PowerSploit

Dieses Projekt wird nicht mehr unterstützt PowerSploit ist eine Sammlung von Microsoft PowerShell-Modulen, die Penetrationstestern in allen Phasen einer Bewertung helfen können. PowerSploit besteht aus den folgenden Modulen und Skripten: Codeausführung Code auf einem Zielcomputer ausführen...

CVE-2021-40514

CVE-2021-40514 OSCAR McMaster 19.401235 Stored Cross-Site-Scripting-Sicherheitslücke Eine Stored Cross-Site-Scripting-Sicherheitslücke existiert auf mehreren Seiten in Version 19.401235 der OSCAR McMaster-Anwendung, die eine beliebige Ausführung von JavaScript-Befehlen ermöglicht. Platzhalter für...

CVE-2021-40513

CVE-2021-40513 OSCAR McMaster 19.401235 Reflektierte Cross-Site-Scripting-Schwachstelle In mehreren Seiten der Version 19.401235 der OSCAR McMaster-Anwendung besteht eine reflektierte Cross-Site-Scripting-Schwachstelle, die die willkürliche Ausführung von JavaScript-Befehlen ermöglicht. Placehold...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

linux-smart-enumeration

First, a couple of useful oneliners ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

SharpHound3

DIES IST JETZT VERALTET ZUGUNSTEN VON SHARPHOUND. MIT DIESER METHODE GESAMMELTE DATEN FUNKTIONIEREN NICHT MIT BLOODHOUND 4.1+ SharpHound - C-Neuschreibung des BloodHound-Ingestors SharpHound herunterladen Der neueste Build von SharpHound befindet sich immer im BloodHound-Repository hier...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

atomic-operator

license atomic-operator Dieses Python-Paket wird verwendet, um Atomic Red Team-Tests Atomics auf mehreren Betriebssystemumgebungen auszuführen. Was gibt es Neues? Warum? atomic-operator ermöglicht es Sicherheitsexperten, ihre Erkennungs- und Abwehrfähigkeiten gegen die in atomic-red-team...

am335xbootrom

Reverse Engineering the AM335x Boot ROM Sono passati probabilmente diciotto mesi da quando ho messo le mani su alcune schede Beaglebone Black, salvate dalla spazzatura. Purtroppo, le schede non funzionavano subito. Ora, era la prima volta che lavoravo con una di queste schede, o con qualsiasi...

CVE-2020-28874

Dieses Repository enthält die Beschreibung der gefundenen Sicherheitslücke CVE-2020-28874 in der Version r1270 von ProjectSend. Vielen Dank an meine Kollegen von Entelgy Innotec Security, die mich dazu angespornt haben, besser zu werden! CVE-2020-28874: Privilege Escalation Beschreibung Die...

windows-api-function-cheatsheets

Windows-API-Funktions-Spickzettel Kontakt 🌨️ Tetsuo: https://www.x.com/tetsuo Inhaltsverzeichnis Windows-API-Funktions-Spickzettel Dateioperationen Prozessverwaltung Speicherverwaltung Thread-Verwaltung Dynamic-Link-Library-Verwaltung DLL Synchronisierung Interprozesskommunikation Windows-Hooks...

CVE-2026-77365 Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter

The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'a' abovefoldimages parameter in all versions up to, and including, 4.2.10 due to insufficient input sanitization and output...

CVE-2026-77365

The Optimole image optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'a' (above_fold_images ) parameter in all versions up to and including 4.2.10 . The root cause is insufficient input sanitization and output escaping , allowing unauthenticated attacker...

EUVD-2026-67398

The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'a' abovefoldimages parameter in all versions up to, and including, 4.2.10 due to insufficient input sanitization and output...

CVE-2026-77365 Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter

The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'a' abovefoldimages parameter in all versions up to, and including, 4.2.10 due to insufficient input sanitization and output...

Security Bulletin: Multiple Security Vulnerabilities in Spring Framework Affect IBM Sterling B2B Integrator and IBM Sterling File Gateway

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerabilities in Spring Framework Vulnerability Details CVEID:CVE-2025-22233 DESCRIPTION: CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patter...

CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...

DEBIAN-CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

DEBIAN-CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...