EUVD-2026-64744

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

Check Risk WAF

Check Risk WAF वेब अनुप्रयोगों और बुनियादी ढांचे की सुरक्षा के लिए रूसी एकीकृत क्लाउड WAF समाधान वेब अनुप्रयोग और बुनियादी ढांचे की सुरक्षा के लिए रूसी एकीकृत क्लाउड WAF समाधान साइट · दस्तावेज़ीकरण · रूसी · अंग्रेज़ी रूसी संस्करण Check Risk WAF – यह एक रूसी एकीकृत क्लाउड WAF वेब एप्लिकेशन फायरवॉल...

bugbounty-arsenal-resources

BugBounty Arsenal Recursos Fluxos de trabalho, ferramentas e referências curadas para caçadores de bugs e pesquisadores de segurança web. O que é o BugBounty Arsenal? BugBounty Arsenal é uma plataforma prática de testes web focada em fluxos de reconhecimento recon, descoberta de endpoints e...

ImCurvin

ImCurvin' ImCurvin ist ein Open-Source-Tool für Web-Sicherheitsaudits und Penetrationstests, das entwickelt wurde, um die Erkennung von Fehlkonfigurationen in der Umgebung zu automatisieren, exponierte Konfigurations-Blaupausen zu verfolgen und Backend-Schwachstellen zu untersuchen. Detaillierte...

Open Web Analytics 1.7.3 - Remote Code Execution

Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...

hashview

Hashview v0.8.2 Hashview is a tool for security professionals to help organize and automate the repetitious tasks related to password cracking. It is broken into two compoents, the Hashview Server, and Hashview Agent. The Hashview Server is a web application that manages one or more agents,...

ligolo-iwa

Ligolo-IWA Un agente JavaScript Ligolo-ng che funziona all'interno di browser basati su Chrome/Chromium sfruttando le Applicazioni Web Isolate. Vedi la documentazione Ligolo-IWA per una configurazione rapida: Ligolo-IWA Setup/Guida rapida E non dimenticare di leggere la documentazione di Ligolo-n...

waymore

About - v8.9 The idea behind waymore is to find even more links from the Wayback Machine plus other sources than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on wayback machine and URLScan so that you c...

wappalyzergo

Wappalyzergo A high performance port of the Wappalyzer Technology Detection Library to Go. Inspired by Webanalyze. Uses data from https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer Features Very simple and easy to use, with clean codebase. Normalized regexes +...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

TarantuBench

TarantuBench v1 Ein Benchmark zur Bewertung von KI-Agenten bei Web-Sicherheitsherausforderungen, generiert von der TarantuLabs-Engine. Was ist das? TarantuBench ist eine Sammlung von 100 angreifbaren Webanwendungen, die jeweils eine versteckte Flagge TARANTU... enthalten. Die Aufgabe eines Agente...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics 1.7.3 - Exploit di Remote Code Execution v2 Exploit funzionante per Open Web Analytics 1.7.3 - RCE potenziato con la php reverse shell di pentestmonkey, risolto il problema di non riuscire a trovare l'utente nella cache. L'exploit originale può essere trovato qui...

eyeballer

Eyeballer Dai una rapida occhiata a quegli screenshot. Eyeballer è pensato per test di penetrazione su larga scala in cui devi trovare target "interessanti" da un enorme insieme di host web. Usa pure il tuo strumento preferito per fare screenshot EyeWitness o GoWitness e poi passali attraverso...

dbdtct

dbgdtct Descrizione dbgdtct è uno strumento basato su Python progettato per aiutarti a rilevare se un'applicazione web è distribuita in modalità debug — una configurazione errata critica che può esporre informazioni sensibili e aumentare il rischio di sfruttamento in ambienti di produzione...

lua-resty-waf

Name lua-resty-waf - WAF ad alte prestazioni costruito sullo stack OpenResty Table of Contents Nome Stato Descrizione Requisiti Prestazioni Installazione Sinossi Funzioni pubbliche lua-resty-waf.loadsecrules lua-resty-waf.init Metodi pubblici lua-resty-waf:new lua-resty-waf:setoption...

hacker-profile

Installa le dipendenze: root@kitploit: bundle install npm i Test con server web locale: root@kitploit: $ bundle exec middleman server Compila: root@kitploit: $ gulp build $ bundle exec middleman build...

cloudformation-waf-acl

cloudformation-waf-acl Un template AWS CloudFormation utilizzato per fornire e gestire risorse AWS WAFv2, inclusi un Web ACL, gruppi di regole gestiti, un set di pattern regex personalizzato e un IP set. Componenti Il template fornisce: 1. Un AWS::WAFv2::WebACL. 2. Gruppi di regole di protezione...

webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a type confusion due to improper checks, leading to memory corruption...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...