multi-juicer

Running CTFs and Security Trainings with OWASP Juice Shop is usually quite tricky, Juice Shop just isn't intended to be used by multiple users at a time. Instructing everybody how to start Juice Shop on their own machine works ok, but takes away too much valuable time. MultiJuicer gives you the...

mihari

mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...

CVE-2026-77105

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-77089

Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center...

CVE-2026-77092

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...

Royal-Event-Management-System-todate-SQL-Injection-Authenticated

Royal Event Management System - 'todate' SQL Injection Authenticated 1. Description: Royal Event Management System 1.0 allows SQL Injection via parameter 'todate' in /royalevent/btndatesreport.php?= Exploiting this issue could allow an attacker to compromise the application, access or modify data...

ligolo-mp

Ligolo-MP : pivoting like a VPN, now with friends! Ligolo-MP is an advanced version of Ligolo-ng, with client-server architecture, enabling pentesters to play with multiple concurrent tunnels collaboratively. It manages all your TUNs automatically, while also providing a clean GUI to track...

server

Hashtopolis Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. To report a bug, please create an issue and try to...

OpenShell

OpenShell OpenShell is a lightweight, open-source reverse shell management server written in Go. It allows users to establish reverse shell channels and interact with them through a simple web-based graphical user interface GUI. If you encounter bugs or have suggestions, feel free to open an issu...

CVE-2026-32646

CVE-2026-32646: Missing Authentication on Administrative Device Management Endpoint Advisory Field| Value ---|--- CVE| CVE-2026-32646 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 7.5 High Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE| CWE-306 Missing Authentication for Critical Function...

Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

Nuclei Template CVE-2022-1388 BIG-IP iControl REST Exposed May 06, 2022 This only verifies the presence of the API by hitting the authentication endpoint This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

cve-2018-9208

CVE-2018-9208 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9208 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...

CVE-2024-48246

CVE-2024-48246 Vehicle Management System 1.0 - Stored Cross-Site Scripting XSS Description Vehicle Management System 1.0 contains a Stored Cross-Site Scripting XSS vulnerability in the Name parameter of /vehicle-management/booking.php. A malicious actor can inject malicious payloads into the Name...

pywhatcms

PyWhatCMS Python package for whatcms.com API The package provides a simple way to use the whatcms.org API for detecting 467 different Content Management Systems CMS Installation root@kitploit: pip install pywhatcms Usage First of all, import pywhatcms: root@kitploit: from pywhatcms import whatcms...

CVE-2024-34224

Computer Laboratory Management System using PHP and MySQL 1.0 Submitter: Kha Do Vulnerability Cross Site Scripting Description Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject...

CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Proof of Concept POC Just access the URL with your PHP code in "gridValoresPopHidden" parameter...

CVE-2022-27413

Hospital-Management-System v1.0 - SQLi Vendor Description: The vulnerability page is admin.php http://you ip/HMS/admin.php Hospital-Management-System v1.0 The adminname parameter in the admin.php page appears to be vulnerable to SQL injection attacks...

Pwdlyser

Pwdlyser New repo for Public release Pwdlyser P assw ord -Analyser is a multi-functional analysis tool created to provide security professionals and organisations aiming to improve their security posture with the ability to easily review and analyse passwords from Active Directory domain accounts...

CVE-2026-77105 CommServe Privilege Escalation

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...