Google Brotli 1.2.0 Out-Of-Bounds Write

Google Brotli versions 1.0.3 through 1.0.9, 1.1.0, and 1.2.0 contain an out-of-bounds write in the decoder that can be triggered by a crafted compressed stream...

PHP Session Upload Progress Enabled Detection

This template detects PHP targets with session.uploadprogress enabled, a required precondition for CVE-2026-115560. It also checks exposed phpinfo pages for the setting and session serialize handler...

TCPreplay 4.6.2

tcpreplay is a BSD-style licensed tool to replay saved tcpdump files at arbitrary speeds. It provides a variety of features for replaying traffic for both passive sniffer devices as well as inline devices such as routers, firewalls, and intrusion detection systems. Many NIDSs fare poorly when...

OpenSSH 9.7p1 Remote Code Execution

OpenSSH server versions 8.5p1 through 9.7p1 are affected by a regression that may allow unauthenticated remote code execution. This guide provides update and mitigation instructions...

Decepticon 2.1.1

Decepticon is an AI-powered autonomous red team framework designed to automate penetration testing and adversary simulation. It integrates AI agents with security tools to perform reconnaissance, vulnerability discovery, exploitation, and post-exploitation activities. The framework supports...

Nebula AI-Powered Penetration Testing 3.0.35

Nebula is an advanced, AI-powered penetration testing open-source tool that revolutionizes penetration testing by integrating state-of-the-art AI models into your command-line interface. Designed for cybersecurity professionals, ethical hackers, and developers, Nebula automates vulnerability...

Apache Log4j 2.14.1 JndiLookup Class Removal

An Ansible role and Python tool remove the JndiLookup class from affected Log4j archives to mitigate the Log4Shell vulnerability...

Qualcomm Snapdragon Primary Bootloader Memory Corruption

Qualcomm Snapdragon Primary Bootloader contains a write-what-where condition while processing a crafted ELF file. This proof of concept provides read-only Sahara/EDL reconnaissance, including identity, memory, PBL, and fuse reads...

Man-In-The-Middle Proxy 12.3.1

mitmproxy is an open source, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, and WebSocket traffic. It enables users to inspect, capture, modify, and replay HTTP and HTTPS communications for debugging, traffic analysis, and security testing. The package includes mitmproxy, an interactive...

NVDA Remote 2.6.4 / Tele NVDA Remote 2025.3.3 Weak Password Authentication

NVDA Remote version 2.6.4 and Tele NVDA Remote version 2025.3.3 accept weak connection passwords without additional authentication or computer verification, allowing remote system access when an attacker guesses the password...

Node.js 26.12.0 Brotli Decoder Out-Of-Bounds Write

Node.js versions 22.x before 22.23.4, 24.x before 24.22.1, and 26.x before 26.12.1 contain an out-of-bounds write in the bundled Brotli decoder. A proof of concept checker reports whether the local runtime includes the fix...

Xalgorix Autonomous AI Pentesting Agent 4.6.172

Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...

macOS TCC Privacy Preferences Modification

macOS TCC contains a permissions issue that may allow an app to modify Privacy preferences. This research advisory describes controlled observations involving a test app presenting FaceTime's identity; the documented scenario required prior TCC-state modification...

React Server Components 19.2.0 Remote Code Execution Detection

React Server Components versions 19.0.0 through 19.2.0 contain an unauthenticated remote code execution vulnerability. This Suricata rule detects HTTP request bodies containing Node.js childprocess execSync execution indicators...

Hashcat Advanced Password Recovery 8.0.0

Hashcat is an advanced GPU hash cracking utility that includes the World's fastest md5crypt, phpass, mscash2 and WPA / WPA2 cracker. It also has the first and only GPGPU-based rule engine, focuses on highly iterated modern hashes, single dictionary-based attacks, and more. This is the source code...

NGINX 1.30.0 Buffer Overflow Scanner

A Metasploit auxiliary scanner sends a normal HTTP GET request and checks disclosed NGINX versions for potential exposure to a buffer overflow in ngxhttprewritemodule...

PHP 8.5.11 Remote Code Execution Vulnerability Checker

PHP versions before 8.5.12, 8.4.27, 8.3.36, and 8.2.35 contain two vulnerabilities that may allow unauthenticated remote code execution. This tool checks a PHP version string for affected upstream releases and specific Ubuntu backports...

