ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to XSS security vulnerability in the dashboard UI (CVE-2023-40693)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the XSS security vulnerability Vulnerability Details CVEID:CVE-2023-40693 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, and 6.2.0.0 through 6.2.0.51, 6.2.1.0 through...

arachni-ui-web

Avviso Arachni si sta avviando verso l'obsolescenza, prova il suo successore di nuova generazione Ecsypno SCNR! Arachni - Interfaccia Utente Web...

Covenant

Covenant è un framework di comando e controllo .NET che mira a evidenziare la superficie d'attacco di .NET, rendere più facile l'uso delle tecniche offensive .NET e fungere da piattaforma collaborativa di comando e controllo per i red team. Covenant è un'applicazione ASP.NET Core multipiattaforma...

CVE-2025-492026

安全公告：CVE-2025-492026 摘要 已在 Copilot AI 中发现一个漏洞，每当 Copilot 检索网络查询时，都会在“链接来源”部分意外附带一个超链接。此问题导致用户即使查询主题无关，也会点击指向 https://www.collectingflags.com 的链接，从而可能造成错误信息或非预期跳转。 受影响软件 所有当前的 CoPilot 部署 漏洞详情 CVE-ID： CVE-2025-492026 严重性： 中 攻击向量： 远程 影响： 非预期跳转，可能造成用户混淆 CWE： CWE-451 - 关键信息的 UI 误表示 描述： 每当 Copilot AI...

Adalanche

Adalanche Open Source Attack Graph Visualizer and Explorer Adalanche gives instant results, showing you what permissions users and groups have in an Active Directory. It is useful for visualizing and exploring who can take over accounts, machines or the entire domain, and can be used to find and...

wssip

This repository does not have a README...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Latest SSRF plugin for burp that Automates SSRF Detection in all of the Request If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New Issue Upcoming Features Checklist ✔️ It will soon have a...

cracked

Cracked Scarica e allena le tue abilità di retro-ingegneria 🖳 Cos'è Cracked? Cracked è una TUI per scaricare rapidamente le sfide di crackmes.one restando nel tuo terminale. Come si usa Cracked? Installazione root@kitploit: cargo install cracked Utilizzo root@kitploit: $ cracked --help Usage:...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

Astra Linux - Vulnerability in Chromium

A "use-after-free" vulnerability in Views in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who convinced a user to perform specific UI actions to potentially exploit a heap corruption via a specially crafted HTML page. Chromium security severity: Medium...

ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

CVE-2026-74975

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Downloads component in Firefox for Android...

CVE-2026-70775

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

EUVD-2026-61726

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

EUVD-2026-55633

CTI-Transmute is affected by a stored cross-site scripting XSS vulnerability in the conversion graph used to visualise converted MISP and STIX content. Attacker-controlled values originating from converted CTI data were passed to multiple HTML-parsing sinks in the graph user interface without...

CVE-2026-72590

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the envvars parameter...

EUVD-2026-55216

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the envvars parameter...

EUVD-2026-55217

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the application database...