347 matches found
OpenShell
OpenShell OpenShell es un servidor ligero y de código abierto para la gestión de shells inversas escrito en Go. Permite a los usuarios establecer canales de shell inversa e interactuar con ellos a través de una interfaz gráfica de usuario GUI basada en web sencilla. Si encuentras errores o tienes...
dns-rebinding-tool
Ispirato da @tavisio Questo progetto vuole essere un Toolkit All-in-One per testare ulteriori attacchi di DNS rebinding e il mio approccio per comprendere questo tipo di attacchi. Consiste in un server web e un server DNS pseudo che risponde solo a query A. L'indice principale del server web...
aparoid
Aparoid Aparoid è un framework progettato per l'analisi di applicazioni Android. Offre un set automatizzato di strumenti per scoprire vulnerabilità e altri rischi nelle applicazioni mobili. È costruito utilizzando il framework Flask e offre un'interfaccia web GUI per caricare file APK ed esplorar...
mquery
mquery: Query Yara incredibilmente veloci per analisti malware Hai mai avuto problemi a cercare campioni di malware? Mquery è un'interfaccia web intuitiva per analisti per esplorare il tuo deposito digitale. Può essere usato per cercare tra terabyte di malware in un batter d'occhio: Sotto il cofa...
crackerjack
!CAUTION Dieses Repository ist nicht mehr gewartet, besuchen Sie https://github.com/sadreck/crackerjack für die neueste Version. CrackerJack Web-Oberfläche für Hashcat von Context Information Security Inhaltsverzeichnis Einführung Architektur Funktionen Einschränkungen Installation Fehlerbehebung...
AgentCyTE
CORE TopoGen Genera topologie di rete CORE riproducibili da file XML di scenario utilizzando una ricca GUI Web o un'interfaccia a riga di comando. Indice dei contenuti Punti salienti Schermate Avvio rapido Prerequisiti Installa le dipendenze Avvia la Web UI Esegui la CLI Flusso di lavoro...
CVE-2026-8173
The web GUI of Murrelektronik Xelity switches is affected by an information disclosure vulnerability. When an authenticated administrator uses the 'Copy learned MAC Addresses' function, MAC addresses from the device's MAC address table are logged. Due to improper generation of error messages , an...
EUVD-2026-64744
The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...
CVE-2026-15371
Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and forms a URL which can be clicked in the GUI.The code does not limit the schemes allowed in this URL , allowing an attacker to specify a JavaScript scheme exposing the user to XSS...
CVE-2026-15371
Velociraptor's web GUI URL column type accepts arbitrary schemes (e.g., javascript:), enabling stored XSS when a victim clicks a crafted link. Root cause is lack of scheme allow-listing. CVSS 8.1 (HIGH) requires high privileges and user click. Exploitation in the wild is not reported. Advisory: h...
CVE-2026-15371 Velociraptor Stored XSS in URL column types
Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and forms a URL which can be clicked in the GUI.The code does not limit the schemes allowed in this URL , allowing an attacker to specify a JavaScript scheme exposing the user to XSS...
EUVD-2026-60571
Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and forms a URL which can be clicked in the GUI.The code does not limit the schemes allowed in this URL , allowing an attacker to specify a JavaScript scheme exposing the user to XSS...
CVE-2026-15371 Velociraptor Stored XSS in URL column types
Velociraptor's web GUI allows specifying a custom type for columns in tables. The URL type takes the cell value and forms a URL which can be clicked in the GUI.The code does not limit the schemes allowed in this URL , allowing an attacker to specify a JavaScript scheme exposing the user to XSS...
CVE-2026-24788
RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product...
PT-2026-5604
RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed by a user who can log in to the product...
CVE-2020-12814
A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI...
CVE-2024-45161
A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution...
EUVD-2024-55042
A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution...