rawsec-cybersecurity-inventory

Rawsec's Cybersecurity Inventory Name| Link ---|--- Website| link Documentation| link Git repository| link Git repository mirror| link Merge Requests| link Issues| link Wiki| link Chat| link For contribution, development, usage or questions check the documentation. Sponsors Please contact me or...

aws-inventory

Introduction This is a tool that tries to discover all AWS resources created in an account. AWS has many products a.k.a. services with new ones constantly being added and existing ones expanded with new features. The ecosystem allows users to piece together many different services to form a...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

ADB-Toolkit

!made-with-bashhttps://img.shields.io/badge/-Made%20with%20Bash-1f425f.svg?logo=image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAYAAADgdz34AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyZpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlk...

CVE-2023-46449

CVE-2023-46449 Incorrect Access Control VIDEO POC LINK https://www.youtube.com/watch?v=H5QnsOKjs3s Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via...

CVE-2020-14947

CVE-2020-14947 The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947...

ClientInspectorV2

Introduction to ClientInspector v2 Are you in control? - or are some of your core infrastructure processes like patching, antivirus, bitlocker enablement drifting? Or would you like to do advanced inventory , where you can lookup your warranty state against Lenovo or Dell warranty, then keep...

PowerHuntShares

PowerHuntShares v2 PowerHuntShares is PowerShell tool designed to help cybersecurity teams and penetration testers better identify, understand, attack, and remediate SMB shares in the Active Directory environments they protect. Every hacker has a story about abusing SMB shares, but it’s an attack...

CVE-2024-24135

CVE-2024-24135: Product Inventory with Export to Excel - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24135.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24135/blob/main/CVE-2024-24135.md...

exploit-cve-2023-36808

CVE-2023-36808 - GLPI Unauthenticated SQL Injection Vulnerability GLPI versions field is injected directly into a SQL query without sanitisation: SELECT id FROM glpiagents WHERE deviceid = '' No authentication is required. The vulnerability allows full database read access via blind SQL injection...

-CVE-2023-46450

-CVE-2023-46450 Description Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function. Additional Information A video POC stored XSS vulnerability exists in the add supplier functionality in free and open source...

CVE-2026-126433

OpenEMR before 8.5.0 contains an improper authorization vulnerability in interface/drugs/dispensedrug.php, which checks only for admin/drugs view permission instead of write permission before dispensing medication. Authenticated users with read-only drug administration access can send GET request...

CVE-2026-126433

OpenEMR versions before 8.5.0 are vulnerable to an improper authorization flaw in the interface/drugs/dispense_drug.php component. The root cause is that the system validates only for admin/drugs view permissions instead of the required write permissions when dispensing medication. Consequently, ...

EUVD-2026-125010

OpenEMR before 8.5.0 contains an improper authorization vulnerability in interface/drugs/dispensedrug.php, which checks only for admin/drugs view permission instead of write permission before dispensing medication. Authenticated users with read-only drug administration access can send GET request...

fleet-cve-scanner

fleet-cve-scanner An open-source, single-script CVE scanner for RMM-managed fleets. Pure PowerShell 7, no agents, no appliances, no license fees. It answers one question for every piece of software on every endpoint you manage: is the installed version known to be vulnerable, and how urgent is it...

CVEs

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md...

wordpress-upgrade-check

wordpress-upgrade-check Read-only check of the WordPress core version of every site on a server , with the fix table for CVE-2026-87902 critical, unauthenticated; fixed in WordPress 7.1.2 on 2026-09-22 and backported to every branch down to 4.7. For web agencies and admins who look after many...

Vader-Pro-VDR

Vader-Pro-VDR Vader-Pro-VDR Vulnerability Detection & Remediation is an open-source platform designed to collect endpoint inventory data, identify potentially vulnerable software, and provide actionable remediation recommendations. The project consists of a lightweight Go-based endpoint agent and...

cfengine-CVE-2016-2118

+Title: CVE-2016-2118 Inventory and Remediation +SETUPFILE: /src/org-html-themes/setup/theme-readtheorg.setup file:./media/badlock.png This policy detects hosts vulnerable to https://vulners.com/cve/CVE-2016-2118CVE-2016-2118 commonly known as http://badlock.orgBadlock by checking if a known...

geiger

geiger A Geiger counter for AI agents. One read-only command that inventories every AI agent, harness, MCP server, plugin, and AI extension on a machine — and tells you, in plain language, what each one can touch. npx geiger-scan No install. No account. No telemetry. Reads configs and directories...