Solr-GRAB

Solr-GRAB 窃取Apache Solr实例的查询，无论是否需要用户名和密码。 免责声明 ：此项目应仅用于授权测试和教育目的。 下载 root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB 使用 你可以通过Censys搜索Apache Solr实例，使用dork "Welcome To Solr" 或 "Apache Solr Admin"。要抓取查询，只需访问HTTP接入点，端口可能是80、443或8080。 将 "http://URLHERE/" 替换为所需的URL，例如...

nuubi

Nuubi Tools Scanner, Recon. Dettagli root@kitploit: Options: -h/--help | Mostra il messaggio di aiuto ed esci Arguments: -b/--banner | Banner grabbing dell'indirizzo IP di destinazione -s/--subnet | Ricerca subnet del target -c/--cms | Rilevamento CMS tramite intestazioni -d/--dns | Ricerca DNS d...

sshkey-grab

sshkey-grab Dieses Skript nutzt einen Bug in ssh-agent aus, der es ermöglicht, den zuletzt zum Agenten hinzugefügten Schlüssel zu extrahieren. Dadurch könnte ein Schlüssel wiederhergestellt werden, der über ssh-add -t, -d oder -D aus ssh-agent entfernt wurde, sofern der ssh-Agent nicht beendet...

vscode-github-token-grab-extension

hello-world README NON INSTALLARE. Questa è un'estensione per testare la pubblicazione su vscode...

CVE-2026-22018-Jenkins-Pipeline-Shared-Library-Code-Execution-via-Grab-

CVE-2026-22018 – Esecuzione di codice nella libreria condivisa della pipeline Jenkins tramite @Grab Codice del programma pipeline Groovy root@kitploit: // Jenkinsfile - loads untrusted shared library @Library'evil-library@master' node evilStep CVE-2026-22018 – Esecuzione remota di codice nella...

CVE-2026-32467

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467

CVE-2026-32467 affects the WordPress "[Aotuman] Grab WeChat Articles" plugin up to version 2.0.1. Authenticated subscribers can trigger an SSRF by causing the server to fetch arbitrary internal/external URLs, enabling internal network probing or external requests. CVSS 6.0 MEDIUM (AV:N/AC:H/PR:L/...

CVE-2026-32467 WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-50292

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ubifs: Fixed an issue where the refcount should be incremented after a page is set as private. The MM structure defines a rule 1 very clearly: once a page is marked with the PGprivate flag, the refcount for that page should be...

Astra Linux – Vulnerability in xorg-server, xwayland

A heap-based buffer overflow vulnerability was discovered in the X.org server’s ProcXIPassiveGrabDevice function. This issue occurs when length values that are swapped in bytes are used in responses, potentially leading to memory leakage and segmentation faults, especially when triggered by a...

Astra Linux – Vulnerability in Vim

“Buffer over-reading” in the grabfilename function in the GitHub repository’s Vim/Vim version prior to 8.2.4956. This vulnerability could cause the software to crash, lead to memory modifications, and may allow for remote execution...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fs/namespace: The reference leak in grabrequestedmntns has been fixed. lookupmntns already takes a reference to mntns. grabrequestedmntns does not need to take an additional reference...

Malicious Package

Overview chai-grab is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-720 Malicious code in chai-grab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59ae1d48ae982c1945929febb9d9c184264443d2d93c3f187a42813efbeae89 The package chai-grab was found to contain malicious code. Source: ghsa-malware da21a86e003e8f1a127a9431ea7b49004f0f142dc8f619b04adc74000f145cae Any...

Malicious code in chai-grab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59ae1d48ae982c1945929febb9d9c184264443d2d93c3f187a42813efbeae89 The package chai-grab was found to contain malicious code. Source: ghsa-malware da21a86e003e8f1a127a9431ea7b49004f0f142dc8f619b04adc74000f145cae Any...

SUSE CVE-2025-68300

In the Linux kernel, the following vulnerability has been resolved: fs/namespace: fix reference leak in grabrequestedmntns lookupmntns already takes a reference on mntns. grabrequestedmntns doesn't need to take an extra reference...

CVE-2025-52582

CVE-2025-52582 describes an out-of-bounds read vulnerability in the Grassroot DICOM 3.024 package, specifically in the function Overlay::GrabOverlayFromPixelData . A specially crafted DICOM file can cause an information leak. The available connected documents identify the affected component and t...

CVE-2025-68300

In the Linux kernel, the following vulnerability has been resolved: fs/namespace: fix reference leak in grabrequestedmntns lookupmntns already takes a reference on mntns. grabrequestedmntns doesn't need to take an extra reference...