CVE-2026-47844

Reactor Netty HTTP Server may leak exception details across unrelated requests when the server is configured with Brave Tracing . Affected versions are 1.3.0–1.3.6 , 1.1.0–1.2.18 , and 1.0.52 and earlier . The CVSS 3.1 score is 5.3 (Medium) , with low integrity impact and no confidentiality or av...

snallygaster

snallygaster Encontra vazamentos de arquivos e outros problemas de segurança em servidores HTTP. o quê? snallygaster é uma ferramenta que procura por arquivos acessíveis em servidores web que não deveriam ser públicos e podem representar um risco de segurança. Exemplos típicos incluem repositório...

CVE-2025-55182

Ferramenta de Detecção em Lote CVE-2025-55182 Ferramenta eficiente de detecção em lote para a vulnerabilidade de poluição de protótipo do Next.js CVE-2025-55182. Descrição da Vulnerabilidade CVE-2025-55182 é uma vulnerabilidade de poluição de protótipo no framework Next.js, que permite a um...

coderunner

CodeRunner: आपके AI एजेंटों के लिए एक लोकल सैंडबॉक्स CodeRunner आपके AI एजेंटों और उनकी गतिविधियों को सैंडबॉक्स के भीतर सुरक्षित रूप से चलाने में मदद करता है। मुख्य उपयोग: आप हमारे सैंडबॉक्स में कई Claude Code या AI एजेंटों को डेटा हानि और डेटा बहिर्गमन exfiltration के किसी भी भय के बिना चला सकते...

sandbox-agent

Coding-Agenten in Sandboxen ausführen. Per HTTP steuern. Ein Server, der in Ihrer Sandbox läuft. Ihre App verbindet sich remote, um Claude Code, Codex, OpenCode, Cursor, Amp oder Pi zu steuern – mit Streaming von Ereignissen, Verwaltung von Berechtigungen und Sitzungen. Dokumentation — API-Refere...

pyfiscan

pyfiscan Informazioni Pyfiscan è uno scanner gratuito di vulnerabilità e versioni per applicazioni web e può essere utilizzato per individuare versioni obsolete di applicazioni web comuni su server Linux. Un caso d'uso tipico è quello dei provider di hosting che monitorano le installazioni dei lo...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. root@kitploit: sudo python3 -m pip install gdbfrontend if it is already installed and you a...

resiprocate

Panoramica Il repository reSIProcate contiene le seguenti librerie e applicazioni C++: libreria resip: stack SIP completo RFC3261 libreria dum Dialog Usage Manager: libreria SIP di alto livello per creare user agent SIP nessuno stack multimediale libreria recon: libreria UA SIP di alto livello co...

EUVD-2026-66664

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery SSRF vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...

CVE-2026-71172

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery SSRF vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...

CVE-2026-71172

Dell Cloud Disaster Recovery versions 20.2 and prior are affected by a Server-Side Request Forgery (SSRF) vulnerability. A low-privileged attacker with remote network access can exploit this to issue forged server-side requests, resulting in a low confidentiality impact with no impact on integrit...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

openrasp

OpenRASP Introduzione A differenza delle soluzioni di controllo perimetrale come il WAF, OpenRASP integra direttamente il suo motore di protezione nel server applicativo tramite strumentazione. Può monitorare vari eventi, incluse le query al database, le operazioni sui file e le richieste di rete...

react2shell-scanner

react2shell-scanner Next.js एप्लिकेशनों में React Server Components का उपयोग करके CVE-2025-55182 और CVE-2025-66478 का पता लगाने के लिए एक कमांड-लाइन टूल। भेद्यता और पता लगाने की पद्धति के तकनीकी विवरण के लिए, हमारा ब्लॉग पोस्ट देखें:...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

server

Hashtopolis Hashtopolis è uno strumento client-server multi-piattaforma per la distribuzione di attività hashcat su più computer. Gli obiettivi principali dello sviluppo di Hashtopolis sono la portabilità, la robustezza, il supporto multi-utente e la gestione di più gruppi. Per segnalare un bug,...

interactsh

Um servidor de coleta de interações OOB e biblioteca cliente...

ghidra-mcp

Ghidra MCP Server...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...