48 matches found
Recaf
Recaf A versatile and easy to use Java and Android bytecode editor. Recaf makes working with compiled Java applications easier. Explore unfamiliar code, analyze obfuscated applications, modify classes without their original source, and export your changes, all through a familiar IDE-like interfac...
userefuzz
User-Agent , X-Forwarded-For and Referer SQLI Fuzzer made with python Works onlinux and unix based systems Legal Disclaimer Usage of userefuzz for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws...
IntelOwl
!intelowlp...
cotopaxi
.d8888b. 888 d8b d88P Y88b 888 Y8P 888 888 888 888 .d88b. 888888 .d88b. 88888b. 8888b. 888 888 888 888 d88""88b 888 d88""88b 888 "88b "88b 'Y8bd8P' 888 888 888 888 888 888 888 888 888 888 .d888888 X88K 888 Y88b d88P Y88..88P Y88b. Y88..88P 888 d88P 888 888 .d8""8b. 888 "Y8888P" "Y88P" "Y888 "Y88P...
gdb-frontend
GDBFrontend es un depurador gráfico fácil, flexible y extensible. Instalación Requisitos GDB = 8.2 con python3 python3 = 3.6 tmux Paquete PIP Python Wheel Recomendado Puedes instalar GDBFrontend con pip. sudo python3 -m pip install gdbfrontend si ya está instalado y lo estás actualizando sudo...
purify
Purify Herramienta integral para gestionar informes de vulnerabilidades 🎮 Demo 📃 Documentación 📹 Vídeo rápido Descripción El objetivo de Purify es ser una herramienta fácil de usar y eficiente para simplificar el flujo de trabajo de gestión de vulnerabilidades provenientes de diversas herramienta...
malwoverview v8.1.0
Malwoverview !Alt...
PT-2026-42369
Nuclei: Local File Read via require Module Loader Bypass in github.com/projectdiscovery/nuclei...
MAL-2026-2946 Malicious code in moonbit-metrics-validator (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e6bb44c25db578131ec69b1c961c22f67cabb0b81aae5fe9d4620194bf8d83cc Campaign includes a chain of dependencies that finally exfiltrate sensitive environment variables to a hardcoded GitHub repository as exfiltration target, and ...
CVE-2025-63878
The Github Restaurant Website Restoran v1.0 is vulnerable to a SQL injection flaw located in the Contact Form page. This vulnerability, identified as CWE-89 , stems from the improper neutralization of special elements used in SQL commands. While the specific technical root cause and impact detail...
EUVD-2025-8630
archives is a Go library for extracting archives tar, zip, etc.. Version 1.0.0 does not prevent a malicious user to feed a specially crafted archive to the library causing RCE, modification of files or other malignancies in the context of whatever the user is running this library as, through the...
CVE-2020-13326
A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be bypassed...
Creating a Windows Application Using Visual Studio Code, Cline, OpenRouter, and Claude
I just created a Windows 10/11 application that takes square screen captures. I did zero coding myself but used Visual Studio Code, Cline, OpenRouter, and Claude. I got the idea by watching a video on so-called Vibe programming by a YouTuber named Memory. I have zero Windows programming experienc...
Double-signing Attack
github.com/strangelove-ventures/horcrux is vulnerable to a double-signing attack. The vulnerability is due to a race condition in signature state handling when two independent events occurring within the same microsecond, allowing unintended duplicate signatures and leads to unintended...
GHSA-78VG-7V27-HJ67 auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped
Summary Unescaped entity property enables Javascript injection. Details I think this is possible because %sourcelabel% in twig macro is not escaped. Therefore script tags can be inserted and are executed. PoC - clone example project https://github.com/DamienHarper/auditor-bundle-demo - create...
GO-2022-0372 Subdomain Takeover in Interactsh server in github.com/projectdiscovery/interactsh
Subdomain Takeover in Interactsh server in github.com/projectdiscovery/interactsh...
Cross site scripting
Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
PYSEC-2023-30
Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...
CVE-2021-40149
creationtimestamp| type| source ---|---|--- 2022-07-26 04:30:44+00:00| seen| https://t.me/cibsecurity/46408 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-40149.yaml 2026-09-01 20:01:37+00:00| seen|...
