interactsh

An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...

wsh

wsh wsh pronounced woosh is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There's a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow...

Elite

Deprecated Temporarily The parent Covenant project no longer requires a client-side application. Elite has temporarily been deprecated. Please instead use the web interface included with the Covenant project. Elite may eventually be brought up-to-date with the Covenant project as an alternative...

spyse.py

spyse.py Envoltorio de API de Python y cliente de línea de comandos para las herramientas alojadas en spyse.com. "Spyse es un desarrollador de soluciones completas DAAS Datos como Servicio para profesionales de seguridad en Internet, administradores de sistemas corporativos y remotos, proveedores...

inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides four ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

DEBIAN-CVE-2026-87798

Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 fixed in 4.0.14, 5.0.10 and 5.21.8 on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary...

UBUNTU-CVE-2026-87798

Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 fixed in 4.0.14, 5.0.10 and 5.21.8 on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary...

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

CVE-2026-86334: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

GHSA-RVX4-FFVW-M9Q3 Composer arbitrary command execution via a malicious package's Perforce source URL

Summary If the p4 Perforce CLI client is installed, a malicious dependency package from a package repository allowing arbitrary perforce source URLs packagist.org is safe could execute arbitrary commands when running composer install or composer update. Composer passed a package's Perforce source...

SUSE CVE-2026-64621

FreeRDP before 3.28.0 affected 3.x through 3.27.1 contains a double-free vulnerability in freerdpclientrdpfileapplytosettings client/common/file.c when parsing the selectedmonitors field of a .rdp connection file. The MonitorIds array is allocated through the settings object, and a raw non-owning...

Weblate: SSRF via URL Parser Differential in `normalize_request_url` (wlc)

The Weblate CLI client wlc was found to be vulnerable to Server-Side Request Forgery SSRF due to a differential in URL parsing between the urllib and urllib3 libraries. The vulnerability was present in the normalizerequesturl function, which was meant to validate that outgoing API requests stayed...

EUVD-2023-1221

Malicious code in bioql PyPI...

org.infinispan:infinispan-docs (15.2.0.dev03), org.infinispan:infinispan-quarkus-cli (15.2.0.dev03) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.2.0.dev03)

org.infinispan:infinispan-cli-client MAVEN version 15.2.0.dev03 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.2.0.dev03 -...

org.infinispan:infinispan-persistence-cli (8.2.8.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (8.2.8.final)

org.infinispan:infinispan-cli-client MAVEN version 8.2.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 8.2.8.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-persistence-cli (8.2.10.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (8.2.10.final)

org.infinispan:infinispan-cli-client MAVEN version 8.2.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 8.2.10.final Source cves: CVE-2025-573...

org.infinispan:infinispan-persistence-cli (9.0.0.alpha3) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.0.0.alpha3)

org.infinispan:infinispan-cli-client MAVEN version 9.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.0.0.alpha3 Source cves: CVE-2025-573...

org.infinispan:infinispan-persistence-cli (9.0.0.beta1) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.0.0.beta1)

org.infinispan:infinispan-cli-client MAVEN version 9.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.0.0.beta1 Source cves: CVE-2025-5731...

org.infinispan:infinispan-persistence-cli (9.0.0.cr1) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.0.0.cr1)

org.infinispan:infinispan-cli-client MAVEN version 9.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.0.0.cr1 Source cves: CVE-2025-5731 Sour...