Initial Access Intelligence
The "Initial Access Intelligence" module is a vital tool for cybersecurity, designed to scan GitHub repositories for the latest exploit and proof-of-concept codes for new vulnerabilities. It provides users with crucial updates on potential security threats, enabling proactive defense measures. This module helps close the gap between vulnerability discovery and patching, significantly enhancing system security.
-
June 26, 2026, 2:44 p.m.
GitHub profile
Updated: 1 month, 2 weeks ago0 stars 0 fork 0 watcherBorn at : June 26, 2026, 2:44 p.m. This repo has been linked 3 different CVEs too. -
July 15, 2026, 1:19 p.m.
ARCHON runs a squad of LLM-powered specialist agents against a web target, independently verifies every finding, and validates each one live onto your Findings board as it goes.
Shell JavaScript Python CSS HTML
Updated: 3 weeks, 4 days ago8 stars 1 fork 1 watcherBorn at : June 26, 2026, 2:20 p.m. This repo has been linked 1 different CVEs too. -
June 26, 2026, 2:02 p.m.
Bot que responde "ok" automaticamente quando um alvo específico posta imagem num grupo do WhatsApp. Latência mínima (HFT-style) via Baileys.
JavaScript Shell
Updated: 1 month, 2 weeks ago0 stars 0 fork 0 watcherBorn at : June 26, 2026, 1:56 p.m. This repo has been linked 0 different CVEs too. -
June 26, 2026, 3:33 p.m.
Reconnaissance-stage IP camera / DVR / NVR discovery with default credential audit and CVE hardening reports. Python 3, stdlib only.
cybersecurity cybersecurity-tools network-security reconnaissance ipcameras
Python Shell
Updated: 1 month, 2 weeks ago0 stars 0 fork 0 watcherBorn at : June 26, 2026, 1:28 p.m. This repo has been linked 6 different CVEs too. -
June 26, 2026, 12:59 p.m.
Plane’s V2 asset subsystem trusted workspace slugs and asset UUIDs without enforcing the right membership checks, which let one authenticated user read, copy, delete, and overwrite assets in other workspaces.
Updated: 1 month, 2 weeks ago0 stars 0 fork 0 watcherBorn at : June 26, 2026, 12:57 p.m. This repo has been linked 1 different CVEs too. -
June 26, 2026, 12:56 p.m.
Penpot's remote image import let an authenticated file editor turn a normal media convenience feature into backend-origin SSRF because attacker-controlled URLs crossed into a redirect-following server fetch path without destination filtering.
Updated: 1 month, 2 weeks ago0 stars 0 fork 0 watcherBorn at : June 26, 2026, 12:55 p.m. This repo has been linked 0 different CVEs too. -
June 26, 2026, 12:50 p.m.
A local package installation helper trusted caller-supplied package names too much. In yeoman-environment, missing generators could be installed without user confirmation, turning attacker-controlled project metadata into a package-install and code-execution path.
Updated: 1 month, 2 weeks ago0 stars 0 fork 0 watcherBorn at : June 26, 2026, 12:47 p.m. This repo has been linked 1 different CVEs too. -
June 30, 2026, 7:07 a.m.
None
Dockerfile Python Shell CSS JavaScript HTML
Updated: 1 month, 1 week ago0 stars 0 fork 0 watcherBorn at : June 26, 2026, 12:46 p.m. This repo has been linked 1 different CVEs too. -
June 26, 2026, 12:46 p.m.
The SSRF filter checked hostname text, but the actual destination was decided later by DNS. That gap let attacker-controlled Webhook URLs reach loopback, metadata, and private network targets.
Updated: 1 month, 2 weeks ago0 stars 0 fork 0 watcherBorn at : June 26, 2026, 12:45 p.m. This repo has been linked 1 different CVEs too. -
June 26, 2026, 12:44 p.m.
A low-privileged Docmost user could supply a victim attachmentId to the generic upload endpoint and overwrite another page's stored attachment inside the same workspace.
Updated: 1 month, 2 weeks ago0 stars 0 fork 0 watcherBorn at : June 26, 2026, 12:43 p.m. This repo has been linked 1 different CVEs too.
