dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...

CVE-2026-42708

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue affects WP Post Author: from n/a through 4.0.0...

CVE-2026-106059

GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...

CVE-2026-42710

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63...

CVE-2026-106057

patool before 4.0.6 contains an OS command injection vulnerability on Windows because shellquotent fails to escape cmd.exe metacharacters or embedded double quotes in archive filenames. Attackers can supply crafted filenames like report&calc.gz for single-file formats run with shell=True to execu...

CVE-2026-106058

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $command selected via .gitattributes so...

CVE-2026-106056

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which...

nsearch

================================================ | \ | |/ || | | | | | |\ --. | | | | | . | --. | | / || '| / || ' | | |\ |// /| | | | || | | | | | | | // / ,||| ||| || ================================================ Version 0.4b http://goo.gl/8mFHE5 @jjtibaquira Email:...

ipatool

ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages. Requirements A supported operating system macOS, Linux, Windows or iOS. An Apple Account already configured to use the App Store...

ipatool

ipatool — это инструмент командной строки, позволяющий искать приложения для iOS, iPadOS, tvOS, visionOS и macOS в App Store и скачивать пакеты приложений .ipa или macOS .pkg. Требования Поддерживаемая операционная система macOS, Linux, Windows или iOS. Учётная запись Apple, уже настроенная для...

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL 표현식 주입 명령 실행（CVE-2022-22947） Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 사용 방법: -t http://vuldomain.com //단일 IP -f urls.txt //파일에서 일괄 스캔, 멀티스레드 사용, 빠른 속도 -c command //사용자 지정 명령, 기본값은 whoami...

rbuster

Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...

fierce-domain-scanner

Fierce.pl Scanneur de Domaines AUTEUR ORIGINAL : RSnake https://twitter.com/rsnake Aperçu : Fierce est un scanner semi-léger qui aide à localiser les espaces IP non contigus et les noms d'hôte pour des domaines spécifiés. Il est vraiment conçu comme un précurseur à nmap, unicornscan, nessus, nikt...

CVE-2026-54806

PoC – Injection d'objets PHP dans WP Activity Log CVE-2026-54806 📜 Description CVE-2026-54806 est une vulnérabilité critique CVSS 9.8 d'injection d'objets PHP non authentifiée dans le plugin WordPress WP Activity Log wp-security-audit-log de Melapress. Un attaquant non authentifié peut injecter d...

fluffi

FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...

CVE-2019-15642

CVE-2019-15642 Webmin удаленное выполнение кода с аутентификацией Использование python: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 docker для Webmin cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin...

pysap

pysap - Python library for crafting SAP's network protocols packets Version 0.2.2.dev0 in dev Overview SAP Netweaver and SAP HANA are technology platforms for building and integrating SAP business applications. Communication between components uses different network protocols and some services an...

Packer-Fuzzer

Packer Fuzzer Un outil de scan rapide et efficace pour détecter les sites construits avec des outils de bundling front-end comme Webpack Produit par Poc-Sir, KpLi0rn, Liucy, RachesseHS, Lupin-III Cliquez ici pour la version anglaise 👮🏻‍♀️ Avertissement En raison de la diffusion ou de l'utilisation...

binwalk

Binwalk v3 Ceci est une version mise à jour de l'outil d'analyse de firmware Binwalk, réécrit en Rust pour plus de rapidité et de précision. Que fait-il ? Binwalk peut identifier, et éventuellement extraire, des fichiers et des données qui ont été intégrés à l'intérieur d'autres fichiers. Bien qu...

CVE-2025-55182-exp

CVE-2025-55182-exp 🔥 Обзор CVE-2025-55182 — это критическая уязвимость удаленного выполнения кода RCE в React Server Components RSC, затрагивающая приложения Next.js, использующие App Router с Server Actions. Уязвимость существует в процессе десериализации протокола Flight, что позволяет...