Security Tools - CyTools

Live feeds

Latest CISA KEV

cisa.gov · 1 hour ago

Microsoft Office Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability CVE-2026-124194 Active Openwave Messaging Limited Webtop Media Transcoder Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability CVE-2026-111793 Active Cisco BroadWorks Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability CVE-2026-20320 Active Barracuda Networks Multiple Products Barracuda Networks Multiple Products OS Command Injection Vulnerability CVE-2026-111560 Active Barracuda Networks Barracuda Email Security Gateway (ESG) Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-116606 Active

Synced 12 Nov 2026 All 1,779 →

Highest CVSS this week

nvd · 4 hours ago

A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the f… Not in KEV — opens NVD CVE-2026-125086 10.0 A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC… Not in KEV — opens NVD CVE-2026-124580 10.0 OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vuln… Not in KEV — opens NVD CVE-2026-123551 10.0 A flaw was found in Quay where the robot account listing function constr… Not in KEV — opens NVD CVE-2026-110697 9.9 Incorrect authorization in Microsoft Office SharePoint allows an authori… Not in KEV — opens NVD CVE-2026-120002 9.9

CVSS v3.1 · not all are exploited NVD →

Latest articles

Tools

Hash Generator & Cracker Online Offline

#Install Note Clone the repository: git clone https://github.com/0xR0/hediye.git #Then go inside: cd hediye/ #use examples: python3 hediye.py -k Key /…

Published January 10, 2019

Android

PHANTOM EVASION 2.0.1- An Antivirus Evasion Tool

Phantom-Evasion is an interactive antivirus evasion tool written in python capable to generate (almost) FUD executable even with the most common 32 bi…

Published January 2, 2019

Bug Finder

XSShell – A XSS Reverse Shell Framework

XSShell is a cross-site-scripting reverse shell... Okay, well maybe it's not a true reverse shell, but it will allow you to interact in real time with…

Published November 28, 2018

GitHub

Zstandard – Fast real-time compression algorithm

Zstandard, or zstd as short version, is a fast lossless compression algorithm, targeting real-time compression scenarios at zlib-level and better comp…

Published November 26, 2018

Network

CloudBunny : Capture Real IP of Server behind WAF

CloudBunny is a tool to capture the origin server that uses a WAF as a proxy or protection. This tool we used three search engines to search domain in…

Published November 17, 2018

Exploits

FakeImageExploiter – Use a Fake Image to Exploit Target

This module takes one existing image.jpg and one payload.ps1 (input by user) and builds a new payload (agent.jpg.exe) that if executed it will trigger…

Published November 14, 2018

Forensic Tool

DFIRTrack: (Digital Forensics and Incident Response Tracking application

DFIRTrack (Digital Forensics and Incident Response Tracking application) is an open source web application mainly based on Djangousing a PostgreSQL da…

Published November 13, 2018

Android

DROID-HUNTER – Android Pentesting Tool

Android application vulnerability analysis and Android pentest toolA. Support> App info check> Baksmaling android app> Decompile android app&…

Published September 7, 2018

Java

HackBar (Burpsuite Plugin)

RequirementsBurpsuiteJavaInstall Plugin Download Jar https://github.com/d3vilbug/HackBar/releases and add in burpsuite Tested on Burpsuite 1.7.3…

Published September 6, 2018

Tools

Step: A tool to Make Work easier for zero trust technologies

Step is a zero trust swiss army knife. It’s an easy-to-use and hard-to-misuse utility for building, operating, and automating systems that use zero tr…

Published August 8, 2018

Trackers

Update tracker

CISA Known Exploited Vulnerabilities

1,779 vulnerabilities confirmed exploited in the wild. 114 added in the last 90 days, of which 101 are past their federal remediation deadline.

Synced 12 Nov 2026, 12:25