vader

VADER: A Human-Evaluated Benchmark for Vulnerability Assessment, Detection, Explanation, and Remediation Official GitHub Repo:https://github.com/AfterQuery/vader Hugging Face Dataset:https://huggingface.co/datasets/AfterQuery/vader VADER is a human-evaluated benchmark designed to measure how well...

Security-101

🌐 Soporte multilingüe Soportado a través de GitHub Action Automatizado y siempre actualizado Árabe | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |...

wrongsecrets-binaries

wrongsecrets-binaries...

Graffiti

HINWEIS : Laden Sie Payloads niemals auf Online-Prüfer hoch Graffiti ist ein Werkzeug zur Erstellung von verschleierten Einzeilern, um Penetrationstests zu unterstützen. Graffiti akzeptiert die folgenden Sprachen zum Codieren: Python Perl Batch Powershell PHP Bash Graffiti akzeptiert auch Sprache...

msmap

MSMAP Msmap è un generatore di WebShell in memoria. Compatibile con vari Container, Componenti, Encoder, WebShell / Proxy / Killer e Client di Gestione. 简体中文 L'idea alla base I, L'idea alla base II, L'idea alla base III Funzionalità WIP Funzioni Menu Dinamico Compilazione Automatica Generazione...

sqlmap-tamper-api

SQLmap Tamper-API यह SQLmap टैम्पर स्क्रिप्ट्स के लिए एक API है जो आपको अपनी पसंदीदा प्रोग्रामिंग भाषा का उपयोग करके टैम्पर स्क्रिप्ट लिखने की अनुमति देता है। यह API SQLmap की उस सीमा को हल करता है जो केवल Python को टैम्पर स्क्रिप्ट लिखने के लिए स्वीकार करता है। यह कैसे काम करता है taper-api.py...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation root@kitploit: bundle install Current...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

EasyOCR

EasyOCR OCR pronto all'uso con oltre 80 lingue supportate e tutti i sistemi di scrittura più diffusi, tra cui: latino, cinese, arabo, devanagari, cirillico, ecc. Prova la demo sul nostro sito web Integrato in Huggingface Spaces 🤗 usando Gradio. Prova la Web Demo: Novità...

serverless

Sito web • Documentazione • X / Twitter • Slack della community • Forum The Serverless Framework – Semplifica l'uso di AWS Lambda e di altri servizi cloud gestiti per creare applicazioni che si adattano automaticamente, non costano nulla quando sono inattive e richiedono una manutenzione...

Joern 4.0.528

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

[SECURITY] Fedora 44 Update: valkey-9.0.3-1.fc44

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

[SECURITY] Fedora 41 Update: valkey-8.0.6-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

EUVD-2020-2946

Malware in sbrugna...

Binary Vulnerability in Unisys UOS Desktop Professional Edition by Unisys Software Technology Co.

Unisys UOS Desktop Professional Edition is a commercial desktop operating system based on Linux kernel, which supports all CPU architectures including AMD64, ARM64, LoongArch64, SW64 and other mainstream architectures, and is suitable for domestic CPU platforms e.g., Haikuang, Zhaoshen, etc.. The...

Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals

The threat actors behind the Darcula phishing-as-a-service PhaaS platform have released new updates to their cybercrime suite with generative artificial intelligence GenAI capabilities. "This addition lowers the technical barrier for creating phishing pages, enabling less tech-savvy criminals to...

[SECURITY] Fedora 37 Update: phpMyAdmin-5.2.1-1.fc37

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats and i...

TeaBot Trojan Targets Banks via Hijacked Android Handsets

Researchers have discovered an Android trojan that can steal victims’ SMS messages and credentials and completely take over devices. The trojan, dubbed TeaBot, is aimed at committing fraud against at least 60 banks in Europe. Join Threatpost for “Fortifying Your Business Against Ransomware, DDoS ...

MetInfo suffers from a command execution vulnerability (CNVD-2021-29218)

MetInfo is a multi-language, full-featured, secure and stable, multi-terminal display and support for visual editing, easy to use enterprise station software. MetInfo has a command execution vulnerability that can be exploited by attackers to gain control of the server...

SQL injection vulnerability in SongCMS PHP version (CNVD-2021-28484)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS PHP version suffers from a SQL injection vulnerability, which can be exploited b...