dnsmasq-cve-2026

dnsmasq CVE-2026 QA Verification Tool Automated black-box tool for verifying 6 dnsmasq vulnerabilities May 2026. Sends attack packets to a live DUT and reports PASS/FAIL — no source code access needed. Quick Start Set DUT DNS to your laptop's WAN IP via GUI first, then: sudo python3...

CVE-2026-55168

CVE-2026-55168 This repository contains a simple PoC for CVE-2026-55168 in Runtipi. The issue is an authenticated arbitrary file write that can be reached through the backup restore flow. A crafted backup archive can plant a symlink into restored application data, and a later normal config update...

GOAD

GOAD v3 🔖 Documentación : https://orange-cyberdefense.github.io/GOAD/ Descripción GOAD es un proyecto de laboratorio de Active Directory para pentesting. El propósito de este laboratorio es ofrecer a los pentesters un entorno de Active Directory vulnerable y listo para usar para practicar técnica...

CVE-2025-27591-below-

CVE-2025-27591 – Privilege Escalation in Below 1 Introduction Below is a Linux tool for recording and displaying system data such as hardware utilization and cgroup metrics. In versions prior to v0.9.0 , Below’s systemd service runs with root privileges and creates world-writable log directories...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: NinjaPear API to get a full B2B profiles from any URL | Hostinger Deploy Web-Check with one click on Hostinger | Warp Built for coding with multiple AI agents ---|---|--- Contents About...

CVE-2026-105950 getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting

A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::sanitizeNodeAttribute of the file formwork/src/Sanitizer/DomSanitizer.php of the component URI Sanitizer. Such manipulation of the argument formaction leads to cross site...

CVE-2026-105950

The getformwork formwork component, in versions up to 2.3.12 , is vulnerable to cross-site scripting (XSS) due to an issue in the URI Sanitizer component. Specifically, the DomSanitizer::sanitizeNodeAttribute function located in formwork/src/Sanitizer/DomSanitizer.php fails to properly handle the...

flashsploit

ATtiny85 HID攻击利用框架 Twitter - Telegram - Blog 支持语言 Flashsploit 是一个针对使用 ATtiny85 HID 设备（例如 Digispark USB 开发板）进行攻击的利用框架。flashsploit 根据用户输入生成 Arduino IDE 兼容的 .ino 脚本，然后在脚本需要时在 Metasploit-Framework 中启动监听器。总结：自动脚本生成与自动化 msfconsole。 功能 TODO：添加 Linux 和 OSX 脚本 Windows 数据窃取 提取所有 WiFi 密码并将 XML 上传到 SFTP 服务器...

CVE-2026-63689

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

amass

OWASP Amass 项目 OWASP Amass 项目通过开源信息收集和主动侦察技术，执行攻击面网络映射和外部资产发现。 安装 你可以在 Amass 文档 仓库中找到更多安装说明和文档。 企业支持者 贡献 我们非常欢迎新贡献者加入！请查看 CONTRIBUTING.md 了解如何为代码库做贡献，并加入我们的 Discord 服务器 讨论当前项目目标。 故障排除 !code...

DigiTrack

DigiTrack In 30 seconds, this attack can learn which networks a MacOS computer has connected to before, and plant a script that tracks the current IP address and Wi-Fi network every 60 seconds. Now includes: Hardtracker - Digispark VPN buster to send the IP address and BSSID/SSID of nearby Wi-Fi...

ditto

Ditto 是一个小型工具，它接受域名作为输入，生成所有用于同形异义攻击的变体作为输出，并检查哪些可用、哪些已注册。 PoC 域名 https://tᴡitter.com/ https://clᴏudflare.com 使用 Docker Docker Hub 上的镜像每次推送都会更新，您只需： docker run evilsocket/ditto -h 从源码编译 从源码编译需要 Go 编译器，这会将二进制文件安装到 $GOPATH/bin： make sure go modules are used GO111MODULE=on go get...

CVE-2026-105921

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...

openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack ca...

EUVD-2026-93459

Dell Container Storage Modules, versions prior to 1.18.0 contains an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

BloodHound-Tools

What is this? A collection of tools that integrate to BloodHound. Bloodhound is the defacto standard that both blue and red security teams use to find lateral movement and privilege escalation paths that can potentially be exploited inside an enterprise environment. A typical environment can yiel...

stride-gpt

STRIDE GPT 是一款由 AI 驱动的威胁建模工具，利用大型语言模型（LLM）基于 STRIDE 方法论为给定应用程序生成威胁模型和攻击树。用户提供应用程序详情，例如应用程序类型、身份验证方法，以及该应用程序是否面向互联网或处理敏感数据。随后，模型根据所提供的信息生成输出。 目录 支持本项目 功能特性 企业部署 在 Open Security Summit 上的演讲 更新日志 安装 仓库结构 使用方法 交互式 REPL 速查表 示例输出 安全最佳实践 贡献 许可证 支持本项目 如果您觉得 STRIDE GPT 有用，请考虑支持本项目： ⭐ 在 GitHub 上为本仓库加星...

gaia

Gaia - Attack Surface Discovery & AI-Assisted Triage Gaia is a CLI-first attack surface analysis tool that discovers endpoints and parameters, reduces noise, and highlights security-relevant risks using static heuristics and optional AI reasoning. It orchestrates Katana, gau, arjun, linkfinder, a...

reaver-wps-fork-t6x

概述 Reaver 实现了一种针对 Wifi Protected Setup WPS 注册器 PIN 的 暴力破解攻击 ，以恢复 WPA/WPA2 密码 ，正如 Stefan Viehböck 在 《当糟糕的设计遇上糟糕的实现：暴力破解 Wi-Fi Protected Setup》 中所描述。 Reaver 被设计为一种针对 Wi-Fi Protected Setup WPS 注册器 PIN 的稳健且实用的攻击工具，用于 恢复 WPA/WPA2 密码 ，并已针对多种接入点和 WPS 实现进行了测试。 根据目标接入点 AP 的不同 ，传统的 在线暴力破解 方法恢复明文 WPA/WPA2 密...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...