-2025-64446-FortiWeb-CGI-Bypass-PoC
CVE-2025-64446 Exploit Tool Exploit tool for CVE-2025-64446 vulnerability verification and exploitation in FortiWeb devices. Description This tool tests for and exploits a path traversal vulnerability CVE-2025-64446 in FortiWeb web application firewalls. It can be used to verify vulnerability...
CVE-2026-114255
A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function saveuser of the file adminclass.php of the component User Account Management. The manipulation of the argument name/username/password/type/id resul...
CVE-2026-114255 oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection
A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function saveuser of the file adminclass.php of the component User Account Management. The manipulation of the argument name/username/password/type/id resul...
EUVD-2026-107325
A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function saveuser of the file adminclass.php of the component User Account Management. The manipulation of the argument name/username/password/type/id resul...
CVE-2026-114255
A security flaw exists in the User Account Management component of oretnom23 file-management-system-php (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4). The vulnerability is located in the save_user function within the admin_class.php file, where improper handling of the name/username/pas...
CVE-2026-114255 oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection
A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function saveuser of the file adminclass.php of the component User Account Management. The manipulation of the argument name/username/password/type/id resul...
PT-2026-120667
A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function save user of the file admin class.php of the component User Account Management. The manipulation of the argument name/username/password/type/id...