uBlock v1.74.1b3

uBlock Origin uBO Browser| Install from ...| Status ---|---|--- | Firefox Add-ons| uBO works best on Firefox | E...

CVE-2026-86170

A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

awesome-incident-response

Awesome Incident Response A curated list of tools and resources for security incident response, aimed to help security analysts and DFIR teams. Digital Forensics and Incident Response DFIR teams are groups of people in an organization responsible for managing the response to a security incident,...

CVE-2026-8239

CVE-2026-8239 CVE-2026-8239 is an Insecure Direct Object Reference IDOR vulnerability affecting Concrete CMS 9.5.0 and earlier.The vulnerability exists in the /ccm/frontend/conversations/getrating endpoint, which allows an attacker to determine whether a conversation message exists and retrieve i...

DFIR-O365RC

Tabla de contenidos: 1. Descripción del módulo 2. Instalación y requisitos 1. Usando Docker 2. Instalación manual 3. Gestión de la aplicación DFIR-O365RC 1. Creación de la aplicación 2. Actualización de la aplicación 3. Eliminación de la aplicación 4. Requisitos de permisos y licencias 5. Funcion...

modelscan

ModelScan: Protection Against Model Serialization Attacks Machine Learning ML models are shared publicly over the internet, within teams and across teams. The rise of Foundation Models have resulted in public ML models being increasingly consumed for further training/fine tuning. ML Models are...

nali

Nali Una herramienta de terminal offline para consultar información geográfica de IPs y proveedores de CDN. English Funcionalidades Soporte para múltiples bases de datos Base de datos offline IPv4 de Chunzhen Base de datos offline IPv6 de ZX Base de datos Geoip2 City opcional Base de datos IPIP...

naabu

Características • Instalación • Uso • Ejecutar naabu • Configuración • Integración con NMAP • Exclusión CDN/WAF • Discord Naabu es una herramienta de escaneo de puertos escrita en Go que permite enumerar puertos válidos para hosts de manera rápida y confiable. Es una herramienta muy simple que...

CVE-2026-86170

A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

FirmAE

FirmAE FirmAE is a fully-automated framework that performs emulation and vulnerability analysis. FirmAE significantly increases the emulation success rate From Firmadyne's 16.28% to 79.36% with five arbitration techniques. We tested FirmAE on 1,124 wireless-router and IP-camera firmware images fr...

misp-objects

misp-objects MISP objects used in MISP system and can be used by other information sharing tools. MISP objects are in addition to MISP attributes to allow advanced combinations of attributes. The creation of these objects and their associated attributes are based on real cyber security use-cases...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

CVE-2026-86167

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgponloid leads to os command injection. Remote exploitation of the attack is possible. The exploit is...

CVE-2026-86168

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

privacyguides.org

Your central privacy and security resource to protect yourself online. About Privacy Guides is a socially motivated website that provides information f...

libnfc

root@kitploit: - Free/Libre Near Field Communication NFC library Libnfc historical contributors: Copyright C 2009 Roel Verdult Copyright C 2009-2015 Romuald Conty Copyright C 2010-2012 Romain Tartière Copyright C 2010-2013 Philippe Teuwen Copyright C 2012-2013 Ludovic Rousseau Additional...

CVE-2024-47875-PhpSpreadsheet-XSS-PoC

CVE-2025-22131 • PhpSpreadsheet HTML Writer XSS PoC Over View this is a PoC on the CVE-2025-22131 , a Cross-Site Scripting XSS vulnerability in PhpSpreadsheet versions prior to 2.2.2, 2.1.2, and 1.29.4. The vulnerability resides in the generateNavigation function, which fails to sanitize sheet...

linux-security-audit

Herramienta de Auditoría de Seguridad para Linux Herramienta de Auditoría de Seguridad para Linux basada en el CIS - Red Hat Enterprise Linux 8 Benchmark v3.0.0 Si te resulta útil, por favor la "estrella" 🌟 para apoyar mejoras adicionales. Tabla de Contenidos 1. Características 2. Vista Previa...

CVE-2020-14321

CVE-2020-14321 Course enrolments allowed privilege escalation from teacher role into manager role to RCE Maybe someone needs Python script, therefore, I have written it to exploit. How to use this PoC: root@kitploit: How to use this PoC script Case 1. If you have vaid credentials: python3...

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...