HeyCyan App 1.0.103 FileProvider Access Control

HeyCyan App version 1.0.103 on Android contains an improperly configured FileProvider that exposes filesystem paths through insufficient access control...

HeyCyan App 1.0.103 Cleartext Transmission

HeyCyan App version 1.0.103 for Android contains a network security configuration that permits cleartext transmission of sensitive information...

Node.js 26.12.0 Brotli Decoder Remote Verifier

Node.js versions before 22.23.4, 24.22.1, and 26.12.1 contain an out-of-bounds write in the bundled Brotli decoder. This tool non-destructively verifies exposed HTTP request-body Brotli decoding paths using crafted compressed streams...

PHP Session Upload Progress Exposure Checker

A command-line tool that checks PHP configuration and application code for exposure to the session upload progress vulnerability, including the required serialize handler, runtime iniset, and upload progress conditions...

Oracle Java SE 27.0.1 eMudhra Certificate Detector

A Python tool that audits Java JKS and PKCS12 trust stores and PEM bundles for eMudhra-related certificate indicators associated with CVE-2026-91403...

Node.js 26.5.0 Permission Model Path-Prefix Over-Grant

Node.js 22.x, 24.x, and 26.x versions before 22.23.2, 24.18.1, and 26.5.1 contain a Permission Model path-prefix flaw that can over-grant filesystem allowlist access. This offline checker evaluates supplied Node.js version evidence only...

Citrix NetScaler ADC and Gateway 14.1 Oracle Load-Balancer Checker

Citrix NetScaler ADC and Gateway versions before 14.1-73.37 or 13.1-64.23 contain an Oracle load-balancer memory overflow vulnerability that can lead to unpredictable behavior or denial of service. This offline checker assesses operator-reported build and configuration evidence without contacting...

NetScaler ADC and Gateway 14.1 LSN SIP ALG Memory Overflow

NetScaler ADC and Gateway versions before 14.1-73.32 and 13.1-63.21 contain an LSN SIP ALG memory overflow vulnerability. The supplied offline tool evaluates operator-reported build and configuration evidence...

Nebula AI-Powered Penetration Testing 3.0.34

Nebula is an advanced, AI-powered penetration testing open-source tool that revolutionizes penetration testing by integrating state-of-the-art AI models into your command-line interface. Designed for cybersecurity professionals, ethical hackers, and developers, Nebula automates vulnerability...

Ghidra Before 12.2 Numeric Truncation

Ghidra versions before 12.2 contain a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining that may allow crafted packed streams to inject attributes into decompiler input or crash the decompiler process...

Node.js 26.12.0 Permission Model Wildcard Path Over-Grant

Node.js version 26.x contains a Permission Model filesystem over-grant via wildcard radix lookup. This offline checker compares operator-reported runtime versions with the fixed 26.12.1 release without probing targets...

Node.js Permission Model Trace Log Filesystem Bypass Checker

Node.js versions in the 22.x, 24.x, and 26.x release lines contain a Permission Model trace-log filesystem bypass. This offline checker evaluates supplied version evidence against fixed releases without probing targets...

Node.js 26.5.0 SQLite Cached Iterator Write Replay

Node.js versions 24.x before 24.18.1 and 26.x before 26.5.1 contain a SQLite cached iterator write replay flaw. This tool performs offline version-evidence assessment for affected runtime versions...

Node.js DNS resolveAny Process Abort

Node.js versions 22.x, 24.x, and 26.x contain a flaw where dns.resolveAny can abort the process when a DNS response has more than 256 A records. The supplied offline checker compares reported version evidence against fixed releases...

Decepticon 1.6.0

Decepticon is an AI-powered autonomous red team framework designed to automate penetration testing and adversary simulation. It integrates AI agents with security tools to perform reconnaissance, vulnerability discovery, exploitation, and post-exploitation activities. The framework supports...

Citrix NetScaler ADC and Gateway Memory Overflow Checker

Citrix NetScaler ADC and Gateway versions before the vendor-provided fixed builds contain a memory overflow vulnerability when configured as a Gateway or AAA virtual server. This tool evaluates operator-reported version and configuration evidence offline...

Node.js 26.5.0 zlib Synchronous API Crash

Node.js versions prior to 22.23.2, 24.18.1, and 26.5.1 contain a flaw in synchronous zlib APIs that allows a spoofed TypedArray byteLength to crash the process. The supplied tool checks reported runtime versions offline...

