gitcolombo

Gitcolombo OSINT tool that extracts identities — names, emails, and links between seemingly unrelated accounts — from git repositories and GitHub. Python CLI gitcolombo.py — clones repos, walks git log, and can call the GitHub API for richer signals. Web version gitcolombo.html — a single static...

caos-os

CAOS — Sistema Operacional de Garantia ao Cliente Responda de uma vez aos questionários de segurança que seus clientes enviam a você. Toda empresa que lida com dados de clientes recebe as mesmas solicitações repetidamente: questionários de segurança, avaliações de privacidade, análises de risco d...

dnsgen

DNSGen 2.0 - Motore Avanzato di Permutazione dei Nomi DNS 🚀 DNSGen è un potente e flessibile strumento di permutazione dei nomi DNS progettato per ricercatori di sicurezza e penetration tester. Genera variazioni intelligenti dei nomi di dominio per supportare la scoperta di sottodomini e le...

API

ShopEase API Security Shooting Range A carefully designed A...

CVE-2024-53255

CVE-2024-53255 boid CMS 2.1.1 - Cross-Site Scripting XSS refletido Descrição: Existe uma vulnerabilidade de XSS refletido no endpoint /admin?page=media no parâmetro file, permitindo que um invasor injete código JavaScript arbitrário. Passos para explorar: 1. Faça login no CMS e navegue até a pági...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

krbrelayx

Krbrelayx – Toolkit für Kerberos-Relaying und Missbrauch uneingeschränkter Delegierung Toolkit für den Missbrauch von Kerberos. Benötigt impacket, ldap3 und dnspython, um zu funktionieren. Es wird empfohlen, impacket direkt von git zu installieren, um die neueste Version zu erhalten. Weitere...

CVE-2026-78160

A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the component User Notes Handler. The manipulation of the argument ID leads to authorization bypass. The attack can be initiated remotely. Upgrading...

CVE-2026-78204

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

CVE-2026-78161

A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function reportrawcbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be...

CVE-2026-78203

Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerate and attach foreign templates, then...

CVE-2026-78157

A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Rx AA-Request Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The patch is named...

libpeconv

libPeConv Una libreria per caricare e manipolare file PE. Obiettivi L'obiettivo di libPEConv era quello di creare un "coltellino svizzero" per il caricamento personalizzato di file PE. Raccoglie varie funzioni di supporto che puoi integrare rapidamente nel tuo loader personale. Ad esempio:...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

CVE-2026-78161 warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write

A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function reportrawcbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be...

CVE-2026-78161 warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write

A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function reportrawcbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be...

EUVD-2026-64685

A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function reportrawcbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be...

CVE-2026-78161

warmcat libwebsockets 4.5.0 contains an out-of-bounds write in the report_raw_cbor function of the LECP CBOR Recording component (lib/misc/lecp.c). The flaw can be triggered remotely without authentication or user interaction, leading to potential low impact on confidentiality, integrity, and ava...

CVE-2026-78161 warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write

A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function reportrawcbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be...