AutoRepeater

AutoRepeater: Ripetizione Automatica di Richieste HTTP con Burp Suite tl;dr Nell'extender importare AutoRepeater.jar Alcune Brevi Istruzioni AutoRepeater invierà nuovamente solo le richieste modificate da una sostituzione definita. Quando AutoRepeater riceve una richiesta che corrisponde alle...

EDIDFuzzer

EDID fuzzer Uno strumento per il fuzzing dei dati di identificazione avanzata dei display Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Andy Davis, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/EDIDFuzzer Rilasciato sotto AGPL, vedere...

IODIDE

IODIDE – Die IOS-Debugger- und integrierte Disassembler-Umgebung Als Open Source veröffentlicht von NCC Group Plc – http://www.nccgroup.com/ Entwickelt von Andy Davis, andy dot davis at nccgroup dot com https://github.com/nccgroup/IODIDE Veröffentlicht unter AGPL, siehe LICENSE für weitere...

memaddressanalysis

Mem Address Analyzer Progetto di ricerca relativo all'analisi dello spazio degli indirizzi di memoria Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato per Linux da Aidan Marlin, aidan dot marlin at nccgroup dot com Sviluppato per Windows da Nikos Laleas, nikos do...

Mortimer

Mortimer Eine Sammlung von Skripten zur Verarbeitung von Daten und Intel aus der Netzwerkforensik, hauptsächlich in eine Postgres-Datenbank. Als Open Source von NCC Group Plc veröffentlicht - http://www.nccgroup.com/ Entwickelt für John Green, cirt at nccgroup dot com...

pythia

Einführung / tl;dr Dieses Tool durchsucht eine ausführbare Datei nach Delphi-Daten, einschließlich RTTI und virtuellen Funktionstabellen. Es gibt eine JSON-Datei mit Informationen über identifizierte Klassen und Funktionen aus, die für weitere Analysen verwendet werden kann, zum Beispiel: Erzeuge...

scenester

Scenester Scenester - uno strumento per acquisire uno snapshot visivo di un sito web fornendo più user-agent. Progettato per aiutare nella scoperta di diversi punti di ingresso in un'applicazione. Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Sharique Shaik...

WindowsDACLEnumProject

Projeto Windows DACL Enum Uma coleção de ferramentas para enumerar e analisar DACLs do Windows Lançado como código aberto pela NCC Group Plc - http://www.nccgroup.com/ Desenvolvido por Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsDACLEnumProject...

ginger

Ginger Ginger è uno strumento open source di valutazione della sicurezza che aiuta a valutare la sicurezza di una determinata istanza dell'applicazione Pentaho BA. Tieni presente che questo progetto è ancora in fase di sviluppo e potrebbe non includere tutte le funzionalità o queste potrebbero no...

DAMM

DAMM Ein Open-Source-Speicheranalyse-Tool, das auf Volatility aufbaut. Es ist als Testumgebung für interessante neue Techniken gedacht, die der Community zur Verfügung gestellt werden sollen. Diese Techniken sind ein Versuch, den Untersuchungsprozess durch Datenreduktion und die Kodierung von...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds-fips, crossplane-provider-aws-autoscalingplans-fips, crossplane-provider-aws-cur, crossplane-provider-aws-mwaa-fips, crossplane-provider-aws-cloudfront-fips, crossplane-provider-aws-sagemaker-fips, crossplane-provider-aws-dlm-fips,...

CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, St...

CVE-2026-45532

DataEase versions prior to 2.10.23 on Windows have a path traversal flaw: the server only filters /, allowing attackers to traverse directories via \. The fix is in v2.10.23; no workarounds exist. CVSS 4.0 scores 8.7 (HIGH) with network access and no authentication required. No exploitation detai...

GHSA-X88Q-X2R7-VG3G vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

UBUNTU-CVE-2026-68520

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, asdictsecure in glances/config.py checks only option names and exposes publicusername and credentials embedded in publicapi values through unauthenticated GET /api/4/config and GET /api/4/config/ip requests. This iss...

UBUNTU-CVE-2026-68517

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the corsorigins guard in glances/outputs/glancesrestfulapi.py uses exact list equality instead of wildcard membership, allowing a multi-origin list containing the wildcard to retain corscredentials and expose...

CVE-2026-68517

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, the corsorigins guard in glances/outputs/glancesrestfulapi.py uses exact list equality instead of wildcard membership, allowing a multi-origin list containing the wildcard to retain corscredentials and expose...

CVE-2026-68518

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, sanitizemustachedict in glances/actions.py sanitizes individual Mustache values before chevron.render, allowing adjacent unescaped Mustache variables to reconstruct shell operators that securepopen executes when...

EUVD-2025-210735

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /addprompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be...

CVE-2025-27621 UpTrain has a Constant Default API Key

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new default user with a static username, where the username is also used as the default API key. The UpTrain backend also has an open CORS policy. Using...