CVE-2026-4951

The CustomerAdministration portal KundenManager of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies user groups. The search term can be passed in the "searchValue" URL parameter, so the search is performed when a logged-in user opens such a URL...

EUVD-2026-108613

The CustomerAdministration portal KundenManager of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies user groups. The search term can be passed in the "searchValue" URL parameter, so the search is performed when a logged-in user opens such a URL...

CVE-2026-4951

The CustomerAdministration portal KundenManager of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies user groups. The search term can be passed in the "searchValue" URL parameter, so the search is performed when a logged-in user opens such a URL...

CVE-2026-4951 Reflected Cross-Site Scripting in CustomerAdministration Portal (KundenManager)in VertiGIS WebOrderSystem

The CustomerAdministration portal KundenManager of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies user groups. The search term can be passed in the "searchValue" URL parameter, so the search is performed when a logged-in user opens such a URL...

Exploit for CVE-2026-109518

PHP2Shell Research — Defensive Analysis & Remediation A sec...

UnifiedThreatHunting

A Unified Threat Hunting Process As Lead Threat Hunter, I was tasked with building a Threat Hunt Program from scratch. This involved plenty of thought about what threat hunting actually is and how to translate it into meaningful results. Many hours went into reading various methodologies around...

dromara__hutool_CVE-2018-17297_4-1-1111

A set of tools that keep Java sweet. -- Homepage: http://hutool.cn/ -- -- QQ Group ②: 871141901 -- Introduction Hutool is a Java toolkit, and just a toolkit. It helps us simplify every line of code, reduce every method, and make the Java language "sweet". Hutool was originally a reorganization...

Hale

About Hale is a botnet command & control monitor/spy with a modular design to easily develop new modules that monitor new protocols used by C&C servers. Hale comes with IRC and HTTP monitors developed with Twisted to handle scalability of a large amount of connections. Theses modules have...

RiskySPN

RiskySPNs RiskySPNs is a collection of PowerShell scripts focused on detecting and abusing accounts associated with SPNs Service Principal Name. This module can assist blue teams to identify potentially risky SPNs as well as red teams to escalate privileges by leveraging Kerberos and Active...

CdpSvcLPE

CdpSvcLPE Windows Local Privilege Escalation via CdpSvc service Writeable SYSTEM path Dll Hijacking Short Description: Connected Devices Platform Service or CDPSvc is a service which runs as NT AUTHORITY\LOCAL SERVICE and tries to load the missing cdpsgshims.dll DLL on startup with a call to...

flowsint

Flowsint Flowsint is an open-source OSINT graph exploration tool designed for ethical investigation, transparency, and verification. Ethics: Please read ETHICS.md for responsible use guidelines. https://github.com/user-attachments/assets/eaabfa81-d7b3-414d-8cf7-f69b4e37bab6...

theZoo

theZoo - A Live Malware Repository theZoo is a project created to make the possibility of malware analysis open and available to the public. Since we have found out that almost all versions of malware are very hard to come by in a way which will allow analysis, we have decided to gather all of th...

bifrost

Bifrost High-performance HTTP/HTTPS/SOCKS5 proxy server Language: English | 中文 · Documentation site Bifrost is a high-performance, AI-friendly proxy server written in Rust and inspired by Whistle. It provides request interception, rule-based modification, TLS MITM, script extensions, traffic...

shodan-eye

Shodan Eye This tool collects all information about all devices that are directly connected to the internet with the specified keywords that you enter. This way, you get a complete overview. Here you can read the latest article about Shodan Eye:...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

CVE-2022-42889-text4shell

CVE-2022-42889-text4shell 🔥🔥🔥 Apache commons text - CVE-2022-42889 Text4Shell proof of concept exploit. Details📃 CVE-2022-42889 affects Apache Commons Text versions 1.5 through 1.9. It has been patched as of Commons Text version 1.10 The vulnerability has been compared to Log4Shell since it is an...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

CVE-2021-44228-Log4Shell-Hashes

CVE-2021-44228-Log4Shell-Hashes Hashes for vulnerable LOG4J versions Created to help orgs search for this vulnerable versions https://www.lunasec.io/docs/blog/log4j-zero-day/ Source of the hashes: https://archive.apache.org/dist/logging/log4j/ Possibly 1.X affected...

depsguard

depsguard | | | | / |/ \ ' / |/ | | | |/ | '/ | | | | / | \ \ | | || | | | | | | | ,|| ./|/, |,|,|| ,| || |/ Guard your dependencies against supply chain attacks. Single static binary, zero Rust crate dependencies. By arnica Table of contents Overview Install Usage What gets checked Config...