The vulnerability of the QAFA Firmware for telecommunications equipment lies in its ability to bypass authentication using a user-controlled key. This allows attackers to gain access to the administrative web console.

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

CVE-2026-108740 GoatCounter through 2.7.0 Privilege Escalation via /user/pref Mass Assignment

GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that allows logged-in users to modify protected account fields via form-encoded requests. Attackers with read-only access can POST user.accessall= and user.emailverified=true to...

CVE-2026-108740

GoatCounter versions through 2.7.0 are vulnerable to a mass assignment privilege escalation flaw in the userPrefSave handler. This vulnerability allows authenticated users to modify protected account fields via form-encoded requests to the /user/pref endpoint. Specifically, an attacker with read-...

EUVD-2026-96906

GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that allows logged-in users to modify protected account fields via form-encoded requests. Attackers with read-only access can POST user.accessall= and user.emailverified=true to...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

osueta

/ \ / / | || | | | ' / - ' \ \ \ | /| ./||||//||| || | | | | | | | | | || -/ - '| | || ' \ || | ' / - '/ | | / \ ' \ ///|| ||||,||||| ,||/||| | /| || | | | | | | | ' | | ' / | / \ | / / | / / || ||||||||, | // \|\,|\ |/ What's OSUETA? Osueta it's a simple Python2 script to...

CVE-2026-89305

The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks...

CVE-2026-103694

The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role...

ring3-kit

ring3-kit Nasconde un processo dal Task Manager utilizzando l'hooking NT NtQuerySystemInformation. Un semplice rootkit Ring-3 modalità utente. Come Eseguire l'hook della funzione API NtQuerySystemInformation con la nostra funzione che nasconde un processo dal task manager La funzione hookata vien...

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

wssip

This repository does not have a README...

WPintel

Caratteristiche • Installazione • Utilizzo • Licenza • Scarica Dimostrazione Video Funzionalità Rileva la versione di WordPress Rileva le vulnerabilità della versione Enumera gli utenti Rileva i temi Rileva i plugin Trova la divulgazione del percorso completo Controlla lo stato della registrazion...

CVE-2025-39964

Linux afalg concurrent-write race — sito di monitoraggio dello stato delle patch Sorgente per il tracker dello stato delle patch di CVE-2025-39964 : un sito a pagina singola che registra quali distribuzioni hanno rilasciato una correzione per una race condition nell'API socket crittografica AFALG...

CVE-2024-27956-RCE

CVE-2024-27956-RCE Un PoC per CVE-2024-27956, una SQL Injection nel plugin ValvePress Automatic. Questo PoC sfrutta la vulnerabilità creando un utente nel target e concedendo privilegi di Amministratore. Essere un amministratore in WordPress può portare all'esecuzione di codice remoto. Utilizzo g...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

EDR-Freeze

EDR-Freeze Dies ist ein Tool, das die Software-Sicherheitslücke von WerFaultSecure ausnutzt, um die Prozesse von EDRs und Antimalware anzuhalten, ohne die BYOVD-Angriffsmethode Bring Your Own Vulnerable Driver verwenden zu müssen. EDR-Freeze arbeitet im Benutzermodus, sodass Sie keine zusätzliche...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

multi-juicer

Eseguire CTF e corsi di sicurezza con OWASP Juice Shop è di solito piuttosto complesso, Juice Shop non è progettato per essere usato da più utenti contemporaneamente. Istruire tutti su come avviare Juice Shop sul proprio computer funziona, ma richiede troppo tempo prezioso. MultiJuicer ti permett...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

snmpwn

SNMPwn è un enumeratore di utenti SNMPv3 e uno strumento di attacco. È uno strumento di sicurezza legittimo progettato per essere utilizzato da professionisti della sicurezza e penetration tester contro host su cui hai il permesso di testare. Sfrutta il fatto che i sistemi SNMPv3 rispondono con...