CVE-2026-77652

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

linkedin2username

linkedin2username Strumento OSINT: Genera liste di nomi utente dalle aziende su LinkedIn. Questo è un puro web-scraper, non è necessaria alcuna chiave API. Usi il tuo nome utente e password validi di LinkedIn per accedere, e creerà diverse liste di possibili formati di nomi utente per tutti i...

linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure, Policy Secure и ZTA Gateways - CVE-2025-0282 Command: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET Ссылка:...

infisical

Платформа управления секретами с открытым исходным кодом : Синхронизируйте секреты/конфигурации в вашей команде/инфраструктуре и предотвращайте утечки секретов. Slack | Infisical Cloud | Самостоятельное развертывание | Документация | Веб-сайт | Twitter | Вакансии удаленно/SF Введение Infisical —...

CVE-2026-74770

Dell PowerProtect One (versions 20.1.0.0 and below ) is affected by an OS Command Injection vulnerability. A low-privileged remote attacker can exploit this flaw to achieve code execution , with a CVSS 3.1 score of 8.8 (HIGH) — reflecting network attack vector, low complexity, and high impact on ...

EUVD-2026-66674

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-74770

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-74770

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-71171

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote...

CVE-2026-70419

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

turbinia

Turbinia Summary Note: Turbinia will not develop new features anymore and is in maintenance mode. Users should have a look atOpenRelik. Turbinia is an open-source framework for deploying, managing, and running distributed forensic workloads. It is intended to automate running of common forensic...

mapcidr

A utility program to perform multiple operations for a given subnet/CIDR range. Features • Install • Usage • Library • Join Discord mapCIDR is developed to ease load distribution for mass scanning operations; it can be used both as a library and as an independent CLI tool. Features CIDR expansion...

gdb-frontend

GDBFrontend ist ein einfacher, flexibler und erweiterbarer GUI-Debugger. Installation Voraussetzungen GDB = 8.2 mit Python3 Python3 = 3.6 tmux PIP-Paket Python Wheel Empfohlen Sie können GDBFrontend mit pip installieren. root@kitploit: sudo python3 -m pip install gdbfrontend Wenn es bereits...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. root@kitploit: sudo python3 -m pip install gdbfrontend if it is already installed and you a...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

CVE-2022-33891

「💥」CVE-2022-33891 描述 Apache Spark UI 提供了通过配置选项 spark.acls.enable 启用 ACL 的可能性。配合身份验证过滤器，该功能会检查用户是否具有查看或修改应用程序的访问权限。如果 ACL 已启用，HttpSecurityFilter 中的某条代码路径可能允许攻击者通过提供任意用户名来执行冒充操作。恶意用户随后可能能够访问一个权限检查函数，该函数最终会根据其输入构建一个 Unix shell 命令并执行它。这将导致以 Spark 当前运行的用户身份执行任意 shell 命令。此漏洞影响 Apache Spark 3.0.3...

sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...

CVE-2026-68861

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...