CVE-2024-32030-Nuclei-Template

Plantilla Nuclei para CVE-2024-32030 Descripción Este repositorio contiene una plantilla de Nuclei para detectar la vulnerabilidad CVE-2024-32030. Esta vulnerabilidad permite la ejecución remota de código a través de la resolución JNDI de la recopilación de métricas JMX. Detalles de la...

suricata_exporter

Exportador Prometheus de Suricata Este es un Exportador Prometheus para Suricata que utiliza dump-counters a través del socket Unix para consultar métricas. Uso root@kitploit: $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket...

essh

root@kitploit: ███████╗███████╗███████╗██╗ ██╗ ██╔════╝██╔════╝██╔════╝██║ ██║ █████╗ ███████╗███████╗███████║ ██╔══╝ ╚════██║╚════██║██╔══██║ ███████╗███████║███████║██║ ██║ ╚══════╝╚══════╝╚══════╝╚═╝ ╚═╝ Enhanced SSH for people with fleets A pure-Rust SSH client with a dense, Netwatch-style TU...

http-desync-guardian

Overview HTTP/1.1 went through a long evolution since 1991 to 2014: HTTP/0.9 – 1991 HTTP/1.0 – 1996 HTTP/1.1 RFC 2068 – 1997 RFC 2616 - 1999 - 2014...

ayaFlow

ayaFlow ayaFlow es un analizador de tráfico de red escrito en Rust + eBPF, construido con Aya. Ejecuta un agente por nodo Linux, adjunta un clasificador TC en ingreso y egreso, y expone datos de tráfico en vivo, historial respaldado por SQLite y métricas de Prometheus. Qué hace Captura tráfico...

CVE-2019-10475

CVE-2019-10475 Quick POC for Jenkins CVE-2019-10475 / SECURITY-1490 reported on 2019-10-23. The issue is within the build-metrics plugin which generates some basic build metrics. It's commonly used with the Jenkins sidebar links plugin. This is a simple & generic reflected XSS vulnerability. The...

AIX360

AI Explainability 360 v0.3.0 ✨ NUEVO: IBM Research tiene un nuevo kit de herramientas In-Context Explainability 360 ICX360 que extiende la explicabilidad a los LLM , específicamente en cuanto a la entrada proporcionada al LLM. ¡Échale un vistazo! 🚀✨ El kit de herramientas AI Explainability 360 es...

AIF360

AI Fairness 360 AIF360 El kit de herramientas AI Fairness 360 es una biblioteca extensible de código abierto que contiene técnicas desarrolladas por la comunidad investigadora para ayudar a detectar y mitigar el sesgo en los modelos de aprendizaje automático a lo largo del ciclo de vida de las...

Milvus - Unauthenticated Metrics API Access

Milvus 2.5.27 and 2.6.10 contains an authentication bypass caused by weak default token and unauthenticated REST API on TCP port 9091, letting attackers perform arbitrary expression evaluation and data manipulation, exploit requires network access to port 9091. id: CVE-2026-26190 info: name: Milv...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

11in1 CMS 1.2.1 - Local File Inclusion (LFI)

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. dot dot in the class parameter to 1 index.php or 2 admin/index.php. id: CVE-2012-0996 info: name: 11in1 CMS 1.2.1 - Local File Inclusion LFI author: daffainfo...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

scorecard

OpenSSF Scorecard...

Apache Solr - Host Environment Variables Leak via Metrics API

Exposure of Sensitive Information to an Unauthorized Actor Vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users can specify which environment variables to hide, however, the default list is designed to wor...

CLEANSTART-2026-SK94653 Security fixes in kube-state-metrics-fips 2.20.0-r1

Package kube-state-metrics-fips version 2.20.0-r1 fixes 9 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-PZ86100 Security fixes in metrics-server 0.9.0-r1

Package metrics-server version 0.9.0-r1 fixes 2 vulnerabilities: CVE-2026-73500, ghsa-gcjh-h69q-9w9g...

bug-bounty-reports-desai-vinayak

🧩 Informes de Bug Bounty — Desai Vinayak 🔒 Informes de bug bounty e investigación de vulnerabilidades por Desai Vinayak. Este repositorio recopila informes de vulnerabilidades pasivos y no destructivos y evidencia de apoyo para divulgación coordinada y seguimiento de remediación. 📁 Contenido 📂...

Malicious code in ux-metrics-client-interaction-subscriber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6066e87b7b0822678d3514839bc7eba18d46ff1d034c12ea169f4c3513df132b package.json line 11 declares a dependency whose key equals the package's own name ux-metrics-client-interaction-subscriber and whose value is a bare...

MAL-2026-15545 Malicious code in ux-metrics-client-interaction-subscriber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6066e87b7b0822678d3514839bc7eba18d46ff1d034c12ea169f4c3513df132b package.json line 11 declares a dependency whose key equals the package's own name ux-metrics-client-interaction-subscriber and whose value is a bare...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...