PHP 8.3.30 Remote Code Execution

PHP version 8.3.30 contains out-of-memory handling and stale request-state flaws that can lead to remote code execution. PHP version 8.3.36 fixes the issues...

Portainer 2.40.x Docker Plugin Authorization Bypass Checker

Portainer versions 2.33.0 through 2.33.7, 2.39.0 through 2.39.1, and 2.40.0 through 2.40.x contain a missing authorization issue in Docker plugin proxy endpoints. This checker performs version detection and a non-destructive authorization probe...

NetScaler ADC and Gateway 14.1-73.31 Authentication Bypass

NetScaler ADC and Gateway version 14.1 before 14.1-73.32 and version 13.1 before 13.1-63.21 contain an authentication bypass using an alternate path. This offline tool assesses operator-supplied build and configuration evidence for the issue...

Node.js 26.5.0 HTTP Parser Header Truncation Request Smuggling

Node.js versions before 22.23.2, 24.18.1, and 26.5.1 contain an HTTP parser header-truncation flaw that can enable request smuggling in affected forwarding-proxy configurations. This offline checker evaluates operator-supplied version evidence without probing targets...

Node.js 26.12.0 ZipFile Invalid-Header Content Substitution

Node.js versions before 26.12.1 in the 26.x branch contain a ZipFile invalid-header content substitution flaw that can return attacker-controlled prefix bytes after failed ZIP header validation. This tool evaluates operator-supplied Node.js version evidence offline...

Node.js 26.5.0 HTTPS Agent PFX Client Identity Collision

Node.js versions 22.x, 24.x, and 26.x contain an HTTPS Agent connection reuse flaw that can reuse mutual TLS client identities across requests configured with different PFX client certificates. The supplied tool performs offline comparison of operator-reported versions against fixed releases...

Crow 1.3.3 Uncontrolled Recursion Denial of Service

Crow versions before 1.3.4 contain an uncontrolled recursion vulnerability in crow::json::load that allows remote unauthenticated attackers to crash the server with deeply nested JSON...

Node.js Crypto Entropy Cache Duplication Checker

Node.js versions 22.x, 24.x, and 26.x contain a crypto entropy cache duplication issue in snapshots and single executable applications. This Python tool compares operator-supplied runtime versions against fixed releases...

SonicWall SMA1000 12.5.0-02952 Server-Side Request Forgery Checker

SonicWall SMA1000 versions through 12.4.3-03526 and 12.5.0-02952 contain a server-side request forgery vulnerability. This offline tool evaluates reported build strings against vendor-provided affected and fixed version boundaries...

Node.js 26.12.1 TLS Certificate Hostname Bypass Check

Node.js versions before 22.23.4, 24.22.1, and 26.12.1 contain a TLS certificate hostname validation flaw involving non-canonical IPv4 literals. This offline tool assesses operator-supplied Node.js version evidence against the fixed releases...

Node.js 26.12.0 TLS Hostname Validation Bypass

A Python tool evaluates operator-reported Node.js version evidence for a TLS hostname validation bypass caused by fullwidth IPv4 digits...

Xalgorix Autonomous AI Pentesting Agent 4.6.164

Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...

PHP 8.5.11 Vulnerability Exposure Check

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain vulnerabilities addressed by CVE-2026-109618 and CVE-2026-109619. The supplied Python tool checks exposed PHP version headers and session upload progress behavior, then provides mitigation guidance...

Node.js 26.12.0 DNS Resolution NUL-Name Truncation

Node.js versions before 22.23.4, 24.22.1, and 26.12.1 contain a DNS resolution NUL-name truncation issue. The supplied offline Python tool assesses operator-provided version evidence...

Citrix NetScaler ADC and Gateway 14.1 HTTP Request Smuggling

Citrix NetScaler ADC and Gateway versions before vendor-fixed builds contain an HTTP request smuggling vulnerability. The supplied offline Python checker assesses operator-reported build and configuration evidence without accessing appliances...

Citrix NetScaler ADC and Gateway 14.1-73.36 DTLS Configuration Check

Citrix NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain a DTLS-enabled memory overflow vulnerability that may lead to remote code execution or denial of service. This tool evaluates reported builds and exported DTLS configuration offline...