httpstat

httpstat httpstat visualizes curl1 statistics in a way of beauty and clarity. It is a single file🌟 Python script that has no dependency👏 and is compatible with Python 3🍻. Features Beautiful terminal output — timing breakdown of DNS, TCP, TLS, server processing, and content transfer Structured JSO...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

inject-assembly

inject-assembly - Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon,...

CVE-2024-27316

CVE-2024-27316 I decided to call this vulnerability specifically "CVE-2024-27316" since I have tested it against this vulnerability. The underlying flaw effects other CVEs so I thought I'd mention those with the hope that others could test and modify this PoC : This PoC currently only works again...

CVE-2025-11926

CVE-2025-11926 Wordpress-Related-Posts-Lite-plugin-XSS-PoC for PoC: https://github.com/prabhatverma47/Wordpress-Related-Posts-Lite-plugin-XSS-PoC...

CVE-2026-104910

MISP contains an authorization bypass in the related events listing functionality. When a user requests the list of events correlated to a given event, the system retrieved related event metadata directly from the correlation table without re-validating the caller's access rights against each...

CVE-2026-104910 MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization

MISP contains an authorization bypass in the related events listing functionality. When a user requests the list of events correlated to a given event, the system retrieved related event metadata directly from the correlation table without re-validating the caller's access rights against each...

CVE-2026-104910

The MISP platform contains an authorization bypass within the related events listing functionality. The vulnerability occurs because the system retrieves related event metadata directly from the correlation table without re-validating the caller's access rights for each specific event. Since the ...

CVE-2026-104910 MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization

MISP contains an authorization bypass in the related events listing functionality. When a user requests the list of events correlated to a given event, the system retrieved related event metadata directly from the correlation table without re-validating the caller's access rights against each...

EUVD-2026-91748

MISP contains an authorization bypass in the related events listing functionality. When a user requests the list of events correlated to a given event, the system retrieved related event metadata directly from the correlation table without re-validating the caller's access rights against each...

PT-2026-104398

Name of the Vulnerable Software and Affected Versions MISP versions prior to commit 2ffa97f05 Description An authorization bypass exists in the related events listing functionality. When a user requests a list of events correlated to a specific event, the system retrieves metadata directly from t...

EUVD-2026-90431

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki MediaSearch extension allows Cross-Site Scripting XSS. This issue affects MediaWiki MediaSearch extension: 1.46, 1.45, and 1.43...

CVE-2026-103584

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki CommonsMetadata extension allows Cross-Site Scripting XSS. This issue affects MediaWiki CommonsMetadata extension: 1.46, 1.45, and 1.43...

CVE-2026-103439 Various rawParams() and escaped() updates to prevent XSS in Wikibase extension

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Wikbase extension allows Cross-Site Scripting XSS. This issue affects MediaWiki Wikbase extension: 1.46, 1.45, and 1.43...

CVE-2026-103439

The MediaWiki Wikbase extension (versions 1.46, 1.45, and 1.43 ) is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of script-related HTML tags. The root cause involves issues within the rawParams() and escaped() functions. While the documents do not provide specific e...

CVE-2026-103438

The The Wikimedia Foundation MediaWiki Wikistories extension is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of Script-Related HTML tags in a web page. This vulnerability specifically affects versions 1.46, 1.45, and 1.43 . The issue is addressed through updates to ...

EUVD-2026-90082

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master...

EUVD-2026-88380

Axios: Header Injection via Inherited headers After Minimal Interceptor...

CVE-2026-103444: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master...