Solr-GRAB

Solr-GRAB 窃取Apache Solr实例的查询，无论是否需要用户名和密码。 免责声明 ：此项目应仅用于授权测试和教育目的。 下载 root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB 使用 你可以通过Censys搜索Apache Solr实例，使用dork "Welcome To Solr" 或 "Apache Solr Admin"。要抓取查询，只需访问HTTP接入点，端口可能是80、443或8080。 将 "http://URLHERE/" 替换为所需的URL，例如...

vscode-github-token-grab-extension

hello-world README インストールしないでください。これは私がvscode publishingをテストするための拡張機能です。...

nuubi

Nuubi 工具（扫描器、侦察） 详情 root@kitploit: 选项： -h/--help | 显示帮助信息并退出 参数： -b/--banner | 目标 IP 地址的横幅抓取 -s/--subnet | 目标子网查找 -c/--cms | 通过头部检测 CMS -d/--dns | 目标域名的 DNS 查找 -e/--extract | 从目标 URL（https/http）提取链接 -H/--http | 目标 URL 的 HTTP 头部 -n/--nmap | 目标域名的 Nmap 扫描 -S/--sub | 目标域名的子域名查找 -f/--find | 寻找共享 DNS...

sshkey-grab

sshkey-grab このスクリプトは、ssh-agent のバグを利用して、エージェントに最後に追加された鍵を取得します。これにより、ssh-agent が終了されておらず、以前の鍵が削除された後に新しい鍵が追加されていない場合、ssh-add -t、-d、-D を介して ssh-agent から削除された鍵を復元できる可能性があります。このバグは報告されており、新しいバージョンの OpenSSH で修正される可能性があります。修正されると、このツールは動作しなくなります。 要件 grabagentmem.sh は、ターゲットマシン上で root アクセスと gdb が必要です...

CVE-2026-22018-Jenkins-Pipeline-Shared-Library-Code-Execution-via-Grab-

CVE-2026-22018 – @Grab による Jenkins Pipeline 共有ライブラリのコード実行 プログラムコード（Groovy パイプライン） root@kitploit: // Jenkinsfile - loads untrusted shared library @Library'evil-library@master' node evilStep CVE-2026-22018 – Jenkins Pipeline 共有ライブラリのリモートコード実行 概要 Jenkins...

Malicious Package

Overview @grab-food/order-sdk-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @grab-food/order-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b56bb1d69dc16b6095faea196af99809ad805b400a3c6b5499f896c8d74c2 Package published under a scope impersonating the Grab food-ordering brand with no real functionality index.js exports an empty object. Its sole...

MAL-2026-15681 Malicious code in @grab-food/order-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b56bb1d69dc16b6095faea196af99809ad805b400a3c6b5499f896c8d74c2 Package published under a scope impersonating the Grab food-ordering brand with no real functionality index.js exports an empty object. Its sole...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ubifs: A fix was made to increment the reference count of a page once it is set as private. The MM structure defines a rule 1 very clearly: once a page is marked with the PGprivate flag, the reference count of that page should be...

Astra Linux – Vulnerability in Vim

“Buffer over-reading” in the grabfilename function in the GitHub repository’s Vim/Vim version prior to 8.2.4956. This vulnerability could cause the software to crash, lead to memory modifications, and may allow for remote execution...

Astra Linux – Vulnerability in xorg-server, xwayland

A heap-based buffer overflow vulnerability was discovered in the X.org server’s ProcXIPassiveGrabDevice function. This issue occurs when length values that are swapped in bytes are used in responses, potentially leading to memory leakage and segmentation faults, especially when triggered by a...

CVE-2026-32467

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467

CVE-2026-32467 affects the WordPress "[Aotuman] Grab WeChat Articles" plugin up to version 2.0.1. Authenticated subscribers can trigger an SSRF by causing the server to fetch arbitrary internal/external URLs, enabling internal network probing or external requests. CVSS 6.0 MEDIUM (AV:N/AC:H/PR:L/...

CVE-2026-32467 WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-50292

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fs/namespace: The reference leak in grabrequestedmntns has been fixed. lookupmntns already takes a reference to mntns. grabrequestedmntns does not need to take an additional reference...

Malicious Package

Overview chai-grab is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-720 Malicious code in chai-grab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59ae1d48ae982c1945929febb9d9c184264443d2d93c3f187a42813efbeae89 The package chai-grab was found to contain malicious code. Source: ghsa-malware da21a86e003e8f1a127a9431ea7b49004f0f142dc8f619b04adc74000f145cae Any...

Malicious code in chai-grab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59ae1d48ae982c1945929febb9d9c184264443d2d93c3f187a42813efbeae89 The package chai-grab was found to contain malicious code. Source: ghsa-malware da21a86e003e8f1a127a9431ea7b49004f0f142dc8f619b04adc74000f145cae Any...