pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

AddUser-SAMR

AddUser-SAMR Crea amministratori locali utilizzando l'API SAMR, operando a un livello più basso di net.exe, New-LocalUser di PowerShell o dell'API NetUserAdd. Richiede privilegi di amministratore e se l'utente esiste, viene aggiunto al gruppo ma la password non viene aggiornata. Ci sono 4...

EasyOCR

EasyOCR OCR pronto all'uso con oltre 80 lingue supportate e tutti i sistemi di scrittura più diffusi, tra cui: latino, cinese, arabo, devanagari, cirillico, ecc. Prova la demo sul nostro sito web Integrato in Huggingface Spaces 🤗 usando Gradio. Prova la Web Demo: Novità...

serverless

Sito web • Documentazione • X / Twitter • Slack della community • Forum The Serverless Framework – Semplifica l'uso di AWS Lambda e di altri servizi cloud gestiti per creare applicazioni che si adattano automaticamente, non costano nulla quando sono inattive e richiedono una manutenzione...

tink

Tink NOTA : Tink è stato spostato su github.com/tink-crypto e questo repository non è più attivo! Come pianificato, abbiamo suddiviso Tink in più repository GitHub ospitati su github.com/tink-crypto. Di conseguenza, abbiamo reso questo repository di sola lettura e non sarà mantenuto in futuro. Un...

novahot

novahot novahot एक पैठ परीक्षकों के लिए वेबशेल ढांचा है। यह एक JSON-आधारित API को लागू करता है जो किसी भी भाषा में लिखे ट्रोजन के साथ संवाद कर सकता है। डिफ़ॉल्ट रूप से, यह PHP, ruby और python में लिखे ट्रोजन के साथ आता है। सिस्टम कमांड को निष्पादित करने के अलावा, novahot mysql, sqlite3 और psql सह...

Cobra

Cobra Il design di questo progetto non è più in grado di soddisfare i requisiti attuali di scansione white-box, non è più mantenuto ed è utilizzabile solo a scopo di ricerca: non utilizzarlo in ambienti di produzione. Introduzione Cobra è uno strumento di audit di sicurezza del codice sorgente , ...

CVE-2026-43951

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service. Mitigation - Those who do not...

Joern 4.0.528

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

RealVuln: Benchmarking Rule-Based, General-Purpose LLM, and Security-Specialized Scanners on Real-World Code

How do security scanners perform on real-world code? We present RealVuln, the first open-source benchmark comparing Rule-Based SAST, General-Purpose LLMs, and Security-Specialized scanners on 26 intentionally vulnerable Python repositories educational and Capture-The-Flag applications with 796...

SkillSieve: A Hierarchical Triage Framework for Detecting Malicious AI Agent Skills

OpenClaw's ClawHub marketplace hosts over 13,000 community-contributed agent skills, and between 13% and 26% of them contain security vulnerabilities according to recent audits. Regex scanners miss obfuscated payloads; formal static analyzers cannot read the natural language instructions in...

[SECURITY] Fedora 44 Update: valkey-9.0.3-1.fc44

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

CVE-2020-10446

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-category.php by adding a question mark ? followed by the payload...

CVE-2020-10419

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-categories.php by adding a question mark ? followed by the payload...

CVE-2020-10457

Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a dot-dot-slash sequence ../ via the POST parameter imgName for the new name and imgUrl for the current file to be renamed...

CVE-2020-10471

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

CVE-2020-10390

OS Command Injection in export.php vulnerable function called from include/functions-article.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by saving the code to be executed as the wkhtmltopdf path via admin/save-settings.php...

CVE-2020-10467

Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...

CVE-2020-10436

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/my-profile.php by adding a question mark ? followed by the payload...

CVE-2020-10463

Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...