gods-eye-view

🌐 God's Eye View A spy-satellite simulator in your browser — then you realize the sources are public and the data is real. Photorealistic 3D globe. Live aircraft, ships, satellites, earthquakes, traffic, and public cameras. Hands-free voice control powered by a realtime AI agent. No place left...

CVE-2026-76292

Splunk Enterprise (versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16) and Splunk Secure Gateway (versions below 3.10.12, 3.9.26, and 3.8.73) are vulnerable to a missing authorization flaw. A low-privileged user lacking

CVE-2026-76292 Missing Authorization through REST API Endpoints in Splunk Secure Gateway

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does not hold the "admin" Splunk role or the "scadmin" Splunk Secure Gateway role could read mobile alert notification data for...

CVE-2026-76291

Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16 are vulnerable to an improper access control issue. A user with the schedule_search capability can bypass safeguards in the scheduled search workflow because the search scheduler fails to apply SPL safeguards for risky commands....

CVE-2026-76291 Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedulesearch capability could bypass the expected safeguards in the scheduled search workflow. The user could then run risky Search Processing Language SPL commands that disclose or alter...

CVE-2026-76287

Splunk Enterprise versions prior to 10.4.4 are vulnerable to an authorization bypass in the Data Management REST API . A user with the preview_data_management_pipeline or edit_data_management_pipeline_job capability can read or delete Data Management SPL2 preview jobs and results outside their ow...

CVE-2026-76287 Authorization Bypass in the Data Management REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the previewdatamanagementpipeline capability or editdatamanagementpipelinejob capability could read or delete Data Management SPL2 preview jobs and results outside their ownership scope. The vulnerability is possible becaus...

vuln-bank-mobile

💳 Vulnerable Bank Mobile App Vulnerable Bank is an intentionally insecure mobile application built for security engineers, penetration testers, and mobile app security learners to practice and demonstrate real-world exploitation of insecure coding practices. This mobile app acts as a frontend for...

CVE-2023-22515

Red Team Tool - Confluence Unauthorized Add Admin User CVE-2023-22515 Exploit Tool Vulnerability Scope 8.0.0 = Confluence Data Center and Confluence Server = 8.0.4 8.1.0 = Confluence Data Center and Confluence Server = 8.1.4 8.2.0 = Confluence Data Center and Confluence Server = 8.2.3 8.3.0 =...

json-sanitizer

json-sanitizer Given JSON-like content, The JSON Sanitizer converts it to valid JSON. Getting Started - Contact This can be attached at either end of a data-pipeline to help satisfy Postel's principle: be conservative in what you do, be liberal in what you accept from others Applied to JSON-like...

CVE-2020-8193

Citrix ADC Vulns CVE List https://support.citrix.com/article/CTX276688 Add if while Code https://dmaasland.github.io/posts/citrix.html responsestr = json.dumpsr.headers.dict'store' if r.statuscode == 406 and "Content-Disposition" in responsestr and r.headers"Accept-Ranges" == "bytes" and...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

kroxylicious-pqc-filter

Kroxylicious PQC Record Encryption Filter A Kroxylicious filter plugin that provides transparent Post-Quantum Cryptography PQC record-level encryption for Apache Kafka using ML-KEM FIPS 203 key encapsulation with AES-256-GCM symmetric encryption. Kafka producers and consumers require zero code...

Whoisleak

Whoisleak This tool queries the emails that registered the domain and verifies if they were leaked in some data leak. To install $ apt-get install nodejs-legacy $ pip install -r requirements.txt Usage Example python whoisleak.py -u securityattack.com.br Contact / Blog Eddy Oliveira SecurityAttack...

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

CVE-2026-48907

CVE-2026-48907 Description This file CVE-2025-9209.py is a mass exploitation tool targeting vulnerability CVE-2025-9209. Core functionalities: Scans a list of sites by calling /wp-json/wp/v2/users Analyzes the response to look for sensitive user data such as public and private keys, tokens, and...

ATTACKdatamap

ATTACKdatamap A datasource assessment on an event level to show potential coverage of the "MITRE ATT&CK" framework. This tool is developed by me and has no affiliation with "MITRE" nor with its great "ATT&CK" team, it is developed with the intention to ease the mapping of data sources to assess...

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 Time-based SQL Injection Detection for SMM Panel Overview This template detects a time-based SQL Injection vulnerability in the servicedetail parameter of the SMM Panel via HTTP POST requests to /ajaxdata. Exploitation can allow remote attackers to access sensitive da...

CVE-2026-114508

Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-tabl...

CVE-2026-98659

A flaw was found in the Linux kernel's ROHM BM1390 Industrial I/O IIO sensor driver. The driver fails to propagate error status codes when a read operation fails, unconditionally returning success. A local user querying the sensor can receive invalid or uninitialized measurement data without an...