Home Tools Page 448

Tools

The latest hacking and hacker tools. Open source offensive and defensive security tools. Browse interactive maps of offensive security tools used by malicious actors and cybercriminals. Check out some live threat maps and malware intelligence databases.

This will be a curated list of mostly open source hacking tools. These can range from Red Teaming offensive security tools to fuzzers and debuggers for malware analysis. We are always looking for new state of the art tools that can be used for security professionals. Please feel free to send us a tool via email or one of our social media accounts.

High Infinity Technology HiKam S6 1.3.26 Spoofing / Broken Authentication

0
Authored by Gerhard Hechenberger, S. Robertz | Site sec-consult.com High Infinity Technology HiKam S6 versions 1.3.26 and below suffer from broken authentication, enumeration, message protocol downgrade, insufficient use of cryptography,...

Magento 2.4.6 XSLT Server Side Injection / Command Execution

0
Authored by tmrswrr Magento version 2.4.6 suffers from an XSLT server side injection vulnerability that allows for remote command execution. Change Mirror Download Exploit Title: Magento ver. 2.4.6 - XSLT Server Side...

Legends Of IdleOn Random Number Generation Manipulation

0
Authored by Soatok Dreamseeker | Site gist.github.com Legends of IdleOn suffers from use of an insecure random number generator that can be replaced by a malicious user.

Foxit PDF Editor (iOS) 11.3.1 Arbitrary File Upload

0
Authored by Saud Alenazi Foxit PDF Editor (iOS) version 11.3.1 suffers from an arbitrary file upload vulnerability. Change Mirror Download # Exploit Title: Foxit PDF Editor (iOS) - Arbitrary File Upload (Unauthenticated)#...

Git LFS Clone Command Execution

0
Authored by Shelby Pace, Matheus Tavares, Johannes Schindelin | Site metasploit.com Git clients that support delay-capable clean / smudge filters and symbolic links on case-insensitive file systems are vulnerable to...

Internet Radio auna IR-160 SE UIProto DoS / XSS / Missing Authentication

0
Authored by naphthalin Internet Radio auna IR-160 SE using the UIProto firmware suffers from missing authentication, cross site scripting, and denial of service vulnerabilities. advisories | CVE-2019-13473, CVE-2019-13474 Change Mirror Download The internet...

Freefloat FTP Server 1.0 Buffer Overflow

0
Authored by Waqas Ahmed Faroouqi Freefloat FTP Server version 1.0 suffers from a remote buffer overflow vulnerability. Change Mirror Download #Exploit title: Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow#Date: 08/22/2023#Exploit...

ebankIT 6 Cross Site Scripting

Authored by Jake Murphy ebankIT versions prior to 7 suffer from a cross site scripting vulnerability. advisories | CVE-2023-30454 Change Mirror Download CVE-2023-30454An issue was discovered in ebankIT before version 7.Document Object Model...

TinyWebGallery 2.5 Cross Site Scripting

Authored by Mirabbas Agalarov TinyWebGallery version 2.5 suffers from a persistent cross site scripting vulnerability. Change Mirror Download #Exploit Title: TinyWebGallery v2.5 - Stored Cross-Site Scripting (XSS)#Application: TinyWebGallery#Version: v2.5#Bugs: Stored Xss#Technology:...

Cisco HyperFlex HX Data Platform File Upload / Remote Code Execution

Authored by wvu, Mikhail Klyuchnikov, jheysel-r7, Nikita Abramov | Site metasploit.com This Metasploit module exploits an unauthenticated file upload vulnerability in Cisco HyperFlex HX Data Platform's /upload endpoint to upload...
Error decoding the Instagram API json