AWS-Key-Hunter

AWS-Key-Hunter AWS Key Hunter एक शक्तिशाली और स्वचालित उपकरण है जो GitHub रिपॉजिटरी में उजागर AWS कुंजियों की खोज करता है। यह लगातार कमिट्स की निगरानी करता है, base64 और plaintext दोनों प्रारूपों में AWS रहस्यों का पता लगाता है, और Discord पर संभावित सुरक्षा जोखिमों के बारे में उपयोगकर्ताओं को सच...

Flask-Unsign

Flask Unsign कमांड लाइन टूल जो Flask एप्लिकेशन की सत्र कुकीज़ को गुप्त कुंजियों का अनुमान लगाकर प्राप्त, डीकोड, ब्रूट-फोर्स और क्राफ्ट करता है। स्टैंडअलोन वर्डलिस्ट घटक के लिए, कृपया flask-unsign-wordlist रिपॉजिटरी देखें। आवश्यकताएँ Python 3.6+ स्थापना एप्लिकेशन को इंस्टॉल करने के लिए, बस pip का...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

Malicious code in @js-lib-team/env-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae761b7dd660e94dd99388dedf8c2227fa6a683e314468e7a482cd649c2e1a47 Package @js-lib-team/env-parser is advertised as an environment-variable parser but on require/import executes a top-level IIFE in index.js that read...

keyfinder

Überblick Installation Keyfinder Verwendung Schlüssel-Parsing Einfaches Beispiel Ausführliche Ausgabe APK-Parsing Einfaches APK-Beispiel crt.sh Prüfung Schlüsseldatei Verwendung Überblick CERT Keyfinder ist ein Dienstprogramm zum Auffinden und Analysieren von Schlüsseldateien auf einem Dateisyste...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

widevine-l3-decryptor

Deprecation-Warnung Dieses Repository enthielt ursprünglich Code, um das Widevine L3 DRM in Chrome unter Windows zu umgehen. Es funktioniert seit dem 31. Mai 2021 nicht mehr, aber Sie können den Reverse-Engineering-Artikel lesen. Update Google hat eine DMCA-Unterlassungsaufforderung gegen die...

Git-Secret

Git-Secret रिपॉजिटरी में API कुंजी / कुछ कीवर्ड खोजने के लिए Go स्क्रिप्ट्स अपडेट V1.0.2 🚀 कुछ चेकर्स हटाना गिटहब डॉर्क्स वाली उदाहरण फ़ाइल जोड़ना go install कमांड के लिए समर्थन जोड़ना issue 5 स्क्रीनशॉट 📷 कैसे इंस्टॉल करें नवीनतम संस्करण स्थापित करने के लिए: root@kitploit: go install...

GlobalUnProtect

GlobalUnProtect Ferramenta de PoC para descriptografar e coletar configuração, cookies e arquivos HIP do GlobalProtect de instalações de clientes Windows. Postagem do blog: https://rotarydrone.medium.com/4a1d8fc7773e Uso Execute como autônomo ou em memória via execute-assembly ou equivalente...

EUVD-2026-63628

Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network...

EUVD-2026-63681

The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP requests to it, guarding the destination with assertPublicUrl from src/shared/utils/ssrfGuard.js. That guard compares hostname strings only: it resolves no DNS, does not revalidate...

PT-2026-79489

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 3.2.3 Description Combodo iTop is a web-based IT service management tool. A reflected cross-site scripting XSS flaw exists in the foreign key search criteria API, where user-supplied input is not properly sanitiz...

Kibana 9.1.x < 9.4.5 / 9.5.x < 9.5.1 Privilege Escalation (ESA-2026-128)

The version of Kibana installed on the remote host is 9.1.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-128 advisory. - Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege...

Kibana 8.19.x < 8.19.20 / 9.x < 9.4.5 / 9.5.x < 9.5.1 Multiple Vulnerabilities (ESA-2026-126 / ESA-2026-127 / ESA-2026-129)

The version of Kibana installed on the remote host is 8.19.x prior to 8.19.20, 9.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-126, ESA-2026-127 and ESA-2026-129 advisories. - Incorrect Authorization CWE-863 in Kiba...

UBUNTU-CVE-2026-68553

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which passes issecurestring validation and is embedded into Redis keys at nine call sites in...

Detect-CVE-2017-15361-TPM

Detectar Módulos de Plataforma Confiável Vulneráveis ao CVE-2017-15361 Este repositório fornece conteúdo para auxiliar administradores do DoD na detecção de sistemas que possuem um Trusted Platform Module TPM ativado e vulnerável ao CVE-2017-15361, sendo um complemento ao Information Assurance...

CVE-2018-17873

CVE-2018-17873 WiFiRanger इंडोर राउटर Core, GoAC और उनके आउटडोर पेयर्ड राउटर Sky Pro, EliteAC, EliteAC FM जो फर्मवेयर संस्करण 7.0.8rc3 और पहले के संस्करण चला रहे हैं, अनाम FTP रीड/राइट एक्सेस की अनुमति देते हैं और SSH प्राइवेट की को स्पष्ट रूप से छोड़ देते हैं - जिससे की को देखना/कॉपी करना और रूट...

CVE-2026-69558

Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network...

CVE-2026-69558

Microsoft Partner Center has an authorization bypass caused by a user-controlled key, enabling an unauthenticated remote attacker to disclose confidential information (CVSS 8.6, HIGH). The flaw requires no privileges or user interaction. No patch version or in-the-wild exploitation details are pr...

CVE-2026-50192 Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect

Kerberos Agent is an open source video surveillance management agent. Prior to version 3.6.26, the Kerberos Hub upload path sends the agent's Hub credentials in the custom X-Kerberos-Hub-PrivateKey and X-Kerberos-Hub-PublicKey request headers to the operator-configured Hub URL config.HubURI. The...