wBlock

wBlock The end of Safari ad-blocking B.S. A free, open-source ad blocker for Safari on Mac, iPhone, iPad, and Apple Vision Pro. Safari gives ad blockers very little room. Each content blocker gets 150,000 rules and can't touch a page's JavaScript. wBlock ships five of them 750,000 rules plus a...

authkeysync

AuthKeySync Automatically synchronize SSH public keys from remote URLs to your servers 📖 Full Documentation The Problem Managing SSH access across multiple servers is painful: Team members join or leave, and you need to update authorizedkeys on every server Developers rotate their SSH keys, and n...

DCSYNCMonitor

DCSYNCMonitor Description This tool is an application/service that can be deployed on Domain controllers to alert on Domain Controller Syncronization attempts. When an attempt is detected, the tool will write an event to the Windows Event Log. These events can be correlated in a SIEM. In addition...

Osint-Sync

Osint Sync - OSINT Browser Extension A powerful browser extension for Open Source Intelligence OSINT research. Search usernames, emails, and phone numbers across 20+ platforms with integrated access to premium OSINT tools like GHunt, IntelX, Epieos, and OSINT Industries. Features Username Search...

CVE-2025-12674

CVE-2025-12674 KiotViet Sync = 1.8.5 - Unauthenticated Arbitrary File Upload 🐚 KiotViet Sync = 1.8.5 - Unauthenticated Arbitrary File Upload 📝 Description The KiotViet Sync plugin for WordPress versions up to and including 1.8.5 is vulnerable to arbitrary file uploads, due to missing file type...

bramble

Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...

RedGridLink

Red Grid Link Red Grid Link is retired Retired September 27, 2026. v1.7.0 is the final release. Link has been removed from sale on the App Store and unpublished on Google Play. New subscriptions and lifetime purchases are no longer offered. Existing installations: Retirement does not erase local...

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass My version - Win10 x64 CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass...

ret-sync

ret-sync ret-sync は Reverse-Engineering Tools SYNChronization（逆解析ツールの同期）の略です。これは、デバッグセッション（WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg）と逆アセンブラ（IDA/Ghidra/Binary Ninja）を同期するためのプラグイン群です。基本的な考え方は単純です：静的解析と動的解析の両方の長所を活かすことです。 デバッガと動的解析は、以下を提供します： ライブの動的コンテキスト（レジスタ、メモリなど）によるローカルビュー...

Post Sync Plugin <= 1.1 - Cross-Site Scripting

Post Sync WordPress plugin = 1.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a maliciou...

FineCMS <5.0.9 - Open Redirect

FineCMS 5.0.9 contains an open redirect vulnerability via the url parameter in a sync action. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2017-11586 info: name: FineCMS 5.0.9 - Open...

app

Standard Notes Standard Notesは、デジタリストとプロフェッショナルのためのエンドツーエンド暗号化ノート作成アプリです。ノート、ファイル、ライフワークをすべて1つの安全な場所に保存できます。 Standard Notesが選ばれる理由 エンドツーエンドで暗号化された同期。あなただけがノートを読めます。 無制限のデバイスで、高速・無料・暗号化されたクロスプラットフォーム同期。 公開されたソースコードにより、わずかな簡単な手順で自分専用のサーバーをセルフホストできます。 長寿命性と持続可能性を重視しています。詳細はこちら。 プライベートノートアカウントの作成 1...

Gitea-template-sync-Path-Traversal-Privilege-Escalation-CVE-2026-38526-

Nexus — ローカル権限昇格 PoC 偽造 Git オブジェクトを介した Gitea テンプレート同期のパストラバーサル → root HackTheBox マシン Nexus 向けの概念実証（PoC）権限昇格エクスプロイト。 root 所有の systemd サービスが Gitea の テンプレート リポジトリをディスクへ同期する際に、 エントリ名をサニタイズしていないため、認証済みの低権限ユーザーがディレクトリトラバーサルを 通じて root として任意のファイルを書き込める — ここでは /root/.ssh/authorizedkeys に SSH 鍵を植え付けるために使用す...

CVE-2026-105292

The software Chaterm before version 0.12.1 is vulnerable to a login cross-site request forgery (CSRF) . The root cause is a lack of OAuth state validation when processing chaterm:// callbacks. A remote attacker can trigger a crafted callback from a web page to inject attacker-controlled userInfo....

EUVD-2026-92156

Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a crafted callback with attacker-controlled userInfo from a web page, signing th...

cloudquery

클라우드 운영, 혼란 없는 그 자체 CloudQuery는 플랫폼 팀을 위해 구축된 클라우드 자산 인벤토리입니다. 클라우드 인프라 메타데이터를 데이터 웨어하우스에 동기화하여 인사이트와 자동화를 지원합니다. AWS, Azure, GCP 및 Wiz, Finout, GitHub 등 70개 이상의 클라우드 및 SaaS 소스 전반에서 데이터를 통합하고 컨텍스트를 제공합니다. 설치 brew install cloudquery/tap/cloudquery Linux 및 Windows용 설치 가이드와 CloudQuery로 첫 번째 동기화를 완료하...

SharpPrivesc

SharpPrivesc Cの練習と、Privesc（権限昇格）の攻撃面をまとめる試みです。まだ初心者レベルです。Privescチェックなどを行います。 Spectreopsのコマンドライン解析クラスが好みだったので、他の.NETパッケージ（command line parserなど）ではなく、それらを利用することにしました。 To-Do: メニュー Privescチェックモジュールの追加。 完了 ネストされたグループ 引用符なしサービスパス: DCsync:...

CVE-2025-32579

⚠️ CVE-2025-32579 - Critical RCE via Sync Posts Plugin WordPress 📦 Affects: Sync Posts 🧨 CVSS Score: 9.9 CRITICAL 📁 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 🧠 Vulnerability Overview The Sync Posts WordPress plugin by SoftClever Limited is vulnerable to an Unrestricted File Upload...

CVE-2017-14980_syncbreeze_10.0.28_bof

Exploit - CVE-2017-14980 - Sync Breeze Enterprise v10.0.28 This repository contains a proof-of-concept buffer overflow exploit BOF for Sync Breeze Enterprise version 10.0.28, targeting the vulnerability identified as CVE-2017-14980. Description The vulnerability exists due to improper input...

CVE-2025-68621

CVE-2025-68621 — Trilium Notes Timing Attack on /api/login/sync Severity: HIGH CVSS 7.4 Affected Software: TriliumNext/Trilium 0.101.0 Vulnerability Type: CWE-208 – Observable Timing Discrepancy Fixed In: Trilium 0.101.0 PR 8129 Published: 2026-02-06 | Reserved: 2025-12-19 Table of Contents 1. My...