CVE-2026-92932

In the MISP sachertortephp library, the Xml::build static method in lib/Cake/Utility/Xml.php contains a logic error in the conditional that gates network-based XML fetching. The original condition was written as: $options'readFile' && strpos$input, 'http://' === 0 || strpos$input, 'https://' === ...

CVE-2026-81632 Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix

Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successful password sign-in,...

CVE-2026-81632 Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix

Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successful password sign-in,...

Security Bulletin: Jackson databind security vulnerability in IBM Content Cortex reported for ACCE, GraphQL, External-Share

Summary Jackson databind CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518 security vulnerability in IBM Content Cortex. Affected and vulnerable Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose...

OllamaHound

OllamaHound Modular toolkit for discovering exposed Ollama servers, fingerprinting versions, and validating model access. OllamaHound is a modular, RedTeam oriented toolkit for discovering publicly exposed Ollama servers , fingerprinting versions, classifying CVE exposure , validating whether tex...

NextRecon

NextRecon NextRecon is a simple Python-based reconnaissance tool designed for bug bounty hunters, security researchers, and penetration testers. It performs passive recon by collecting archived URLs from the Wayback Machine and fetching leaked credentials from the BreachCollection API. It also...

geowifi

📡💘🌎 | geowifi Search WiFi geolocation data by BSSID and SSID on different public databases. 💾 Databases Wigle| Apple| Google| Milnikov ---|---|---|--- WifiDB| Combain| Freifunk Carte| ❌ DiscontinuedOpenWifi ✔️Prerequisites Python3. In order to display emojis on Windows , it is recommended to...

Security Bulletin: Multiple Security Vulnerabilities in Netty Affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerabilities Vulnerability Details CVEID:CVE-2026-42586 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the Netty Redis code...

CVE-2026-92932

In the MISP sachertortephp library, the Xml::build static method in lib/Cake/Utility/Xml.php contains a logic error in the conditional that gates network-based XML fetching. The original condition was written as: $options'readFile' && strpos$input, 'http://' === 0 || strpos$input, 'https://' === ...

CVE-2026-92932 MISP sachertortephp Xml::build() Operator Precedence Bypass Allows Unintended HTTPS SSRF When readFile Is Disabled

In the MISP sachertortephp library, the Xml::build static method in lib/Cake/Utility/Xml.php contains a logic error in the conditional that gates network-based XML fetching. The original condition was written as: $options'readFile' && strpos$input, 'http://' === 0 || strpos$input, 'https://' === ...

maude-hcs

Maude-HCS Maude-HCS is one of the first generalized and modular toolchains for formally specifying and reasoning about Hidden Communication Systems HCS at real-world scales. It enables network designers to explore alternative HCS designs quickly and effectively and provides formal...

waf-checker

WAF Checker This project helps you check how well your Web Application Firewall WAF protects your product against common web attacks. It can be run as a Cloudflare Worker with a built-in interactive Web UI or as a standalone Node.js CLI tool. Features Core Testing Enter a target URL, pick HTTP...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

LinkedInDumper

LinkedInDumper Python 3 script to dump company employees from LinkedIn API 💬 Description LinkedInDumper is a Python 3 script that dumps employee data from the LinkedIn social networking platform. The results contain firstname, lastname, position title, location and a user's profile link. Only 2 A...

chomtesh

CHOMTE.SH Be sure to :star: this repo so you can keep up to date on any daily progress! CHOMTE.SH is a versatile framework designed for automating reconnaissance tasks in penetration testing. It's useful for bug bounty hunters and penetration testers in both internal and external network...

CAPEv2

CAPE: Malware Configuration And Payload Extraction - Documentation CAPE is a malware sandbox. A sandbox is used to execute malicious files in an isolated environment whilst instrumenting their dynamic behaviour and collecting forensic artefacts. CAPE was derived from Cuckoo v1 which features the...

Pegasus-Pentest-Arsenal

Pegasus Pentest Arsenal PPA root@kitploit: /\ / | / \ | \ | || | | | | / | /| |/ |/ |/ ,/; ; ; ,'/|; ,/,/, ,'/ |;/,/,/,/| ,/; |;|/,/,/,/,/| ,/'; |;|,/,/,/,/,/| ,/'; |;|/,/,/,/,/,/|, / ; |;|,/,/,/,/,/,/| / ,'; |;|/,/,/,/,/,/,/| /,/'; |;|,/,/,/,/,/,/,/| /;/ '; |;|/,/,/,/,/,/,/,/| ██████╗ ███████╗...

munin

root@kitploit: | | | | | \ | | | | | | \ \ | | | | \ \ /. | | | | | | | | | | | | | | | | | | | | /| || || || ||| || || || || || // / /'" " Online Hash Checker for Virustotal and Other Services Florian Roth What is Munin? Munin is a online hash checker utility that retrieves valuable information...

CVE-2026-92914

AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares challenge responses using loose equality against an uninitialized session variable. Attackers with a victim's password can bypass the second factor by sending a parameter-less G...

Cybersecurity-Projects

Cybersecurity Projects 🐉 70 Cybersecurity Projects, Certification Roadmaps & Resources Made possible by CertGames View Complete Projects: Currently building: DDoS Mitigation Tool Quick Navigation Projects Hands-on cybersecurity projects with full source code, organized in four tiers — Foundations...