319347 matches found
CVE-2026-85533 MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter
An authorization flaw in MISP allowed an authenticated user to submit a sharinggroupid without verifying that the user was authorized to use the referenced Sharing Group. In several attribute and Galaxy Cluster creation and editing workflows, validation of the submitted Sharing Group was performe...
EUVD-2026-70976
An authorization flaw in MISP allowed an authenticated user to submit a sharinggroupid without verifying that the user was authorized to use the referenced Sharing Group. In several attribute and Galaxy Cluster creation and editing workflows, validation of the submitted Sharing Group was performe...
secator v0.43.3
The pentester's swiss knife. Features ā¢ Supported commands ā¢ Installation ā¢ Usage ā¢ Documentation ā¢ Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...
directus-security
directus-security Audit any Directus instance for the misconfigurations that actually leak data ā public-role read exposure, user enumeration, unauthenticated version/schema leaks, GraphQL introspection, and the search-param field-enumeration oracle ā and prove each one live with an anonymous...
CyberResponders
CyberResponders: A Terminal Game CyberResponders is a terminal-based cybersecurity training game that enables players to respond to different cyber incident scenarios. Here, they have five chances to enter the correct command before the system becomes completely compromised, resulting in a game...
CVE-2022-35499
In Trimble TM4WEB =22.2.0 the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL. Step 1 : The following example URL will trigger the vulnerability and execute the javascript alert function displaying the number...
session_reaper_lab
CVE-2025-54236 - SessionReaper Lab Docker environment for practical demonstration of CVE-2025-54236 SessionReaper: PHP Object Deserialization leading to RCE in Magento Open Source 2.4.7. Exclusive use in controlled environment. Do not run against systems without explicit authorization. About the...
blackbox-fuzzing
Blackbox-Fuzzing of IoT Devices Using the Router TL-WR902AC as Example This is the HTML version of my term paper which can be downloaded as PDF here. Introduction Fuzzing has become "one of the most effective ways" of finding bugs in software. With this or similar claims, many current...
ChromeKatz
ChromeKatz ChromeKatz is a solution for dumping sensitive information from memory of Chromium based browsers. As for now, ChromeKatz consists of three projects: 1. CookieKatz - The cookie dumper 2. CredentialKatz - Deprecated.. for now 3. ElevationKatz - Get the decryption key from the elevation...
Apache-OFBiz-Directory-Traversal-exploit
Apache-OFBiz-Directory-Traversal-exploit A vulnerability classified as critical, has been found in Apache OFBiz up to 18.12.12. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a path traversal vulnerability. The product uses external input to...
radar
Radar Radar is a small but efficient network scanner written in Rust heavily inspired by masscan. These are the main features: Userspace TCP, UDP, DHCP and ARP implementations, thanks to pnet Being asynchronous Randomized IP/ports scanning with no pre-allocation/shuffling Rate limiting Monitor mo...
CVE-2024-2473
CVE-2024-2473 ā WPS Hide Login Page Identifier A professional Python scanner to detect Login Page Disclosure in WordPress sites running WPS Hide Login ā¤ 1.9.15.2 Coded byVenexy Table of Contents Overview Vulnerability Details How It Works Requirements Installation Usage Output Example Disclaimer...
CVE-2026-82186
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not properly validate a pagination parameter before using it in a SQL query, allowing users with administrator privileges to perform SQL injection attacks...
CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter
CVE-2026-11101 ā HTTP Cache Poisoning via Unkeyed Query Parameter Overview A web cache uses only the URL path as the cache key, ignoring query parameters. An attacker can append a malicious payload to an unkeyed parameter e.g., utmcampaign and poison the cache. Subsequent visitors receive the...
ThreatHunting-Keywords
ThreatHunting-Keywords šÆ List of keywords for ThreatHunting sessions Table of Contents What is Threat Hunting Advantages of Threat Hunting Bridging Threat Hunting With Core Services Detection Maturity Level Key Focus Areas for Intelligence Gathering Targeted Threat Hunting process Files...
POC-bomber
š„ POC-bomber š¦ POC bomber is a vulnerability detection/exploitation tool designed to quickly gain permissions on target servers by leveraging a large number of high-impact vulnerability POCs/EXPs This project collects various high-impact vulnerabilities from the internet, such as RCE Ā· arbitrary...
WindowsProtocolTestSuites v4.26.9.0
Windows Protocol Test Suites Windows Protocol Test Suites provide interoperability testing against the implementation of Windows open specifications including File Services, Identity Management, Remote Desktop and etc. Originally developed for in-house testing of the Microsoft Open Specifications...
dnschef-ng
!NOTE This is an updated version of DNSChef originally written by @iphelix root@kitploit: | | v0.7 | | / | | | | | | | / | ' / |/ | ' \ / \ || ' \ / | | | | | | \ \ | | | | / | | | | | | | ,|| ||/|| |||| || ||, | / | |/ D O C U M E N T A T I O N DNSChef is a highly configurable DNS proxy for...
CVE-2026-15354 ACPT (Premium) <= 2.0.66 - Unauthenticated Privilege Escalation via 'acpt_form_post_id' Parameter
The ACPT Premium plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.66. This is due to missing authorization in the submit function, which allows unauthenticated form submissions to control the target user ID before calling wpupdateuser. This make...
CVE-2026-15354 ACPT (Premium) <= 2.0.66 - Unauthenticated Privilege Escalation via 'acpt_form_post_id' Parameter
The ACPT Premium plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.66. This is due to missing authorization in the submit function, which allows unauthenticated form submissions to control the target user ID before calling wpupdateuser. This make...