email-header-analyzer

E-Mail 헤더 분석기 MHA E-Mail 헤더 분석기MHA란? E-Mail 헤더 분석기는 flask로 작성된 도구로, 이메일 헤더를 파싱하여 사람이 읽을 수 있는 형식으로 변환합니다. 또한 다음 기능을 제공합니다: 홉 지연 식별 이메일 출처 식별 홉 국가 식별 MHA는 다음 도구들의 대안입니다: 이름| 개발사| 문제점 ---|---|--- MessageHeader| Google| 모든 홉을 표시하지 않음. EmailHeaders| Mxtoolbox| 정확하지 않고 느림. Message Header Analyzer|...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2024-53027-WIP

CVE-2024-53027-WIP Работа в процессе над PoC CVE-2024-53027: Уязвимость Qualcomm Bluetooth/Wi-Fi 📄 Обзор CVE-2024-53027 — это уязвимость средней степени серьёзности CVSS не оценён, затрагивающая чипсеты WLAN и Bluetooth компании Qualcomm в устройствах на Android. Она может вызывать кратковременны...

CVE-2024-3495-Poc

CVE-2024-3495-Poc CVE-2024-3495 Country State City Dropdown CF7 Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTM...

CVE-2023-1389

Описание CVE-2023–1389 — это уязвимость неаутентифицированного внедрения команд в Wi-Fi-роутере TP-Link Archer AX21. Обратный вызов в параметре country использует функцию popen , которая выполняется от root, что позволяет атакующему внедрять произвольные значения через GET или POST запросы к...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

WordPress iQ Block Country <=1.2.11 - Cross-Site Scripting

WordPress iQ Block Country plugin 1.2.11 and prior contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and...

IP2Location Country Blocker < 2.38.9 - Unauthenticated Information Disclosure

IP2Location Country Blocker plugin for WordPress up to version 2.38.8 contains a regular information exposure caused by missing capability checks on admininit, letting unauthenticated attackers view plugin settings, exploit requires no special conditions. id: CVE-2025-1361 info: name: IP2Location...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

CVE-2026-38468

A SQL injection vulnerability in the country-code lookup endpoint in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersviewips privileges to execute arbitrary SQL commands via the ip parameter in a crafted request to...

CVE-2026-38468

This is a SQL injection vulnerability in GazellePW (GazellePosterWall) , a private music tracker application, specifically in the country-code lookup endpoint (tools.php?action=get_cc). The ip parameter is not properly sanitized, allowing remote authenticated users holding the users_view_ips priv...

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

The operators of the DevMan ransomware-as-a-service RaaS scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and manage various aspects related to victims. Swiss cybersecurity company PRODAFT is tracking the centrally administere...

EUVD-2026-47252

Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-61031

Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-12592

CVE-2026-12592 affects the SlimStat Analytics WordPress plugin prior to v5.5.0. The vulnerability stems from not escaping a visitor-controlled geolocation value before rendering in admin analytics reports, enabling unauthenticated visitors to inject a stored XSS payload that executes in an admini...

CVE-2026-53227

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:57+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 16:07:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqwk6bpuc2f 2026-07-06 06:51:16+00:00| seen|...

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script VBScript files that lead to the installation of legitimate Remote Monitoring and Management RMM software. Per findings from Kaspersky, the active campaign is targeting users of WhatsApp Desktop and WhatsA...

PT-2026-49413

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi Save Entries, File Upload & Country Code Field = 1.0.6 versions...

CVE-2026-12186

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replacecountry in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Service Configuration Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploi...