bbqsql

BBQSQL Uma Ferramenta de Exploração de Injeção SQL Cega Índice O que é BBQSQL? Visão Geral do Readme Uso em Alto Nível Instalação Opções do BBQSQL Visão Geral da Sintaxe de Consulta Parâmetros HTTP Exportar Configuração Importar Configuração Hooks Personalizados Encontrou um Bug? Posso Ajudar? E ...

PT-2026-83427

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...

chlonium

Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

dbeaver

DBeaver Strumento database multipiattaforma gratuito per sviluppatori, programmatori SQL, amministratori di database e analisti. Ha molte funzionalità tra cui editor di schema, editor SQL, editor di dati, integrazione AI, diagrammi ER, esportazione/importazione/migrazione dei dati, piani di...

CVE-2026-3627

IBM Concert versions 1.0.0 through 2.3.1 are vulnerable to SQL injection . A remote attacker with no prior authentication can send specially crafted SQL statements to view, add, modify, or delete data in the back-end database. The vulnerability is rated CVSS 9.1 (CRITICAL) with a network attack v...

CVE-2026-55678

Arc is an open, SQL-native time-series database for telemetry. In Enterprise cluster deployments from v26.02.1 to v26.06.2 , the coordinator accepts cluster join requests without authentication when cluster.enabled=true but cluster.shared_secret is empty. The HMAC validation in coordinator.go is ...

GHSA-X626-FCWX-F5PC Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances

Summary Portainer supports restoring an instance from a backup archive via the /api/restore endpoint. This endpoint is intentionally unauthenticated to allow restoring before the first admin account is created, and remains accessible for the five-minute initialization window that opens each time...

CVE-mitre

CVE-Mitre Common Vulnerability Exposure Scarica un singolo CVE La variabile è solo un esempio ; puoi creare il tuo script SVN per scaricare una singola cartella = CVE = Saluti @nu11secur1ty $CVE = CVE-2020-13935 root@kitploit: svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE...

Exploits + Shellcode + GHDB

Repository Git di Exploit Database Questo è un repository ufficiale di The Exploit Database, un progetto sponsorizzato da Offensive Security. I nostri repository sono: Exploit e Shellcode: gitlab.com/exploit-database/exploitdb Exploit binari: gitlab.com/exploit-database/exploitdb-bin-sploits Pape...

pip-audit

pip-audit pip-audit ist ein Tool zum Durchsuchen von Python-Umgebungen nach Paketen mit bekannten Sicherheitslücken. Es nutzt die Python Packaging Advisory Database https://github.com/pypa/advisory-database über die PyPI JSON API als Quelle für Schwachstellenberichte. Dieses Projekt wird zum Teil...

nmap-vulners

nmap-vulners Turn an nmap service scan into a ranked list of CVEs, exploits and what is being attacked in the wild. One NSE script that takes the software nmap already identified, asks the Vulners database what is known about it, and prints the answer inside the scan report - worst first, by what...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool è uno strumento di penetration testing open source che testa la sicurezza dei database Oracle in remoto. Esempi di utilizzo di ODAT: Hai un database Oracle in ascolto in remoto e vuoi trovare...

getsploit

Getsploit Cerca e scarica exploit pubblici dal databaseVulners — online, o completamente offline da un indice locale...

CVE-2026-76794 MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata

MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report...

CVE-2026-76794

MongoSQL Transition Readiness Tool (part of the MongoDB BI Connector) contains an improper HTML encoding flaw when processing database metadata. A MongoDB user with write access can inject crafted metadata that, when another user generates and opens the Transition Readiness Report, may cause scri...

nuclei-wordfence-cve

Nuclei + Wordfence = ♥ 77,636 Nuclei Templates for WordPress Security Scanning 🥳 Level up your WordPress security game! This project's got a treasure trove of fresh Nuclei templates for WordPress. Scan for weaknesses in Core, plugins, and themes – all based on the latest intel from Wordfence.com...