DOCxNGINxFX

WORDLISTxGENERATORxFX Version 1.0 Version 2.0 WORDLISTxGENERATORxFX renommé en DOCxNGINxFX Version 3.0 DOCxNGINxFX J'ai écrit ça pour redonner un peu à la grande et puissante communauté open source qui partage ses connaissances ou ses frameworks et de qui j'ai tant appris. La fonction principale ...

llm-security-101

Безопасность LLM 101 Погружение в мир безопасности LLM: исследование атакующих и защитных инструментов, раскрывающее их текущие возможности. По мере того как мы внедряем большие языковые модели LLM в различные приложения и функциональные возможности, крайне важно понимать связанные с ними риски и...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

Evilginx-Phishing-Infra-Setup

Руководство по развертыванию инфраструктуры для фишинговых кампаний Примечание: Это копия моих личных заметок. Пожалуйста, не полагайтесь на них полностью. Содержание Блоги/Доклады Автоматизация инфраструктуры Red Team/Фишинг Методы покупки и категоризации доменов Улучшение написания фишинговых...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

CVE-2026-48530 GFI Archiver < 15.13 Stored XSS via CategorizationPolicyWizard.aspx

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject arbitrary web script or HTML via the rule name and email criteria parameters to /Archiver/CategorizationPolicyWizard.aspx. The...

CVE-2026-48530

CVE-2026-48530 affects GFI Archiver prior to 15.13, with a stored XSS in Classification Rules via CategorizationPolicyWizard.aspx. An authenticated attacker can inject script or HTML through rule name and email criteria parameters; the payload is stored by SaveAllConfigSettings() and executed in ...

CVE-2026-33721

MapServer (CVE-2026-33721) has a heap-buffer-overflow in the SLD parser triggered by a crafted SLD containing more than 100 Threshold elements in a ColorMap/Categorize structure, exploitable by an unauthenticated remote attacker via WMS GetMap with SLD_BODY. Affects versions up to 4.2 prior to 8....

SOGo 跨站脚本漏洞

SOGo is a highly fast and scalable modern collaboration suite open source by Alinto. It offers calendar management, address book management, a fully functional webmail client, as well as features for resource sharing and permission handling. Versions of SOGo prior to 5.12.5 contained a cross-site...

PT-2026-24376

Name of the Vulnerable Software and Affected Versions Microsoft Authenticator affected versions not specified Description A condition exists where an unauthorized attacker can disclose information locally. The issue relates to Cwe not being in rca categories. Recommendations At the moment, there ...

Exploit for CVE-2017-0144

ExploitdbPro - Enhanced Edition Enhanced CLI tool for Exploit...

EUVD-2017-15234

Malware in sbrugna...

EUVD-2008-7263

Malware in sbrugna...

EUVD-2000-0123

Malware in sbrugna...

EUVD-2024-1886

Malicious code in bioql PyPI...

EUVD-2024-25703

Malicious code in bioql PyPI...

EUVD-2025-3732

Malicious code in bioql PyPI...

EUVD-2025-13937

Malicious code in bioql PyPI...

WordPress AutoCatSet Cross-Site Request Forgery Vulnerability

AutoCatSet is an automatic post categorization plugin for the WordPress platform. A cross-site request forgery vulnerability exists in AutoCatSet 2.1.4 and earlier versions, which stems from the autocatsetajax function not properly implementing a random number validation mechanism. An attacker ca...

WordPress Radio Station plugin <= 2.5.12 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Radio Station versions = 2.5.12...