beef

=============================================================================== Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

macsurf

The modern web, on a 25-year-old Mac. A native browser for the Carbon era, Mac OS 8.6 through Mac OS X 10.6: real CSS, modern JavaScript, and HTTPS on the Mac itself. No proxy, no second machine. MacSurf 2.0.5 on a Power Mac G3 iMac, renderinghackaday.com at full desktop width over native HTTPS...

Mythic

Mythic A cross-platform, post-exploit, red teaming framework built with GoLang, docker, docker-compose, and a web browser UI. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout red teaming. Check out a series of YouTube videos...

sandcat

Sandcat Browser Sandcat is a lightweight multi-tabbed web browser that combines the speed and power of Chromium and Lua. Sandcat comes with built-in live headers, an extensible user interface and command line console, resource viewer, and many other features that are useful for web developers and...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

CVE-2012-1723

Web browser drive-by that exploits CVE-2012-1723 for remote code execution. A walk-through and technical details can be found at https://ethaniel.me/2017/02/09/practice-the-past-cve-2012-1723/...

iOS-remote

iOS-remote iOS-remote connects to iOS devices via USB for displaying and controlling in web browser. It does NOT require jailbreaking. Because of displaying in web browser, iOS-remote supports Linux, macOS, Windows. iOS Version Support The support of this project depends on the version of...

CVE-2026-118571

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.3, from 3.0.0 to 3.0.3...

CVE-2026-118550

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

CVE-2026-114548

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2...

CVE-2026-114546

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2...

CVE-2026-114542

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth OAuth2 & OpenID Connect versions: from 6.1.0 to 6.1.3...

CVE-2026-114542

The Drupal Simple OAuth (OAuth2) & OpenID Connect module (versions 6.1.0 to 6.1.3 ) is vulnerable to an access bypass due to a Use of Web Browser Cache Containing Sensitive Information (CWE-525). The module incorrectly caches token permissions, allowing them to be reused for other user tokens wit...

EUVD-2026-113530

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth OAuth2 & OpenID Connect versions: from 6.1.0 to 6.1.3...

EUVD-2026-113527

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2...

CVE-2026-114546

The Media Alias Display module for Drupal is vulnerable to information disclosure (CWE-525) in versions 0.0.0 to 2.1.2 and 3.0.0 to 3.0.2 . The root cause is that certain files may be served with a Cache-Control: public HTTP header when they should be uncacheable. This allows unauthorized users t...

EUVD-2026-113525

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2...

CVE-2026-114548

The ImageAPI Optimize WebP module for Drupal (versions 0.0.0 to 2.1.2 ) contains an information disclosure vulnerability due to improperly configured access control levels. The module overrides the Drupal core image style download controller and serves WebP derivatives with the HTTP header Cache-...

EUVD-2026-113502

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

CVE-2026-118550

The Drupal AI module, specifically the AI Search submodule , is vulnerable to an access bypass due to how it interacts with the Search API cache. While the AI Search backend checks user permissions for each search result, it fails to account for these permissions when the Search API caches view r...