CVE-2026-78937

Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

GitMonitor

GitMonitor GitMonitor Un modo per monitorare continuamente le informazioni sensibili che potrebbero essere esposte su Github Riepilogo So che esistono molti altri strumenti disponibili per trovare informazioni sensibili attualmente trapelate su Github, io stesso ne uso ancora alcuni. Tuttavia,...

CVE-2021-3156

CVE-2021-3156 PoC Introduzione Questo è un exploit per la vulnerabilità sudo CVE-2021-3156 soprannominata Baron Samedit da Qualys. Utilizzo compilazione: root@kitploit: $ make elenco dei target: root@kitploit: $ ./sudo-hax-me-a-sandwich esecuzione: root@kitploit: $ ./sudo-hax-me-a-sandwich modali...

vk-geosearch

vk-geosearch Suchen von Fotos nach Geo-Tags im sozialen Netzwerkvk.com Abhängigkeiten requests Installation root@kitploit: git clone https://github.com/yevgen2020/vk-geosearch.git pip3 install requests cd vk-geosearch chmod +x search.py Verwendung Für die Suche nach Fotos in VK wird ein...

fses

fses Fucking Search Engines Scraper - libreria Python per estrarre URL dai motori di ricerca Motori di ricerca supportati root@kitploit: Ask Bing DuckDuck GO UOL Yahoo Installazione root@kitploit: git clone https://github.com/mthbernardes/fses.git cd fses pip install -r requeriments.txt Utilizzo...

fses

fses Fucking Search Engines Scraper - python library to scrap url's from search engines Search Engines we scrap root@kitploit: Ask Bing DuckDuck GO UOL Yahoo Install root@kitploit: git clone https://github.com/mthbernardes/fses.git cd fses pip install -r requeriments.txt Usage Simple search using...

CVE-2018-9995-ModifiedByGwolfs

वक्तव्य यह टूल gwolfs द्वारा लिखे गए CVE-2018-9995 का बेहतर संस्करण है, और केवल सीखने के उपयोग के लिए है। अवैध उद्देश्यों के लिए उपयोग न करें, इससे उत्पन्न होने वाले सभी परिणाम आपके अपने हैं। मूल संस्करण ezelf द्वारा लिखा गया है और https://github.com/ezelf/CVE-2018-9995dvrcredentials पर है। ezelf...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

CVE-2026-75768

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

Pwdlyser

Pwdlyser New repo for Public release Pwdlyser P assw ord -Analyser is a multi-functional analysis tool created to provide security professionals and organisations aiming to improve their security posture with the ability to easily review and analyse passwords from Active Directory domain accounts...

sqlite security update

An update is available for sqlite. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list SQLite is a C library that implements an SQL database engine. A large subset ...

fhex

Fhex - Un Editor Esadecimale Completo Questo progetto nasce con l'obiettivo di sviluppare uno strumento leggero ma utile. Il motivo è che gli editor esadecimali esistenti hanno diverse limitazioni ad esempio troppe dipendenze, funzionalità di colorazione esadecimale mancanti, ecc.. Questo progett...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

sqlite security update

An update is available for sqlite. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list SQLite is a C library that implements an SQL database engine. A large subset o...

EUVD-2026-65687

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

CVE-2026-75768 Substance3D - Painter | Untrusted Search Path (CWE-426)

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

CVE-2026-75768

Adobe Substance3D - Painter is affected by an Untrusted Search Path vulnerability (CWE-426) that can lead to arbitrary code execution in the context of the current user. An attacker must convince a victim to open a malicious file , which triggers the exploitation path. The CVSS v3.1 score is 7.8 ...

GoogleIndexRetriever

Google index Retriever Hai mai trovato una pagina web che sembra parlare esattamente di ciò di cui hai bisogno, ma è stata rimossa? Sì, la cache di Google è la risposta, ma... E se anche la cache fosse stata rimossa? E se il sito è solo nella pagina dell'indice di Google? Non puoi recuperare la...

jshole

jshole A simple JavaScript components vulnrability scanner, based on RetireJS. Why use JShole instead of RetireJS? By default, RetireJS only searches one page, but JShole tries to crawl all pages. Get Started Requirements requests Install git clone https://github.com/callforpapers-source/jshole.g...

CVE-2020-1958

CVE-2020-1958 PoC CVE-2020-1958 è una vulnerabilità di iniezione LDAP ad alta gravità in Apache Druid 0.17.0. Consente a un attaccante di aggirare il filtro di ricerca LDAP e di recuperare qualsiasi valore degli attributi LDAP degli utenti presenti sul server LDAP. Dal bollettino ufficiale di...