9638 matches found
deepsecrets
OWASP DeepSecrets — a better tool for secrets scanning What is it? Another token-wasting CLI proxy to an AI API? Absolutely not! In our LLM-hype era, DeepSecrets still runs entirely on your machine — giving you great results offline, securely, and for free. So why yet another tool? Most existing...
tarnish
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...
nikto
nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using per...
OpenSky Flight Planning Unrestricted File Execution
The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
OpenSky Flight Planning Unrestricted File Execution
The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
Enlogic SCADA System ENTTEK Code Execution
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...
printix-CVE-2022-29551
CVE-2022-29551 Simple Release | Print Friendly A "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to install malicious printer drivers...
CVE-2021-40870
CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...
whispers
Whispers "My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord Varys Whispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or...
Weggli_rules_SSTIC2023
Here is a curated list of weggli queries You can read them and use them one by one, or launch them by batch: Usage: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ There is threee categories: 1. dangerous functions: such as strcpy, system, etc.. 2. stack : tries to...
CVE-2024-31351_wordpress_exploit
Wordpress - Copymatic – AI Content Writer & Generator = 1.6 - Unauthenticated Arbitrary File Upload CVE-2024-31351 Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: fro...
CVE-2025-53964
CVE-2025-53964 Risk assessment CVSS v3: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - 9.6/10 Description GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...
VulnFanatic-NG
VulnFanatic-NG LLM-assisted vulnerability research for Binary Ninja. VulnFanatic-NG adds a sidebar panel that scans the current binary and asks an LLM — a locally hosted OpenAI-compatible model by default, or Anthropic Claude, Google Gemini, or Azure OpenAI see LLM backends — to judge whether...
CVE-2026-48356
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-48356 Write-up: https://abraxaslabs.tech/research/CVE-2026-48356 CVE-2026-48356 Magento Open Source 2.4.8-p5 - Adobe I am @abraxasnull. Loopback lab. CVE-2026-48356-Abraxas-Labs.py chdirs into lab/ and runs...
gitrob
Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...
Fortinet FortiAnalyzer Unrestricted upload of file with dangerous type in httpd (FG-IR-26-248)
The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-248 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Fortinet FortiManager Unrestricted upload of file with dangerous type in httpd (FG-IR-26-248)
The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-248 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
EUVD-2026-122250
Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network...
