urlhunter

o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named URLTeam kudos...

ssl-certificate-expiry-date-checker

sslcertificateexpirydatechecker Find out which cerificate will expire and need to renew. Find various information from scan result expire date, issuer, signature, serial number... If you are ssl cerificate manager in your organization, collect the list from your coworker, teams, and check the...

July 14, 2026—KB5099445 (Monthly Rollup)

None None...

July 14, 2026—KB5099536 (OS Build 26100.33158)

None None...

July 14, 2026—KB5099539 (OS Builds 19045.7548 and 19044.7548)

None None...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

CVE-2022-34265

CVE-2022-34265 Usage start docker-compose build docker-compose up -d stop docker-compose down PoC verification of Django vulnerability CVE-2022-34265 A vulnerability CVE-2022-34265 in Django was disclosed on July 5, 2022 US time. This article describes our discussion of this vulnerability and the...

CVE-2025-2907

CVE-2025-2907 Exploit Details Published : 2025-04-04 Updated : 2025-03-28 Severity : Critical CVSS Score: 9.8 CWE : CWE-862: CWE-862 Missing Authorization Affected Versions : All versions from n/a through 12.3.1 Researcher :...

WP Hotel Booking <= 2.3.2 - Cross-Site Scripting

The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

pepeScraper

pepeScraper - 4chan scraper A complete scraper for 4chan Now that's fast. pepeScraper is a scraper that uses context for your searches and returns exactly what you want. I'm learning how to make an item look cooler than it actually is Enter keywords, anything you can think of just be careful what...

CVE-2021-30809-OOM

CVE-2021-30809 — Apple WebKit Use-After-Free Vulnerability Crash PoC https://github.com/user-attachments/assets/e81f8a01-d48d-44cc-a38f-ce59b01222d5 Overview This repository contains a minimal crash-inducing harness for CVE-2021-30809, a use-after-free UAF vulnerability in WebKit. The PoC exercis...

tapodate

tapodate Uses https://github.com/hacefresko/CVE-2021-4045 exploit to set the date and other commands to an offline Tapo C200...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

news-8.6.0-cve-2026-8726-backport

Security backport for georgringer/news 8.6.0 This repository contains a minimal backport for CVE-2026-8726 / TYPO3-EXT-SA-2026-010 , a high-severity SQL injection vulnerability in the TYPO3 extension georgringer/news. It is intended only for installations that must temporarily remain on news 8.6....

CVE-2022-34265

CVE-2022-34265 Vulnerability Summary This vulnerability is due to improper string processing when executing SQL for the arguments of the functions Trunc and Extract used for date data in Django. By specifying the request parameters as is in the kind argument of Trunc or the lookupname argument of...

active_c2_ioc_public

+OPTIONS: ^: +TITLE: Active C2 IOCs Note Be careful with the firstseen/lastseen dates in each entry. Don't judge based on just an IP address...

Azure-AD-Password-Checker

Azure AD Password Checker In an Azure AD environment, it's possible to determine whether a user has Multi-Factor Authentication MFA disabled without requiring any special privileges. This can be accomplished by analyzing the account's creation date and last password change date. If an account's...

CVE-2023-3519

CVE-2023-3519 NetScaler Citrix ADC CVE-2023-3519 Scanner A simple scanner to find netscalers and look at the las modified date on the HTTP header response this project is a scanner made by me in C using the source-code of mrr3b00t in powershell...

CVE-1999-0524

CVE-1999-0524 A Bash script to check if systems are vulnerable to ICMP Timestamp Request Remote Date Disclosure CVE-1999-0524. How to use 1. Make sure hping3 is installed and in your PATH. 2. Create a file that contains the targets, in IPv4 format and each target on a new line. 3. Make the script...

PT-2026-108170

Name of the Vulnerable Software and Affected Versions music-metadata versions prior to 11.16.0 Description The MP4 parser accepts an attacker-controlled 64-bit extended atom size and converts it to a JavaScript Number. This resulting payload length is used for atom-specific readToken calls before...