versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

KoodousFinder

KoodousFinder 一个简单工具，允许用户搜索和分析Android应用，以发现潜在的安全威胁和漏洞 账户和API密钥 创建一个Koodous账户并获取你的API密钥 https://koodous.com/settings/developers 安装 $ pip install koodousfinder 参数 参数| 描述 ---|--- -h, --help| 'Show this help message and exit' --package-name| "General search for APK's" --app-name| Name of the app to...

shellcode2assembly

ShellcodeToAssembly 在 shellcodetoasm.py 中用你的 shellcode 替换。 字节序类型为小端。 shellcode = '' 安装 git clone https://github.com/blacknbunny/ShellcodeToAssembly.git && cd ShellcodeToAssembly/ && pip2 install -r requirements.txt && python2 shellcodetoasm.py 模块手动安装 pip install -r requirements.txt 也可以是 pip2...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

urlhunter

o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named URLTeam kudos...

fprobe

FProbe FProbe - 快速HTTP探测 安装 GO111MODULE=on go get -u github.com/theblackturtle/fprobe 特性 接收域名/子域名列表，探测可用的HTTP/HTTPS服务器。 运行时优化内存和CPU使用。 支持为每个域名指定特殊端口。 以JSON格式输出详细信息，包含额外头部，如Status Code、Content Type、Location。 用法 Usage of fprobe: -c int Concurrency default 50 -cidr Generate IP addresses from CIDR -i...

TrueCalle-Bot

TrueCalle-Bot TrueCaller Python 机器人：搜索电话号码并在终端打印结果 由 hossamsalem23 制作 首先： 下载 Chrome webdriver https://chromedriver.chromium.org/downloads 安装 git clone https://github.com/hossamsalem23/TrueCalle-Bot cd TrueCalle-Bot/ sudo apt install python3 sudo apt install python3-pip pip3 install selenium pytho...

CVE-2026-80903

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Xe output/audio OA module. When a specific configuration emission function fails, it does not properly release allocated memory for synchronization entries. This oversight leads to a memory leak, where system memory becomes...

CVE-2026-107151

Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...

CVE-2026-107151 Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests

Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...

CVE-2026-107151

The smart_proxy_dynflow Ruby gem contains a missing authentication vulnerability in remote-execution task updates. When remote execution is configured in pull or pull-mqtt mode, the progress and completion callbacks accept reports even if the one-time token is missing. An attacker who knows a run...

CVE-2026-107151

Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...

BIT-JOOMLA-2026-90914 Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260904 - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to an XSS vulnerability in the generic audio and video output layouts...

CVE-2026-89417

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 6.3.10 . The root cause is insufficient input sanitization and output escaping regarding the 's' Search Parameter within the comments...

ghostscript security update

An update is available for ghostscript. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PDF...

RLSA-2026:76877 Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter...

CVE-2025-65300

CVE-2025-65300 Descripción CVE-2025-65300: Vulnerabilidad de Cross-Site Scripting XSS almacenado en la plataforma SaaS de Coohom Fecha de divulgación: 2025-10-28 Última actualización: 2025-10-28 Reportero: Phisit Pupiw Proveedor: Coohom CWE: CWE-79 – Cross-Site Scripting Resumen Se identificó una...

CVE-2025-63588

CVE-2025-63588 Cross-Site Scripting XSS Reflejado en el manejo de la ruta cmsimplexh de CMSimpleXH CVSS v3.1 Estimado: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N → 6.1 Medio CVE Asignado: CVE-2025-63588 Productos: CMSimpleXH - 1.8 Vendor: CMSimpleXH - https://www.cmsimple-xh.org/ Resumen Existe una...

MiracleLinux 9 : ghostscript-9.54.0-19.el9_8.1 (AXSA:2026-1983:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1983:01 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly fro...

RockyLinux 8 : ghostscript (RLSA-2026:76877)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:76877 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from th...