interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

cygor

Cygor General Overview Cygor is a modular asset discovery framework that brings scanning, parsing, and service enumeration together in one workflow. It replaces the patchwork of separate tools with an automated process that handles discovery, enrichment, and targeted enumeration seamlessly —...

AutoProber

AutoProber AutoProber es el stack de automatización de sondas voladoras para hackers de hardware, que le da a tu agente todo lo que necesita para pasar de "hay un nuevo objetivo en la placa" a sondear pines individuales de forma segura. Video de demostración:...

Sirius

Sirius Scan Sirius es un escáner de vulnerabilidades de código abierto con descubrimiento automatizado, detección basada en CVE y una interfaz web moderna. Clona el repositorio, ejecuta cuatro comandos y empieza a escanear. Inicio rápido root@kitploit: git clone...

c-sentinel

C-Sentinel Observabilidad Semántica para Sistemas UNIX Un probe de sistema ligero y portátil escrito en C que captura "huellas del sistema" para análisis asistido por IA de riesgos no obvios. Incluye integración con auditd, puntuación de riesgos explicable y un panel web en vivo con autenticación...

mylg

myLG, Command line Network Diagnostic Tool myLG is an open source software utility which combines the functions of the different network probes in one network diagnostic tool. Features Popular looking glasses ping/trace/bgp: Telia, Level3, NTT, Cogent, KPN More than 200 countries DNS Lookup...

PULSE-C2

Marco PULSE C2 Infraestructura de Comando y Control HTTPS con panel web para la gestión remota de agentes Windows. ⚠️ Solo para uso educativo - El uso ilegal es tu responsabilidad. Características Servidor C2 HTTPS con cifrado TLS Flask Panel web en tiempo real Protocolo cifrado XOR + Base64 Base...

cumulus

Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful...

meshyface

Meshyface Meshyface is a chat-first Meshtastic dashboard that runs as a single Python service and serves a single-page web UI over HTTP. Current App Surface The current UI exposes: Chat plus direct-peer conversations Network workspace for map, overview, links, routes, sensors, Top 10 rankings, no...

Flink_RCE

Apache Flink Web Dashboard Unauthorized Access, Uploading Malicious jar Leads to Remote Code Command Execution msf nc python usage: python 02-Flink.py http://10.10.20.100:8081 nc.jar...

pared

Pared Pared is a lightweight, secure control plane and real-time administrative web dashboard written in Crystal for Linux host security. It provides centralized management for firewalld DBus/CLI interfaces and NetworkManager connections, featuring mutual TLS mTLS, PAM/SSSD authentication, and...

TATS

TATS — Token Analysis and Tracking System Track OAuth 2.0, OIDC, and Microsoft Entra ID tokens across captured network traffic. Ingests Burp Suite XML exports, mitmproxy flow files, or live Chrome DevTools Protocol streams into a single SQLite database, then serves an interactive web dashboard fo...

Apache-Flink-Dashboard-rec

Apache-Flink-Web-Dashboard-RCE Apache Flink Web Dashboard RCE...

CVE-2026-88061

career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops local web dashboard web/ exposed command-spawning and user-file-writing /api routes without validating request origin or restricting clients to loopback addresses. A malicious page ...

PT-2026-89574

career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops local web dashboard web/ exposed command-spawning and user-file-writing /api routes without validating request origin or restricting clients to loopback addresses. A malicious page ...

Decepticon-NavMAX

!Englishhttps://img.shields.io/badge/Language-English-blue?s...

PYSEC-2026-2512 hermes-agent has an Incorrect Comparison

A security flaw has been discovered in NousResearch hermes-agent 2026.4.23. Affected is the function discoverdashboardplugins of the file hermescli/webserver.py of the component CLI web-dashboard Interface. Performing a manipulation of the argument HERMESENABLEPROJECTPLUGINS results in incorrect...

CVE-2026-49471

Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port, with no authentication, no CSRF protection, and no Host header validation. A D...

CVE-2026-49471

Serena exposes an unauthenticated Flask API on a fixed port prior to v1.5.2, with no authentication, CSRF protection, or Host header validation. A DNS rebinding attack can reach this API from any browser and write arbitrary content to the agent’s persistent memory store, which the agent may read ...

CVE-2026-9029 Stored XSS in the Geomap panel tile-layer attribution

A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard stored cross-site scripting...