New release1h 43m ago
brave-browser v1.99.36
brave/brave-browserBrave browser for Android, iOS, Linux, macOS, Windows.
General Purpose Utilities
Featured
Latest Updates
View all updatesbrave/brave-browser
New release5h 44m ago
FreeRDP v3.32.2
freerdp/freerdpFreeRDP is a free remote desktop protocol library and clients
Authentication & AuthorizationEncryption/Decryption ToolsNetwork Security+2
New release9h 44m ago
DOMPurify v3.4.17
cure53/dompurifyDOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…
Defensive ToolsStatic AnalysisCode Analysis+3
New release13h 44m ago
WebGoat v2026.5
webgoat/webgoatDeliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…
Vulnerability AnalysisWeb Application ExploitationWeb Security+4
New release17h 44m ago
mvt v2026.10.12
mvt-project/mvtForensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…
Android SecurityDisk ForensicsIndicator of Compromise (IOC) Management+7
New release21h 45m ago
hermes-agent v0.21.7
nousresearch/hermes-agentThe agent that grows with you
General Purpose UtilitiesScripting & AutomationUtilities & Frameworks+3
New release1 day ago
osv-scanner v2.7.0
google/osv-scannerVulnerability scanner written in Go which uses the data provided by https://osv.dev
Vulnerability ScannersContainer SecurityVulnerability Analysis+4
New release1 day ago
chisel v1.13.0
jpillora/chiselFast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…
General Purpose UtilitiesWeb Proxies & InterceptionIDS/IPS Evasion+8
New release1 day ago
invisible_playwright v0.33.1
feder-cr/invisible_playwrightPlaywright that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection,…
IDS/IPS EvasionImpersonation ToolsWeb Security+3
Updated1 day ago
awesome-osint — Updated!
jivoi/awesome-osint😱 A curated list of amazingly awesome OSINT
OSINT (Open Source Intelligence)ReconnaissanceOSINT for Social Engineering+10
New release1 day ago
ecapture v2.8.0
gojue/ecaptureCapture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
Android SecurityPacket Sniffing & AnalysisDynamic Analysis (Sandboxing)+3
New release1 day ago
ipsw v3.1.736
blacktop/ipswiOS/macOS Research Swiss Army Knife
Encryption/Decryption ToolsiOS SecurityExploitation+9
Latest Exploits
View all exploitsAuthorization Bypass in Next.js Middleware
Evidence Apr 5, 2025
3 Repository evidence · Evidence observed: Sep 25, 2026
- CVSS
- 9.1High
- EPSS
- 99.2%High
- Exploits
- 125
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and...
Evidence Aug 8, 2026
1 Repository evidence · Evidence observed: Oct 13, 2026
- CVSS
- 8.8High
- EPSS
- 11.7%Moderate
- Exploits
- 1
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote...
Evidence Sep 2, 2026
2 Repository evidence · Evidence observed: Sep 26, 2026
- CVSS
- 10.0High
- EPSS
- 8.0%Low
- Exploits
- 4
