Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Interlace

Interlace Trasforma facilmente applicazioni a riga di comando single-thread in un'applicazione veloce multi-thread con supporto per CIDR e glob. Recensioni / Guide Interlace: A Tool to Easily Automate and Multithread Your Pentesting & Bug Bounty Workflow Without Any Coding Indice Installazione...

forbidden

Forbidden Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client. Tested on Kali Linux v2024.2 64-bit. Made for educational purposes. I hope it will help! Future plans: Add the silent option to suppress console output. Add the no color option...

RapidWebRecon

Generatore di Report PDF da Nuclei Uno strumento di automazione di livello professionale progettato per colmare il divario tra scansione tecnica delle vulnerabilità e reporting esecutivo. Sviluppato da Adi Mahluf Tenroot Cyber Security. 🚀 Panoramica Questo progetto offre un flusso di lavoro "unic...

apk.sh

🕹️ apk.sh apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK. Features apk.sh basically uses apktool to disassemble, decode and rebuild resources and some bash to automate the frida...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

hashview

Hashview v0.8.2 Hashview is a tool for security professionals to help organize and automate the repetitious tasks related to password cracking. It is broken into two compoents, the Hashview Server, and Hashview Agent. The Hashview Server is a web application that manages one or more agents,...

rebrowser-patches

🪄 Patches für unentdeckbare Browser-Automatisierung Dieses Repository enthält Patches zur Verbesserung beliebter Web-Automatisierungsbibliotheken. Konkret richtet es sich an die Pakete puppeteer und playwright. Einige Aspekte von Automatisierungsbibliotheken oder des Browserverhaltens lassen sich...

caos-os

CAOS — Sistema Operacional de Garantia ao Cliente Responda de uma vez aos questionários de segurança que seus clientes enviam a você. Toda empresa que lida com dados de clientes recebe as mesmas solicitações repetidamente: questionários de segurança, avaliações de privacidade, análises de risco d...

ai-captcha-bypass

Risolutore di CAPTCHA basato su IA Questo progetto è uno strumento da riga di comando basato su Python che utilizza grandi modelli multimodali LMM come GPT-4o di OpenAI e Gemini di Google per risolvere automaticamente vari tipi di CAPTCHA. Sfrutta Selenium per l'automazione del browser web al fin...

muraena

Muraena è un reverse proxy quasi trasparente pensato per automatizzare le attività di phishing e post-phishing. Lo strumento reimplementa l'idea, vecchia di 15 anni, di utilizzare un reverse proxy personalizzato per interagire dinamicamente con l'origine da colpire, invece di mantenere e servire...

pwninit

pwninit Uno strumento per automatizzare l'avvio di sfide di sfruttamento di binari Caratteristiche Rende eseguibile il binario della challenge Scarica un linker ld-linux.so. in grado di caricare la libc fornita senza causare segfault Scarica i simboli di debug ed esegue l'unstrip della libc Appli...

playwright

🎭 Playwright Documentazione | Riferimento API...

BurpSuite-Grand-Master-Tools

BurpSuite-Grand-Master-Tools Dinu11secur1ty — Un toolkit modulare che trasforma le catture di Burp in azioni istantanee e ripetibili. Converti. Riutilizza. Apri. Automatizza. 🚀 Presentazione rapida BurpSuite-Grand-Master-Tools è un toolkit leggero, verificabile ed estensibile per pentester e...

fuzzing-templates

Fuzzing Templates Community curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities. Documentation • Contributions • Discussion • Community !Caution This repository is archived and merged into nuclei-templates project under /dast directory...

CVE-2026-77264

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code WordPress plugin (versions ≤ 4.8.6 ) contains a critical authentication bypass (CVSS 9.8). The handle_email_otp_return() function returns the secret magic login token directly in the HTTP response to a publ...

CVE-2026-77264 Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed in IBM Business Automation Manager Open Editions 9.5.2 Vulnerability Details CVEID:CVE-2026-62389 DESCRIPTION: Rejected reason: This CVE ID has been rejected or withdrawn b...

CVE-2026-77083 n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution

n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to pollute it from within a Code node...