gitls

Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline This tool is available when the repository, such as github, is included in the bugbounty scope. Sometimes specified as an org name or user name rather than a specific repository, you can use this tool to extract url...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

lazyCSRF

LazyCSRF LazyCSRF is a more useful CSRF PoC generator that runs on Burp Suite. No longer maintenance🙇 When I started developing lazyCSRF, I mistakenly thought that the CSRF PoC generator built into Burp Professional could not generate PoC using XHR and did not support PUT requests, etc. I am stil...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

reverseip_py

reverseippy Domain parser for IPAddress.com Reverse IP Lookup. Writen in Python 3. What is Reverse IP? Reverse IP refers to the process of looking up all the domain names that are hosted on a particular IP address. This can be useful for a variety of reasons, such as identifying all the websites...

Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability (cisco-sa-sdwan-webauth-xr8beuuU)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - An authentication bypass vulnerability exists in the API session-based authentication management of Cisco Catalyst SD-WAN Manager due to improper handling of URI encoding hex encoding in HTTP...

PT-2026-104377

Name of the Vulnerable Software and Affected Versions Next.js versions 16.0.0 through 16.3.7 Description The next dev development server exposes a Model Context Protocol endpoint that does not reliably restrict cross-site requests. This allows a malicious website visited by a developer to access...

Linux Distros Unpatched Vulnerability : CVE-2026-94486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protoco...

CVE-2026-94485: Origin Validation Error

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read t...

ROS-20261002-73-0155

The vulnerability in rclone is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by sending specially crafted HTTP requests...

POC-CVE-2023-32681

POC for CVE-2023-32681 This is a Python 3 implementation of CVE-2023-32681, affecting clients using the requests version = 2.30.0. As per https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 whenever redirection 3xx is issued by the server then user-agent should modify the request to remove...

requests-racer

Requests-Racer Requests-Racer — это небольшая библиотека на Python, которая позволяет использовать библиотеку Requests для отправки нескольких запросов, которые будут обработаны серверами назначения примерно в одно и то же время, даже если запросы имеют разные адресаты или разные размеры полезной...

CVE-2024-57610

Отсутствие ограничения скорости запросов в Sylius v2.0.2 Домашняя страница производителя: https://sylius.com/ Шаги воспроизведения 1. Перейдите на https://store.sylius.com/login 2. Выполните несколько попыток входа с помощью автоматизированных инструментов или скриптов например, Burp Suite, cURL...

CVE-2021-27905

CVE-2021-27905 Sr No| Title ---|--- 1| Overview 2| Root Cause 3| Proof Of Concept 4| Mitigation 8.8.2+ 5| Reference For educational and research purposes only. Do not use this code on systems you do not own or have explicit permission to test. I am not responsible for any misuse. Overview This is...

CVE-2026-104059 Lektor 3.3.14 CSRF via Admin API Endpoints

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer validation, CORS configuration, or Host...

CVE-2026-36958

CVE-2026-36958: Отказ в обслуживании через одновременные HTTP-запросы CVE ID: CVE-2026-36958 Дата: 2026-04-29 Обнаружил: Kirubel Solomne Производитель: U-SPEED Продукт: Маршрутизатор U-SPEED Версия прошивки: V1.0.0 CWE: CWE-400 — Неконтролируемое потребление ресурсов Описание Прошивка...

CVE-2026-36960

CVE-2026-36960: Межсайтовая подделка запроса CSRF в веб-интерфейсе управления Идентификатор CVE: CVE-2026-36960 Дата: 2026-04-29 Обнаружил: Kirubel Solomne Производитель: U-SPEED Продукт: Маршрутизатор U-SPEED Версия прошивки: V1.0.0 CWE: CWE-352 — Межсайтовая подделка запроса CSRF Описание...

CVE-2026-6111

Сканер уязвимости CVE-2026-6111 Это простой скрипт на Python для сканирования веб-сайтов на наличие уязвимости CVE-2026-6111. Он отправляет модифицированные запросы на целевой URL и проверяет ответ на наличие этой уязвимости. Требования к окружению Python 3 Библиотека requests Библиотека tqdm Вы...

CVE-2026-42141-xibo-ssrf

CVE-2026-42141 - SSRF в XIBO CMS Уязвимость SSRF в Xibo CMS CVE-2026-42141 Описание Уязвимость Server-Side Request Forgery SSRF в Xibo CMS через функцию uploadUrl. Данная уязвимость была обнаружена в ходе исследования безопасности Xibo CMS. Воздействие Аутентифицированный пользователь может...