MAD-CAT

MAD-CAT Strumento di automazione della corruzione dati Meow Attack Panoramica MAD-CAT Meow Attack Data Corruption Automation Tool è uno strumento di sicurezza completo progettato per simulare attacchi di corruzione dei dati su più sistemi di database. Lo strumento supporta sia attacchi a bersagli...

CVE-2021-43798

CVE-2021-43798 Script di verifica batch scritto in Golang, con 48 verifiche integrate Ci sono già troppi script scritti in Python, ho provato a imparare Golang Utilizzo Salva gli URL in url.txt, poi esegui go run CVE-2021-43798.go nella directory corrente. Gli indirizzi vulnerabili verranno salva...

dumper

Über Dumper Dies ist ein CLI-Dienstprogramm zum Erstellen von Backup-Datenbanken verschiedener Typen mit flexiblen Verbindungs- und Speichereinstellungen. Möglichkeiten: Mehrere Datenbanksysteme können verwaltet werden. Unterstützt PostgreSQL , MySQL , MongoDB usw. Arbeiten mit SSH-Keys mit...

boha

boha Libreria di dati per bounty, puzzle e sfide crittografiche. Installazione CLI Arch Linux AUR: root@kitploit: paru -S boha Da crates.io: root@kitploit: cargo install boha --features cli,balance Libreria root@kitploit: dependencies boha = "0.19" Con recupero del saldo: root@kitploit:...

4jfinder.github.io

Database Log4j ricercabile Pagina ricercabile per la CISA Log4j CVE-2021-44228 Affected Vendor & Software List, gestita dalla US Cybersecurity and Infrastructure Security Agency CISA. Come usarla Scarica i file index.html e cisalist.css ed eseguili dal tuo computer locale. Versione ospitata su...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

kcmdump

KCM dumper Script rapido per esportare il database KCM utilizzato da SSSD e recuperare i ticket Kerberos nel formato CCACHE. Inizialmente basato su SSSDKCMExtractor e KCMTicketFormatter. Descrizione Dalla versione 2.0.0 2018-08-13, lo storage di backend del responder KCM di SSSD non cifra più il...

ODIS-project-explorer

Esploratore di progetti ODIS Thread del forum Nefarious Motorsports: http://nefariousmotorsports.com/forum/index.php?topic=23836.0 Questo progetto Python serve a estrarre e utilizzare i dati memorizzati nei progetti MCD Runtime noti colloquialmente come "file .db e .key ". Normalmente, questi fil...

trivy-java-db

trivy-java-db نظرة عامة trivy-java-db يُنشئ قاعدة بيانات SQLite من بيانات مستودع maven-index، ويخزن ArtifactID وGroupID وVersion وsha1 لملفات jar. تُستخدم قاعدة البيانات في Trivy لاكتشاف معلومات حول jars التي لا تحتوي على GAV بداخلها. فترة التحديث كل يوم في الساعة 00:00 تنزيل قاعدة بيانات فهارس...

EUVD-2026-66763

Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases...

cirro

Cirro è una piattaforma estensibile di ricerca sulla sicurezza che consente a ricercatori e penetration tester di raccogliere, analizzare e visualizzare ambienti cloud e relazioni identitarie attraverso database a grafo. Costruita con un'architettura modulare, Cirro può essere estesa per supporta...

keeper

keeper Keeper ist ein kryptografischer Geheimnisspeicher für Go. Er verschlüsselt beliebige Byte- Nutzlasten im Ruhezustand mittels Argon2id-Schlüsselableitung und XChaCha20-Poly1305 Standard authentifizierter Verschlüsselung und speichert sie in einer eingebetteten bbolt-Datenbank. Er wird in dr...

PT-2026-82738

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...

CVE-2026-75417

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...

PT-2026-82730

Name of the Vulnerable Software and Affected Versions ServiceNow AI platform affected versions not specified Description An unauthenticated user can execute arbitrary SQL statements against the underlying database of the ServiceNow AI platform. This occurs via a SQL injection in the dynamic schem...

PT-2026-82739

Name of the Vulnerable Software and Affected Versions MongoDB client library for PHP affected versions not specified Description The MongoDB client library for PHP fails to properly sanitize special elements within application-supplied namespace identifiers used to construct target namespaces for...

CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strin...

CVE-2026-75417

A SQL injection vulnerability in YzmCMS 7.5 exists in the get_arrchildid() function within application/admin/controller/category.class.php. The user-controlled parentid parameter is concatenated directly into a FIND_IN_SET() SQL clause without proper sanitization, enabling an authenticated admini...

PT-2026-82737

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...

subdosec

Subdosec Scanner e strumento di ricognizione per takeover di sottodomini. Installazione • Utilizzo • Basato sul web • Contributo • Scansione online • Riconoscimenti Subdosec è uno scanner per takeover di sottodomini veloce e accurato, senza falsi positivi, con un database pubblico di sottodomini...