1000570 matches found
pylibemu
Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...
pylibemu
Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu هو غلا...
ASWCrypter
مرحبًا بكم في سكريبت ASWCrypter v1.0 100% FUD سكريبت Bash وPython لتوليد حمولات تتجاوز جميع مضادات الفيروسات حتى الآن FUD ; . يرجى عدم رفع الباب الخلفي إلى WWW.VIRUSTOTAL.COM 23/08/2018 مهم هذه النسخة للاختبار فقط، في المستقبل سأقوم بتحديث ASWCrypter لتوليد حمولات لأنظمة لينكس وماك وويندوز . ;...
Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure
Summary Vikunja's web.Auth interface pkg/web/web.go, single method GetID int64 is satisfied by BOTH user.User and models.LinkSharing. A link-share's GetID returns the raw positive share.ID pkg/models/linksharing.go:83-85, which lives in the same positive autoincrement ID space as users.id. The sa...
GHSA-32R8-5843-4QW2 Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure
Summary Vikunja's web.Auth interface pkg/web/web.go, single method GetID int64 is satisfied by BOTH user.User and models.LinkSharing. A link-share's GetID returns the raw positive share.ID pkg/models/linksharing.go:83-85, which lives in the same positive autoincrement ID space as users.id. The sa...
CVE-2026-108261
Tina, a headless content management system, is vulnerable to an origin validation error in versions prior to tinacms 3.14.0 and @tinacms/app 2.5.14 . The vulnerability exists because the /~/* admin preview route can convert an attacker-controlled hash-router splat into an off-origin iframe URL vi...
EUVD-2026-95990
Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the // admin preview route in packages/tinacms/src/admin/index.tsx can turn an attacker-controlled hash-router splat into an off-origin iframe URL through packages/@tinacms/app/src/preview.tsx, while...
CVE-2026-108261 TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the // admin preview route in packages/tinacms/src/admin/index.tsx can turn an attacker-controlled hash-router splat into an off-origin iframe URL through packages/@tinacms/app/src/preview.tsx, while...
CVE-2026-108261 TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the // admin preview route in packages/tinacms/src/admin/index.tsx can turn an attacker-controlled hash-router splat into an off-origin iframe URL through packages/@tinacms/app/src/preview.tsx, while...
killcast
التلاعب بأجهزة Chromecast في شبكتك متوفر لـ الإلهام - آلاف أجهزة Chromecast من Google تم اختراقها للترويج لـ PewDiePie هذه الأداة هي إثبات مفهوم ولأغراض بحثية فقط، killcast يوضح كيف يمكن التلاعب بأجهزة Chromecast والاستيلاء عليها بسهولة من قبل أي شخص. الميزات استخراج معلومات جهاز Chromecast استكش...
killcast
Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...
graphql-threat-matrix
GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...
graphql-threat-matrix
مصفوفة التهديدات لـ GraphQL لماذا graphql-threat-matrix؟ تم بناء graphql-threat-matrix لصيادين الثغرات، وباحثي الأمن، والمخترقين للمساعدة في كشف الثغرات عبر تطبيقات GraphQL المتعددة. قد تؤدي الاختلافات في كيفية تفسير تطبيقات GraphQL وامتثالها لمواصفات GraphQL إلى فجوات أمنية ونواقل هجوم فريدة. من...
yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels
The Prometheus metrics middleware in pkg/server/server.go used r.Method directly as a label value on request counter and duration histogram metrics. Since the mux catch-all route matches any HTTP method, an unauthenticated attacker can send requests with arbitrary method strings e.g. curl -X "M1"...
goscan
GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...
goscan
GoScan هو عميل ماسح شبكة تفاعلي، يتميز بالإكمال التلقائي، ويوفر تجريدًا وأتمتة على nmap. على الرغم من أنه بدأ كمشروع جانبي صغير طورته لتعلم @golang، إلا أنه يمكن استخدام GoScan الآن لاكتشاف المضيفين، ومسح المنافذ، وتعداد الخدمات ليس فقط في المواقف التي لا تكون فيها التخفي أولوية والوقت محدود فكر ...
GHSA-6R69-C6WG-7G8M yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels
The Prometheus metrics middleware in pkg/server/server.go used r.Method directly as a label value on request counter and duration histogram metrics. Since the mux catch-all route matches any HTTP method, an unauthenticated attacker can send requests with arbitrary method strings e.g. curl -X "M1"...
GHSA-3HJ7-6VMJ-H8V4 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents
Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed ac...
pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents
Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed ac...
GhidraMCP
ghidraMCP ghidraMCP هو خادم Model Context Protocol يسمح لنماذج اللغة الكبيرة LLMs بالهندسة العكسية للتطبيقات بشكل مستقل. وهو يوفّر العديد من الأدوات من وظائف Ghidra الأساسية لعملاء MCP. https://github.com/user-attachments/assets/36080514-f227-44bd-af84-78e29ee1d7f9 الميزات خادم MCP + إضافة Ghidra...