TestRail-files.md5-IAC-scanner

TestRail-files.md5-IAC-scanner Improper Access Control in Gurock TestRail versions Input server in http:\ or https:\ format The script will print out the server/file location, status code if not 500, and any interesting keywords found...

gods-eye-view

🌐 God's Eye View A spy-satellite simulator in your browser — then you realize the sources are public and the data is real. Photorealistic 3D globe. Live aircraft, ships, satellites, earthquakes, traffic, and public cameras. Hands-free voice control powered by a realtime AI agent. No place left...

cve-2025-57819-freepbx-range

CVE-2025-57819 FreePBX Cyber Range Isolated educational cyber-range for CVE-2025-57819 CWE-89, CWE-288. Original FreePBX-compatible training application — not official Sangoma FreePBX. Quick start git clone https://github.com/shivammittal2403/cve-2025-57819-freepbx-range cd...

CVE-2020-5902

CVE-2020-5902 F5 BIG-IP Traffic Management User Interface TMUI Remote Code Execution In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote...

CVE-2026-104350

Adobe Campaign Classic ACC is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue...

OpenClawMachines

OpenClaw Machines Run as many isolated OpenClaw agents as you need, on hardware you own. OpenClaw Machines is an open-source platform for runningOpenClaw in secure AI sandboxes on your own infrastructure. A control plane orchestrates your hosts, and each agent runs in its own Firecracker microVM ...

CVE-2026-11991-Exploit

CVE-2026-11991 — FlowForms Unauthorized Form Publication Authenticated Contributor+ Authorization Bypass to Publish Any Draft Form in FlowForms ≤ 1.1.1 Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2026-11991 CVSS Score| 6.2 — Medium CVSS Vector|...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

Dna

Dna Dna is a static binary analysis framework built on top of LLVM. Notably it's written almost entirely in C, including managed bindings for LLVM, Remill, and Souper. Functionality Dna implements an iterative control flow graph reconstruction inspired heavily by the SATURN paper. It iteratively...

SOC235---Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515

EVENTID-197 field| Value ---|--- EventID| 197 Event Time| Nov, 09, 2023, 09:47 AM Rule| SOC235 - Atlassian Confluence Broken Access Control 0-Day CVE-2023-22515 Level| Security Analyst Hostname| Confluence Data Center Destination IP Address| 172.16.17.234 Source IP Address| 43.130.1.222 HTTP...

cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

DeimosC2

DeimosC2 Deimos is in: DEPRECATED DeimosC2 is no longer maintained and has a known XSS vulnerability CVE-2025-26244. Thanks to JaRm222 for identifying the vuln and notifying us. His writeup of the vuln can be foundhere. DeimosC2 is a post-exploitation Command & Control C2 tool that leverages...

CVE-2026-104350

The software Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by inducing a victim to visit a maliciously crafted URL or interact with a compromised web page to inject scripts. Successful exploitation could res...

CVE-2026-104350 Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Campaign Classic ACC is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue...

EUVD-2026-111227

Adobe Campaign Classic ACC is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue...

EUVD-2026-111226

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...

CVE-2026-31857

CVE-2026-31857: Craft CMS control panel RCE CVE-2026-31857 is a remote code execution issue in Craft CMS relational condition rules. BaseElementSelectConditionRule::getElementIds renders user-controlled input as an unsandboxed Twig template. An authenticated Control Panel user can submit a crafte...

C3

C3 Build C3 MSVC/badge.svg?branch=master Build C3 Clang/badge.svg?branch=master C3 Custom Command and Control is a tool that allows Red Teams to rapidly develop and utilise esoteric command and control channels C2. It's a framework that extends other red team tooling, such as the commercial Cobal...

DataInject-BOF

Data Inject BOF A beacon object file implementation of the process injection proof-of-concept from my blog post Control Flow Hijacking via Data Pointers. Hijacks control flow via overwriting combase.dll's Control Flow Guard function pointers called by COM proxying functions. Important Notes From ...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...