sh00t

root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...

tookie-osint

Tivemos que mudar a marca 🔎 Visão geral O Tookie-osint tem uma interface de usuário simples de usar e é muito direto. A ideia principal do Tookie-osint é descobrir nomes de usuário solicitados a partir de uma entrada. O Tookie-osint é semelhante à ferramenta chamada Sherlock. Ele descobre todas a...

npcap

Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

CVE-2020-24033

L'ultima versione di fs.com S3900 24T4S 1.7.1 e tutte le versioni precedenti, CSRF backstage admin Il form non dispone di un meccanismo di autenticazione o di token di autenticazione, quindi esiste una Cross-Site Request Forgery Aggiunta account utente per aggiungere un utente con accesso complet...

CVE-2022-26138

CVE-2022-26138 POC Beschreibung root@kitploit: The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with...

CVE-2026-28766

CVE-2026-28766 Autenticazione mancante: endpoint account utente Campo| Valore ---|--- CVE| CVE-2026-28766 Severità| Critico 9.3 Vettore CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N Debolezza CWE| CWE-306: Mancata autenticazione per funzione critica Componenti interessati| Cloud API 2.12.202...

CVE-2023-32749

PoC para CVE-2023-32749 Este é um PoC rápido e sujo que escrevi para o CVE-2023-32749 para o Pydio Cells. O script cria uma nova conta de usuário com todas as funções disponíveis quando fornecido com uma credencial válida. Todos os créditos vão para os pesquisadores originais. Instalação O único...

WSO2 User Registration - Arbitrary Account Creation

The SOAP admin service in WSO2 products has a security vulnerability that allows the creation of new user accounts regardless of the self-registration configuration settings. id: CVE-2024-7097 info: name: WSO2 User Registration - Arbitrary Account Creation author: iamnoooob,rootxharsh,pdresearch...

CVE-2025-64446-FortiWeb-CGI-Bypass-PoC

Strumento di Exploit per CVE-2025-64446 Strumento di exploit per la verifica e lo sfruttamento della vulnerabilità CVE-2025-64446 nei dispositivi FortiWeb. Descrizione Questo strumento rileva e sfrutta una vulnerabilità di path traversal CVE-2025-64446 nei firewall per applicazioni web FortiWeb...

CVE-2021-38699

CVE-2021-38699 TastyIgniter 3.0.7 consente XSS tramite il campo nome durante la creazione dell'account utente. Una vulnerabilità di Cross Site Scripting persistente Stored XSS è presente in più pagine di TastyIgniter v3.0.7 e consente l'esecuzione arbitraria di JavaScript...

git-alerts

GitAlerts Che problema risolve? I repository GitHub creati all'interno di qualsiasi organizzazione possono essere controllati dagli amministratori di GitHub. Tuttavia, qualsiasi repository creato sotto l'account utente di un'organizzazione non è controllabile a meno che l'organizzazione non abbia...

CVE-2026-78115 SourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edituseraccount.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...

CVE-2026-78115

SourceCodester Class and Exam Timetabling System 1.0 is affected by an improper authorization vulnerability in the User Account Update component, specifically in the file /admin/edit_user_account.php. Manipulation of the id/username argument allows a remote, authenticated attacker to bypass autho...

PT-2026-79766

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edit user account.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

refreshing-mcp-tool

Questo non è ancora del tutto finito o pronto, ma volevo mettere il codice nel repository. Implementa sostanzialmente il protocollo di database di F5, "mcp", che opera tramite un socket UNIX domain. Ciò significa che serve una shell sul dispositivo F5 prima di poter usare uno qualsiasi di questi...

UBUNTU-CVE-2026-74999

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS...

EUVD-2026-57899

Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...

CVE-2026-18960

The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who holds an application password created before the block to retain their full role-level read and write access through the REST API...