subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

sonar

██████ ███ ██████ ██ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███ ██ ██ ██ ██ ██ ██ Know what's running on your machine. Sonar shows everything listening on localhost and puts it in order: every port belongs to a group — normally th...

at-doom-fortigate

At Doom Fortigate ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||. . . . . . . ||...

dc-sonar

DC Sonar Community Repositories The project consists of repositories: dc-sonar-frontend dc-sonar-user-layer dc-sonar-workers-layer ntlm-scrutinizer Disclaimer It's only for education purposes. Avoid using it on the production Active Directory AD domain. Neither contributor incur any responsibilit...

Data-Void Exploits in Web-Searching LLMs

Web-searching Large Language Models LLMs have changed how users seek online information: instead of sifting through ranked lists of links, users read synthesized answers. This shift creates a new LLM vulnerability: a data-void exploit. Disinformers publish their narratives in search spaces where...

sonar v0.9.1

██████ ███ ██████ ██ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███ ██ ██ ██ ██ ██ ██ Know what's running on your machine. Sonar shows everything listening on localhost and puts it in order: every port belongs to a group — normally th...

sonar v0.4.1

██████ ███ ██████ ██ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███ ██ ██ ██ ██ ██ ██ Know what's running on your machine. Sonar shows everything listening on localhost and puts it in order: every port belongs to a group — normally th...

org.jenkins-ci.plugins:sonar-gerrit (428.v5c962d271b_a_5) potentially affected by CVE-2026-84665 via org.jenkins-ci.plugins:sonar (2.13.1)

org.jenkins-ci.plugins:sonar MAVEN version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:sonar and may be impacted: - org.jenkins-ci.plugins:sonar-gerrit 428.v5c962d271ba5 Source cves: CVE-2026-84665 Source advisory:...

Stored XSS vulnerability in sonar

sonar 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. TIP: On Jenkins 2.53...

CVE-2026-70446

Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

Sonar Poller Login - Panel Detect

Sonar Poller login/interface was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Sonar Poller login/interface was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sonar Poller Login - Panel Detect...

galaxy (>=26.0.0, <=26.0.1), great-expectations-cloud (>=20260123.0.0.dev3, <=20260126.1.0.dev0) +2 more potentially affected by CVE-2026-59890 via setuptools (80.10.1)

setuptools PYPI version 80.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - galaxy =26.0.0, =20260123.0.0.dev3, =20260126.1.0.dev0 - netbox-manager 0.20260123.0 - water-column-sonar-processing 26.1.17 Source cves:...

galaxy (>=26.0.0, <=26.0.1), great-expectations-cloud (>=20260123.0.0.dev3, <=20260126.1.0.dev0) +2 more potentially affected by CVE-2026-59890 via setuptools (80.10.1)

setuptools PYPI version 80.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - galaxy =26.0.0, =20260123.0.0.dev3, =20260126.1.0.dev0 - netbox-manager 0.20260123.0 - water-column-sonar-processing 26.1.17 Source cves:...

ch.hortis.sonar:sonar-application (>=1.0-beta, <=1.0.2), ch.hortis.sonar:sonar-commons (>=1.0-beta, <=1.0.2) +24 more potentially affected by CVE-2026-10532 via ch.qos.logback:logback-core (0.9.8)

ch.qos.logback:logback-core MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.hortis.sonar:sonar-application =1.0-beta, =1.0-beta, =1.0-beta, =1.0-beta, =1.0-beta, =0.9.9, =0.9.9,...

ch.rasc:embeddedtc (2.2), com.github.jsimone:webapp-runner (8.0.18.0-m1) +4 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.18)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 2.2 - com.github.jsimone:webapp-runner 8.0.18.0-m1 -...

ch.rasc:embeddedtc (2.2), com.github.jsimone:webapp-runner (8.0.18.0-m1) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.18)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 2.2 - com.github.jsimone:webapp-runner 8.0.18.0-m1 -...

ch.rasc:embeddedtc (2.2), com.github.jsimone:webapp-runner (8.0.18.0-m1) +4 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.18)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 2.2 - com.github.jsimone:webapp-runner 8.0.18.0-m1 -...

com.googlecode.apparat:apparat-maven-plugin (1.0.rc4), org.apache.maven:apache-maven (3.0-beta-1) +33 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (2.0.3)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.googlecode.apparat:apparat-maven-plugin 1.0.rc4 - org.apache.maven:apache-maven 3.0-beta-1 ...

CVE-2019-12752

The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in use on the resident system...

GHSA-25QH-J22F-PWP8 vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, zookeeper, cassandra, dependency-track, akhq, apache-nifi, nextflow, keycloak-config-cli, kserve-modelmesh, trino, thingsboard, management-api-for-apache-cassandra-5.0, apache-nifi-registry, cassandra-reaper...