13467 matches found
CVE-2026-62906 Microsoft Discovery Studio Information Disclosure Vulnerability
...
CVE-2026-62906
Microsoft Discovery Studio is affected by an improper neutralization of special elements in data query logic , allowing an unauthorized attacker to disclose information over a network . The vulnerability is rated CVSS 7.4 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N, meaning it req...
aws-inventory
Introduction This is a tool that tries to discover all AWS resources created in an account. AWS has many products a.k.a. services with new ones constantly being added and existing ones expanded with new features. The ecosystem allows users to piece together many different services to form a...
easyda
EasyDA - Easy Windows Domain Access Script Easy Windows Domain Access Script Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/easyda Released under AGPL see LICENSE for more...
nsdp-discover
nsdp-discover An Nmap script to identify Netgear Switch Discovery Protocol NSDP on UDP ports 63322 and 63324. The script tries to send a discovery request and creates a UDP server to listen for responses. Information recovered from this script includes: Device Type, Name, MAC, Location, IP,...
ssh_user_enum
sshenumv0.3.py Usage: sshenumv0.3.py options Options: root@kitploit: -h, --help Show this help message and exit -u --userlist Specify a new line delimited username file -i --ip Specify the target -m --multiplier Specify the multiplier for the password used to cause the delay -t --threshold Adjust...
bunch-of-fuzzers-developed-using-libfuzzer-and-asan
bunch-of-fuzzers-developed-using-libfuzzer-and-asan...
GadgetProbe
Descripción Acabas de encontrar un bug de deserialización de Java, ejecutaste todos tus payloads de ysoserial y... no obtuviste nada. ¿Y ahora qué? ¿Cómo puedes depurar o construir una cadena de gadgets si estás completamente a ciegas? Te presentamos GadgetProbe, una herramienta que arroja luz...
Kcfinder-Mass-Scanner
Kcfinder-Mass-Scanner Python 2.7 How To Use? Install Python 2.7 Download Here python file.py...
w12scan-client
w12scan-client Network asset search and discovery engine, large-scale asset identification, graduation project, w12scan client program Design Philosophy The client's philosophy is to only process the data url, ip it receives, without automatically following 301 redirects based on URLs, nor scanni...
Microsoft Discovery Studio Information Disclosure Vulnerability
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network...
CVE-2026-76174
creationtimestamp| type| source ---|---|--- 2026-09-03 10:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j2xudr2x2zzga 2026-09-03 14:07:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mummphzzjj2o 2026-09-03 14:20:03+00:00| seen|...
wayBackLister
WaybackLister v1.1 — por FR13ND0x7F Descubre posibles listados de directorios a través de URLs archivadas de la Wayback Machine. 🕵️♂️ Qué Hace WaybackLister es una herramienta de reconocimiento que aprovecha la Wayback Machine para obtener URLs históricas de un dominio, analiza rutas únicas y...
vigolium v0.4.4
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...
CVE-2026-80727 x86/mce: Set up the polling timer before CMCI discovery
In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...
EUVD-2026-70331
In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...
nl-kat-coordination
================ What is OpenKAT? OpenKAT aims to monitor, record and analyze the status of information systems. The basic premise is that many of the major security incidents are caused by small errors and known vulnerabilities, and if you find them and resolve them in time your systems and...
bugbounty-arsenal-resources
BugBounty Arsenal Resources Curated workflows, tools and references for bug bounty hunters and web security researchers. What is BugBounty Arsenal? BugBounty Arsenal is a practical web testing platform focused on recon workflows, endpoint discovery and security testing utilities. The goal is to...
agent-scan v0.6.1
Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: CLI output is experimental and subject to change Agent Scan v0.5.x planned for deprecation The raw output of this CLI — including issue codes,...