CVE-2026-104181 Filament: Multi-factor authentication (app) management actions do not require password reauthentication

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3, app-based multi-factor authentication management actions do not consistently require confirmation of the current password. An attacker with access to an authenticated user...

CVE-2026-104181 Filament: Multi-factor authentication (app) management actions do not require password reauthentication

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3, app-based multi-factor authentication management actions do not consistently require confirmation of the current password. An attacker with access to an authenticated user...

SDK

Публичный SDK Intelligence X Комплект разработчика SDK позволяет любому использовать поисковую систему Intelligence X. Он бесплатен для использования, и Intelligence X приветствует любые интеграции в сторонние инструменты и сервисы. Intelligence X — это поисковая система и архив данных...

CVE-2026-41940

CVE-2026-41940 Инструмент для исследования безопасности, предназначенный для обнаружения и анализа служб cPanel/WHM и их поведения при аутентификации. Разработан исключительно для авторизованного тестирования и образовательных целей. Сканер безопасности cPanel Исследовательский инструмент Этот...

aegis-latent-core

Aegis Latent Core Шлюз управления ИИ и криптографических доказательств Aegis Latent Core фиксирует подписанные, связанные хешами доказательства каждого управляемого вызова ИИ — до того, как ответ достигнет вызывающей стороны — и выдаёт переносное доказательство, которое третья сторона проверяет, ...

Cobra

Cobra This project's design can no longer meet current white-box scanning requirements. It is no longer maintained and is intended for research use only. Please do not use it in a production environment. Introduction Cobra is a source code security audit tool that supports detecting most prominen...

maltrieve

Stories in Ready Stories in In Progress | | | || | | |/ | | \ / | | | | | | | | | \ | | / | Maltrieve Maltrieve originated as a fork of mwcrawler. It retrieves malware directly from the sources as listed at a number of sites. Currently we crawl the following: Malc0de Malware Domain List Malware...

copy.fail-mitigation-MLM

Create a new configuration channel State Channel in Multi-Linux Manager using the code from the copy-fail.sls file. Assign the config channel to all your machines and run it, or execute Highstate. This is a temporary fix!...

log4j-fuzzer

log4j-fuzzer Для одной цели chmod +x log4j После этой команды просто укажите вашу цель ./log4j URLВАШЕЙЦЕЛИ ВАШУДАЛЕННЫЙСЕРВЕР Для нескольких целей Соберите все домены, поддомены и каталоги в список После этого просто выполните команду chmod +x log4j Вы можете создать удалённый сервер с помощью...

CVE-2026-31431-exp

Adapted from https://github.com/theori-io/copy-fail-CVE-2026-31431. Added payload encryption and obfuscation, cache write-back to improve system stability, adaptive chunking, zero dependencies, multi-architecture support x86, arm, i386, etc., and other features. In theory, it can be exploited on...

CVE-2026-34621_PDF_SAMPLE

Technical Analysis of a Multi-Stage Adobe Acrobat PDF JavaScript Sample Overview This repository publishes a code-centric reverse-engineering write-up on a malicious PDF sample that embeds staged Adobe Acrobat JavaScript. The analyzed sample uses a hidden form field as its initial loader,...

cve-2025-3248

CVE-2025-3248 Langflow RCE Scanner A Python tool for scanning and exploiting the CVE-2025-3248 vulnerability, which allows remote code execution RCE in Langflow applications. Features Single-target scanning and command execution Batch URL scanning Interactive shell mode Multi-threaded batch...

djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data

Impactdjust.tenants isolation was enforced only on the HTTP path. The current tenant was stored in threading.local and set exclusively by the HTTP-only TenantMiddleware, so on the live WebSocket/SSE path getcurrenttenant was always None during mount and every event handler — and the tenant-aware...

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse Обнаруживает Oracle E-Business Suite CVE-2025-61882. Обнаружение: многоуровневые проверки — снятие отпечатков, проверки версий, тесты конечных точек и SSRF, анализ времени и контролируемая эксплуатация — 4 результата с высокой степенью достоверности. По умолчани...

NGINX_2026_CVE_Bundle_CTI_Report

🛡️ NGINX 2026 Multi-CVE CTI Investigation CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 Created by Pratik Chhetri Report Date: 2026-07-28 📌 Executive Snapshot CVE| Component| Primary Issue| Fixed Open Source Versions| Priority ---|---|---|---|--- CVE-2026-28755|...

CVE-2026-23552

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak Overview Apache Camel's KeycloakSecurityPolicy does not validate the iss issuer claim of JWT tokens against the configured realm. This means a token issued by one Keycloak realm is silently accepted by a policy configured for a...

FOFA-API-Threaded-Searcher

FOFA API Threaded Searcher A powerful multi‑threaded Python tool to query the FOFA Fofa.so API, extract selected fields, and save unique results with intelligent formatting. ✨ Features Multi‑threaded – Fetch multiple pages concurrently configurable threads Custom fields – Choose any valid FOFA...

All-ReverseIP-MultiThreading

All-ReverseIP-MultiThreading Python 2.7 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

livewire-vuln-scanner

Livewire Passive Vulnerability Scanner Livewire Passive Vulnerability Scanner is a Python 2.7 tool designed to passively detect Livewire versions used by websites and identify potential vulnerabilities based on version comparison. This scanner does not exploit any vulnerability. It only analyzes...

Routeglass

Routeglass - High speed Router & Network Appliance Fingerprinting Tool Routeglass is a fast, multi-threaded router fingerprinting tool written in Go. The goal of the project is simple: identify web-exposed routers, firewalls, gateways, and embedded network devices by fingerprinting HTTP responses...