Home Tools Page 372

Tools

The latest hacking and hacker tools. Open source offensive and defensive security tools. Browse interactive maps of offensive security tools used by malicious actors and cybercriminals. Check out some live threat maps and malware intelligence databases.

This will be a curated list of mostly open source hacking tools. These can range from Red Teaming offensive security tools to fuzzers and debuggers for malware analysis. We are always looking for new state of the art tools that can be used for security professionals. Please feel free to send us a tool via email or one of our social media accounts.

SolarWinds Kiwi CatTools 3.11.8 Unquoted Service Path

0
Authored by Mert Das SolarWinds Kiwi CatTools version 3.11.8 suffers from an unquoted service path vulnerability. Change Mirror Download # Exploit Title: SolarWinds Kiwi CatTools 3.11.8 - Unquoted Service Path# Exploit Author:...

TextPattern CMS 4.8.7 Shell Upload

0
Authored by Mert Das TextPattern CMS version 4.8.7 suffers from an authenticated remote shell upload vulnerability. Change Mirror Download # Exploit Title: TextPattern CMS 4.8.7 - Remote Command Execution (RCE) (Authenticated)# Date:...

IFSC Code Finder Project 1.0 SQL Injection

0
Authored by nu11secur1ty IFSC Code Finder Project version 1.0 suffers from a remote SQL injection vulnerability. advisories | CVE-2021-42224 Change Mirror Download Hello, dear friends.KR## (https://phpgurukul.com/ifsc-code-finder-project-using-php/)## (https://phpgurukul.com/author/admin/)!(https://github.com/nu11secur1ty/CVE-mitre/blob/main/CVE-2021-42224/docs/Screenshot%202021-10-14%20104403.png)## Description:- vulnerability: `all or nothing`SQL Injection...

Yellowfin Cross Site Scripting / Insecure Direct Object Reference

0
Authored by Michele Di Bonaventura Yellowfin versions prior to 9.6.1 suffer from persistent cross site scripting and insecure direct object reference vulnerabilities. advisories | CVE-2021-36387, CVE-2021-36388, CVE-2021-36389 Change Mirror Download YELLOWFIN < 9.6.1...

WebKit PointerCaptureController::processPendingPointerCapture Heap Use-After-Free

0
Authored by Google Security Research, Glazvunov WebKit suffers from a heap use-after-free vulnerability in PointerCaptureController::processPendingPointerCapture. advisories | CVE-2021-30846

WebKit EventHandler::keyEvent Heap Use-After-Free

0
Authored by Google Security Research, Glazvunov WebKit suffers from a heap use-after-free vulnerability in EventHandler::keyEvent. advisories | CVE-2021-30848

WebKit DOMWindow::open Heap Use-After-Free

0
Authored by Google Security Research, Glazvunov WebKit suffers from a heap use-after-free vulnerability in DOMWindow::open. advisories | CVE-2021-30849

i-Panel Administration System 2.0 Cross Site Scripting

0
Authored by Forster Chiu i-Panel Administration System version 2.0 suffers from a cross site scripting vulnerability. advisories | CVE-2021-41878 Change Mirror Download # Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting...

Apache HTTP Server 2.4.50 Path Traversal / Code Execution

0
Authored by Lucas Souza Apache HTTP Server version 2.4.50 suffers from path traversal and code execution vulnerabilities. advisories | CVE-2021-42013 Change Mirror Download # Exploit: Apache HTTP Server 2.4.50 - Path Traversal &...

Simple Issue Tracker System 1.0 SQL Injection

0
Authored by Bekir Bugra Turkoglu Simple Issue Tracker System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Change Mirror Download # Exploit Title: Simple Issue Tracker...