VulnFanatic-NG

VulnFanatic-NG Pesquisa de vulnerabilidades assistida por LLM para Binary Ninja. VulnFanatic-NG adiciona um painel lateral que analisa o binário atual e pergunta a uma LLM — um modelo compatível com OpenAI hospedado localmente por padrão, ou Anthropic Claude, Google Gemini, ou Azure OpenAI veja...

airgorah

Airgorah A WiFi security auditing software mainly based on aircrack-ng tools suite Installation | Usage | Credits Airgorah is a WiFi security auditing software that can capture nearby WiFi traffic, discover clients connected to access points, perform deauthentication attacks, capture handshakes,...

ligolo-iwa

Ligolo-IWA Un agente JavaScript Ligolo-ng che funziona all'interno di browser basati su Chrome/Chromium sfruttando le Applicazioni Web Isolate. Vedi la documentazione Ligolo-IWA per una configurazione rapida: Ligolo-IWA Setup/Guida rapida E non dimenticare di leggere la documentazione di Ligolo-n...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

CVE-2023-27350-POC

CVE-2023-27350-POC سكربت بايثون يبحث عن الإصدارات الضعيفة من PaperCut MF/NG يمكن العثور على مزيد من المعلومات هنا: https://www.huntress.com/blog/critical-vulnerabilities-in-papercut-print-management-software ملاحظة: تم إنشاء هذا للأغراض التعليمية فقط. استخدمه على مسؤوليتك الخاصة...

CVE-2026-8794

CVE-2026-8794 — Benutzernamen-Enumeration über Seitenkanal im Authentifizierungs-Timing bei PaperCut NG Feld| Details ---|--- CVE-ID| CVE-2026-8794 Produkt| PaperCut NG Betroffene Version| 25.0.11 Build 75758 und früher CWE| CWE-208 — Beobachtbare Timing-Diskrepanz CVSS-Score| 3.7 Niedrig —...

airdecloak-ng

Airdecloak-ng مساهمتي في Aircrack-ng مع Thomas d'Otreppe الوصف Airdecloak-ng هي أداة تزيل إخفاء WEP من ملف pcap. بعض أنظمة WIPS واحد فعلياً "تمنع" بنشاط كسر مفتاح WEP عن طريق إدخال إطارات زائفة إطارات wep مزيفة في الهواء لخداع aircrack-ng. في بعض الحالات النادرة، يفشل الإخفاء ويمكن استعادة المفتا...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

Hijacker

Hijacker Hijacker è un'interfaccia grafica per gli strumenti di penetration testing Aircrack-ng, Airodump-ng, MDK3 e Reaver. Offre un'interfaccia semplice e facile per utilizzare questi strumenti senza digitare comandi in una console e copiare e incollare indirizzi MAC. Questa applicazione richie...

quickjs-ng: Multiple Vulnerabilities

Background quickjs-ng is a small and embeddable JavaScript engine. It aims to support the latest ECMAScript specification. It is a fork of QuickJS. Description Multiple vulnerabilities have been discovered in quickjs-ng. Please review the CVE identifiers referenced below for details. Impact Pleas...

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

CVE-2026-19349 Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

CVE-2026-19349 Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

EUVD-2026-59963

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

CVE-2026-19349

Lemonldap::NG::Portal (Perl) versions before 2.16.9, 2.21.5, and 2.23.3 are affected. The extractFormInfo() method calls getApacheSession( undef, 1, 0, 'GitHubState' ) positionally, causing the OAuth2 state parameter to be written as a regular SSO session in global storage. Any unauthenticated vi...

CVE-2026-72487

In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x8664 machine: BUG: unable to handle page fault for address: ffa0000007f40000 RIP: 0010:pcigetromsize+0x52/0x220 Call Trace:...

EUVD-2026-59386

In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x8664 machine: BUG: unable to handle page fault for address: ffa0000007f40000 RIP: 0010:pcigetromsize+0x52/0x220 Call Trace:...