CVE-2024-2997

CVE-2024-2997 Scanner Panoramica CVE-2024-2997 Scanner è uno scanner di vulnerabilità avanzato progettato per rilevare la vulnerabilità di command injection nelle applicazioni web. Questo strumento aiuta i professionisti della sicurezza a identificare potenziali rischi di sicurezza nelle loro...

Mobile-Drop-Device-SOC-Detection

🛡️ परियोजना फैंटम: मोबाइल "ड्रॉप डिवाइस" SOC डिटेक्शन सिमुलेशन यह परियोजना एक एंड-टू-एंड SOC प्रयोगशाला कार्यशाला का प्रदर्शन करती है जो यह दर्शाती है कि कैसे एक अनधिकृत, रूट-रहित एंड्रॉइड डिवाइस Casper Via S, जिसे आंतरिक नेटवर्क के भीतर "ड्रॉप डिवाइस" के रूप में उपयोग किया जाता है, Wazuh SIEM...

CVE-2025-31324-File-Upload

CVE-2025-31324-Caricamento-File Un endpoint di caricamento file del tutto non autenticato in Visual Composer permette a chiunque di caricare file arbitrari ad esempio, una web-shell JSP sul server. Strumento proof-of-concept per verificare e sfruttare la vulnerabilità di caricamento file non...

goahead-rce-exploit

GoAhead Web Server 2.5 use multi/handler msf6 exploitmulti/handler set payload generic/shellbindtcp msf6 exploitmulti/handler set LPORT=1337 msf6 exploitmulti/handler set RHOST=192.168.1.200 msf6 exploitmulti/handler run Started bind TCP handler against 192.168.1.200:1337...

uaf-2023-28205

CVE-2023-28205: Vulnerabilità Use-After-Free in Apple WebKit Questa vulnerabilità può essere sfruttata tramite contenuti web maliziosamente predisposti, consentendo agli aggressori di eseguire codice arbitrario. Descrizione Il codice attiva una vulnerabilità use-after-free UAF ritardando l'aggiun...

recon-ng

The Recon-ng Framework Recon-ng content now available on Pluralsight! Recon-ng is a full-featured reconnaissance framework designed with the goal of providing a powerful environment to conduct open source web-based reconnaissance quickly and thoroughly. Recon-ng has a look and feel similar to the...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

CVE-2025-55182_Vulnerable-Application

CVE-2025-55182 असुरक्षित प्रयोगशाला आधुनिक वेब फ्रेमवर्क में सुरक्षा कमजोरियों को प्रदर्शित करने के लिए असुरक्षित रिएक्ट सर्वर कम्पोनेंट्स का उपयोग करने वाली शैक्षणिक परीक्षण प्रयोगशाला। ⚠️ महत्वपूर्ण अस्वीकरण यह एप्लिकेशन जानबूझकर असुरक्षित है और इसे केवल नियंत्रित वातावरण में शैक्षणिक उद्देश्यों...

CVE-2019-12744

CVE-2019-12744 Informazioni Titolo Exploit: Esecuzione di Comandi Remoti tramite Caricamento File Non Convalidato in SeedDMS versioni 5.1.11 CVE: CVE-2019-12744 Homepage del Venditore: https://www.seeddms.org/index.php?id=2 Autore Exploit: NobodyAtall Versione testata: Seeddms 5.1.10, 5.0.11...

webshell-analyzer

Web Shell Analyzer Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project...

hacktronian

Pentesing Tools That All Hacker Needs. HACKTRONIAN Menu : Information Gathering Password Attacks Wireless Testing Exploitation Tools Sniffing & Spoofing Web Hacking Private Web Hacking Post Exploitation Install The HACKTRONIAN Information Gathering: Nmap Setoolkit Port Scanning Host To IP wordpre...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

urlbuster

root@kitploit: ██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

loxs-optimized

loxs-optimized Projeto de https://github.com/coffinxp/loxs CSP-Bypass-xss.txt Nota: Ele contorna principalmente o payload de CSP 2024-11-06 Adiciona CSP-Bypass-xss.txt a xss.txt 2024-11-07 Removendo informações que interferem Somente as informações vulneráveis são exibidas 2024-11-11 Resolve o...

EUVD-2026-65608

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of...

CVE-2026-24170

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of...

CVE-2026-24170

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component that allows an attacker on an adjacent network to send specially crafted HTTP requests, leading to improper authentication . A successful exploit may result in code execution and privilege escalation , wit...

CVE-2024-23745

CVE-2024-23745 In Notion Web Clipper 1.0.37, un file .nib è suscettibile all'attacco Dirty NIB. I file NIB possono essere manipolati per eseguire comandi arbitrari. Inoltre, anche se un file NIB viene modificato all'interno di un'applicazione, Gatekeeper può comunque consentire l'esecuzione...