festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

Website

The New Oil Mission Statement To educate readers on why privacy and security matter, and the various tools and techniques available to help them reclaim and protect their own privacy & security To empower readers to believe that privacy and security are attainable for everyone and to do their bes...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

retoolkit

Reverse Engineer's Toolkit What? This is a collection of tools you may like if you are interested in reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this program, you'll have two ways to access the tools: Double-click the retoolkit icon in the Desktop...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

https-nj.gov---CVE-2018-14041

https-nj.gov---CVE-2018-14041 Vulnearability Report of the New Jersey official site The data-target attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix for this specific issue could be changing getTargetFromTrigger function. return $target to: return...

https-nj.gov---CVE-2020-11022

https-nj.gov---CVE-2020-11022 Vulnearability Report of the New Jersey official site Potential XSS vulnerability in jQuery.htmlPrefilter and related methods. Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others...

CVE-2026-89676

creationtimestamp| type| source ---|---|--- 2026-09-13 11:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfj5rriox2f...

https-nj.gov---CVE-2018-14042

https-nj.gov---CVE-2018-14042 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute, the data-parent attribute and the data-container is vulnerable to Cross-Site Scripting attacks. Test...

CVE-2022-0441

Se encontró una vulnerabilidad clasificada como crítica en el complemento MasterStudy LMS hasta la versión 2.7.5 en WordPress WordPress Plugin. Esta vulnerabilidad afecta a una parte desconocida del componente New Account Handler. La manipulación con una entrada desconocida conduce a una...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

openstego

OpenStego OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within an image file. 2. Watermarking: Watermarking image files with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: Use menu...

CVE-2026-90495

creationtimestamp| type| source ---|---|--- 2026-09-13 06:10:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iaqbvi77niu3u...

CVE-2023-34845

CVE-2023-34845 POC de vulnerabilidad para CVE-2023-34845 Vulnerabilidad Encontré un ataque de cross-site scripting en la página de creación de nuevo contenido http://localhost:800/admin/new-content esto ejecutará el script en el contexto del usuario, permitiendo al atacante acceder a cualquier...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

multitor

multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...

reverse-ip-new-api

reverse-ip-new-api Esta herramienta se utiliza para realizar búsquedas inversas de IP— buscar todos los dominios alojados en una dirección IP. Características Procesamiento de múltiples hilos Procesamiento basado en API Manejo de errores Personalizar el número de hilos Cómprame un café : Bitcoin ...

New API < v0.12.10 - Stripe Webhook Bypass

New API v0.12.10 contains a broken authentication caused by unauthenticated attacker forging Stripe webhook events, letting attackers credit arbitrary quota without payment, exploit requires no authentication. id: CVE-2026-41432 info: name: New API v0.12.10 - Stripe Webhook Bypass author: str4k3r...

ChurchCRM - SQL Injection

A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a time-based blind SQL Injection vulnerability in the EditEventTypes functionality. The newCountName parameter is directly concatenated into an SQL query without proper...

WordPress New Year Firework <=1.1.9 - Cross-Site Scripting

WordPress New Year Firework 1.1.9 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authenticati...