Cve-api

Parse & filter the latest CVEs from https://cve.mitre.org Docs Usage http://localhost:4000/cve?target=KEYWORD The year parameter is optional. http://localhost:4000/cve?target=KEYWORD&year=YEAR Examples http://localhost:4000/cve?target=ruby%20on%20rails...

cfgrip

cfgrip PE/ELF x86/x64 CFG extractor. Takes a binary in, disassembles it, resolves every jump and call GOT, jump tables, register tracing, and exports the full control flow graph as structured JSON. why You need to know exactly where every branch goes. Not for reading — for patching. Feed the JSON...

CVE-2025-2304-POC

CVE-2025-2304-POC PoC for CVE-2025-2304 — Camaleon CMS 2.9.0 privilege escalation via mass assignment on the password change endpoint. Vulnerability The /admin/users/:id/updatedajax endpoint does not filter the role parameter before passing it to the model update, allowing any authenticated user ...

Kunyu

Kunyu坤舆 - More efficient corporate asset collection English | 中文文档 0x00 Introduce Tool introduction Kunyu kunyu, whose name is taken from , is actually a professional subject related to geographic information, which counts the geographic information of the sea, land, and sky. The same applies to...

CVE-2025-29529

SQLi ITC Multiplan CVE-2025-29529 Discovery On February 21, 2025, an SQL injection vulnerability was identified in the “Multiplan” platform developed by ITC Systems during a client engagement. Affected Versions This vulnerability has been only been tested on v3.7.4.1002 Attack Vector The...

cve-2019-9053-py3

CVE-2019-9053 — CMS Made Simple SQLi Exploit Python 3 Disclaimer: This tool is intended for authorized penetration testing and educational purposes only. Running this against systems without explicit written permission is illegal. The author assumes no liability for misuse. Overview This is a...

CVE-2020-35476

CVE-2020-35476 A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. Not finished and doesn't work. Most of the code is there but payload has to be fixed...

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts Chainsaw provides a powerful ‘first-response’ capability to quickly identify threats within Windows forensic artefacts such as Event Logs and the MFT file. Chainsaw offers a generic and fast method of searching through event logs for...

security-report-for-ruoyi-dictionary-preview-stored-xss

RuoYi 4.8.3 Dictionary Preview Stored XSS English security ad...

Inventus

Inventus Inventus is a spider designed to find subdomains of a specific domain by crawling it and any subdomains it discovers. It's a Scrapy spider, meaning it's easily modified and extendable to your needs. Demo asciicast Requirements Linux -- I haven't tested this on Windows. Python 2.7 or Pyth...

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 whs41반고늘상@straightSang 1. Summary Reference: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 is a relational database management system that provides the ability to compile and execute Java code directly within the SQL engine. The H2 driver parses JDBC URLs to...

CVE-2023-33405

CVE-2023-33405 Open Redirection vulnerability identified on BlogEngine.NET CMS version 3.3.8.0 and earlier If a GET request to default.aspx page contains "years=" within the URL, the application calls a function named "Redirect". This function sets several parameters including year, month, date,...

ParanoiDF

ParanoiDF The swiss army knife of PDF Analysis Tools. Based on peepdf - http://peepdf.eternal-todo.com. This README builds on the peepdf README. This tool was developed as part of my M.Sc dissertation/project for the School of Computing University of Kent, Canterbury, UK. The man behind the idea...

selenium-wire

Selenium Wire is no longer being maintained. Thank you for your support and all your contributions. Selenium Wire Selenium Wire extends Selenium's Python bindings to give you access to the underlying requests made by the browser. You author your code in the same way as you do with Selenium, but y...

selenium-wire

لم يعد Selenium Wire قيد الصيانة. شكرًا لدعمكم ولكل مساهماتكم. Selenium Wire توسّع Selenium Wire أدوات ربط Selenium بلغة Python لتمنحك إمكانية الوصول إلى الطلبات الأساسية التي يرسلها المتصفح. تكتب كودك بنفس الطريقة التي تستخدمها مع Selenium، لكنك تحصل على واجهات برمجة تطبيقات إضافية لفحص الطلبات...

cloudscraper

cloudscraper - Enhanced Edition Enhanced byZied Boughdir Latest Release: v3.0.0 🚀 - Major Upgrade 🆕 Major New Features in v3.0.0 🛡️ Automatic 403 Error Recovery - Intelligent session refresh when 403 errors occur after prolonged use 📊 Session Health Monitoring - Proactive session management with...

CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - Improper Access Control Description In version 6.03 of BoltWire CMS , it is possible to exploit an “Improper Access Control” vulnerability, through the index.php?p=member.admin&action=data parameter, allowing an attacker to view any member's password, including t...

cfn_nag

Background The cfn-nag tool looks for patterns in CloudFormation templates that may indicate insecure infrastructure. Roughly speaking, it will look for: IAM rules that are too permissive wildcards Security group rules that are too permissive wildcards Access logs that aren't enabled Encryption...

ThreadlessInject

Threadless Process Injection From my Bsides Cymru 2023 talk: Needles Without the Thread. As red teamers, we always find ourselves in a cat and mouse game with the blue team. Many Anti-virus and EDR solutions over the past 10 years have become significantly more advanced at detecting fileless...

lsarelayx

lsarelayx Introduction lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running on. lsarelayx will relay any incoming authentication request which includes SMB. Since lsarelayx hooks into existing application authentication flows, the...