CVE-2026-107908

A heap-based out-of-bounds write in the BoltReadHandler function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt...

aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

aws-key-disabler

AWS Lambda - IAM 액세스 키 비활성화기 AWS 키 비활성화기는 설정된 시간 이후에 AWS IAM 사용자 액세스 키를 비활성화하는 Lambda 함수로, 오래된 액세스 키와 관련된 위험을 줄이기 위한 것입니다. AWS Lambda 아키텍처 최종 사용자를 위한 SysOps 출력 개발자 툴체인 현재 제한 사항 스캔 결과JSON가 포함된 보고서는 단일 정의된 시스템 관리자 계정으로 전송됩니다. 빌드 구성 파일 /grunt/package.json의 reportto 속성을 참조하세요. 키는 비활성화만 되며, 삭제되거나 교체되지...

hashcatch

hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...

LOLBAS

Living Off The Land 바이너리, 스크립트 그리고 이제는 라이브러리도 모든 다양한 파일들은 멋진 프론트엔드를 통해 여기에서 찾을 수 있습니다: https://lolbas-project.github.io @ConsciousHacker와 https://gtfobins.github.io/ 팀 덕분에 이런 예쁜 화면이 가능했습니다. 이 저장소는 멋진 프론트엔드에서 사용되는 YML 파일을 관리하는 곳입니다. 목표 LOLBAS 프로젝트의 목표는 Living Off The Land 기술에 사용될 수 있는 모든 바이너리, 스크립...

CIMCown

CIMCown CVE-2026-20200 Cisco IMC における RCE を伴う引数インジェクション Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H アドバイザリ: NSIDE-SA-2026-003 ブログ記事:...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

ike-scan

ike-scan IKEホスト（IPsec VPNサーバ）の発見とフィンガープリント取得 目次 ビルドとインストール 概要 使い方 実装の詳細 ホスト入力とメモリ要件 レート制限 クッキー生成とリモートホスト識別 IKEパケットの詳細 バックオフフィンガープリント プログラムの出力 例 対応プラットフォーム 参考資料とRFC 連絡先 ビルドとインストール ike-scanは標準のGNU autoconfおよびautomakeツールを使用しているため、インストールは通常の手順となります。 git clone https://github.com/royhills/ike-scan.git...

GodGenesis

God Genesis에 오신 것을 환영합니다 God Genesis는 Red Teamer와 침투 테스터를 돕기 위해 순수 Python3로 코딩된 C2 서버입니다. 현재는 TCP 리버스 셸만 지원하지만 잠깐만요, FUD이며 모든 대상 WINDOWS 머신에서 관리자 셸을 제공할 수 있습니다. 지원하는 명령 목록:- =================================================================================================== BASIC COMMANDS:...

authentik

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...

Aura-State

Aura-State Prove your AI agent is injection-safe, in-spec, and won't act out of bounds — before you ship it. A design-time verifier for LLM agents — not a runtime guardrail. Import your LangGraph / CrewAI / AutoGen / MCP agent and Aura proves five things about the agent you already wrote, then...

M5PORKCHOP

Volume Zero, Issue 3, Phile 1 of 1 M5PORKCHOP README v0.1.8b-PSTH ^^ oo\ \ /\ ||----w | || || yes that's a cow. the pig ate the pig art budget. the horse was unavailable for comment. 67% of skids skip READMEs. 100% of those skids report bugs we documented. the horse thinks this is valid. TABLE OF...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

binbloom

About The purpose of this project is to analyse a raw binary firmware and determine automatically some of its features. This tool is compatible with all architectures as basically, it just does simple statistics on it. Main features: Loading address : binbloom can parse a raw binary firmware and...

vulnerablecode

VulnerableCode VulnerableCode는 웹 UI와 API를 갖춘 소프트웨어 패키지 취약점 데이터베이스입니다. VulnerableCode를 사용하는 이유 VulnerableCode는 웹 UI와 API를 제공하여, 취약점의 영향을 받는 패키지와 취약점을 수정하는 패키지 등 상류 및 하류 공개 소스의 포괄적인 정보를 포함한 알려진 소프트웨어 패키지 취약점 데이터베이스에 접근할 수 있게 해줍니다. 공개 VulnerableCode 데이터베이스 가 있으며, 이 프로젝트는 자체 데이터베이스 인스턴스를 구축하는 도구도...

RLSA-2026:77500 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

RLSA-2026:79113 Important: bind9.16 security, bug fix, and enhancement update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

RLSA-2026:78952 Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...