EUVD-2026-70873

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-85402

A SQL injection vulnerability exists in the code-projects Doctor Appointment System 1.0 , specifically in the file /patient/booking.php . The root cause is the unsanitized manipulation of the doc_id argument, allowing a remote attacker to inject SQL commands without requiring authentication or us...

Freeze

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Freeze or to submit an issue, reference https://github.com/Tylous/Freeze. Freeze More Information If you want to learn more about the techniques utilized in this framework, please take a look at SourceZero Blog Description Freeze is ...

Malicious code in wallet-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5197e979c868a6e4ea36c49ad9cace9d5074f1deb961b35f824e3d05934113 On npm install, the package's postinstall hook src/scan.cjs walks the installer's project tree starting three directories above nodemodules and...

MAL-2026-15871 Malicious code in wallet-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5197e979c868a6e4ea36c49ad9cace9d5074f1deb961b35f824e3d05934113 On npm install, the package's postinstall hook src/scan.cjs walks the installer's project tree starting three directories above nodemodules and...

homoglyphs

EL PROYECTO ESTÁ ARCHIVADO Forks: https://github.com/orsinium/forks Homoglyphs Homoglyphs -- biblioteca de Python para obtener homoglifos y convertir a ASCII. Características Es una versión más inteligente de confusablehomoglyphs: Detección automática o elección manual de categoría alias de ISO...

Malicious code in vitest-cli-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffecbd11a726d511cf3bc41e65ce2a83329b247239d230aeeff9ad70b0e5953 [email protected] is a typosquat package: its name and homepage suggest a vitest tool, but the tarball contains a copy of nodemailer plus an...

MAL-2026-15870 Malicious code in vitest-cli-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffecbd11a726d511cf3bc41e65ce2a83329b247239d230aeeff9ad70b0e5953 [email protected] is a typosquat package: its name and homepage suggest a vitest tool, but the tarball contains a copy of nodemailer plus an...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

Leaktopus

Aviso de Desuso Estimados usuarios de Leaktopus, Queremos informarles que el proyecto Leaktopus será oficialmente descontinuado. Después de una cuidadosa evaluación, hemos decidido detener el desarrollo activo y el mantenimiento de esta biblioteca. ¿Qué Significa Esto para Ustedes? Sin Nuevas...

dumpscan

Public development on this tool has been paused but is still being worked on privately. Expect a massive update Q3/Q4 2024. Dumpscan is a command-line tool designed to extract and dump secrets from kernel and Windows Minidump formats. Kernel-dump parsing is provided by volatility3. Features x509...

EAST

可扩展的 Azure 安全工具 可扩展的 Azure 安全工具（以下简称 E.A.S.T）是一款用于评估 Azure 及一定程度上 Azure AD 安全控制项的工具。EAST 的主要用途是在 Azure 评估中收集安全数据以进行评价。这些信息（JSON 内容）随后可用于各种报告工具，我们利用这些工具进一步关联和调查数据。 此工具基于 MIT 许可证 授权。 合作者 正是在下 Nixu 云安全团队 目录 可扩展的 Azure 安全工具 合作者 发布说明 重要事项 工具操作 依赖项 控制项 基础 高级 组合 报告 运行 EAST 扫描 详细前提条件（如果您选择不执行“一次性”版本） 登录 ...

haxx

haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up and running This method works on 14.0-14.6. 14.7 14.7b1-14.8.1 requires launch...

heyserial

HEY SERIAL! 作者： Alyssa Rahman @ramen0x3f 创建时间： 2021-10-27 最后更新： 2021-12-02 博客： https://www.mandiant.com/resources/hunting-deserialization-exploits 有关此工具及研究过程的更多详情，请查看我们的博客！ 描述 以编程方式创建用于检测反序列化漏洞利用的狩猎规则，支持多种 关键词（例如 cmd.exe） 小工具链（例如 CommonsCollection） 对象类型（例如 ViewState、Java、Python Pickle、PHP） 编码方式（例...

warhorse

Warhorse 目录 概述 特性 文档 开发 致谢 概述 Warhorse 包含一套功能完备的 Ansible Playbook，用于在云中部署基础设施以开展安全评估。该 Playbook 结合了 Terraform 和 Ansible，可部署和配置适用于多种使用场景的虚拟机。Playbook 高度可定制，并内置了操作安全性。使用本 Playbook 无需具备 Ansible 或 Terraform 的使用经验。 视频演示 当前特性 纯 Ansible Playbook，可动态构建 Terraform HCL。 从底层开始即考虑安全性。 支持多个云提供商。 模块化设计。（仅启用所需部分...

bramble v1.24.0-chromium

Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...

reverseip_py

reverseippy Domain parser for IPAddress.com Reverse IP Lookup. Writen in Python 3. What is Reverse IP? Reverse IP refers to the process of looking up all the domain names that are hosted on a particular IP address. This can be useful for a variety of reasons, such as identifying all the websites...

EDRSandblast-GodFault

EDRSandblast-GodFault 由 Gabriel Landau 在 Elastic Security 开发。修改自 EDRSandblast——详见下方原始 README。 将 GodFault 集成至 EDR Sandblast，无需使用任何有漏洞的驱动程序即可实现相同效果。 示例输出 C:\Users\user\Desktop\OffsetsEDRSandblast.exe --kernelmode cmd | | | \ /| | | | | | | | | | | | | | | | | | | | | | | | | | | | | / \ / | ' \ / |...

ZeroHVCI

ZeroHVCI - Derrotando a HVCI sin privilegios de administrador o un controlador de kernel ZeroHVCI logra lecturas/escrituras/llamadas a funciones arbitrarias del kernel en entornos protegidos por Hypervisor-Protected Code Integrity HVCI sin permisos de administrador ni controladores de kernel...

thc-tips-tricks-hacks-cheat-sheet

Los consejos, trucos y hacks favoritos de THC Hoja de referencia https://thc.org/tips Una colección de nuestros trucos favoritos. Muchos de esos trucos no son nuestros. Simplemente los recopilamos. Mostramos los trucos 'tal cual' sin ninguna explicación de por qué funcionan. Necesitas conocer Lin...