S2-Reaper

S2-Reaper This project is used to collect vulnerable URLs that affected by Struts2 S2-045 from the Google search results. Usage python reaper.py About The reaper.py will run a google search crawler with keywords definded at crawler.conf to find vulnerable URLs. crawler.conf baseurl : the basic...

dnsReaper

DNS Reaper DNS Reaper is yet another sub-domain takeover tool, but with an emphasis on accuracy, speed and the number of signatures in our arsenal! We can scan around 50 subdomains per second, testing each one with over 50 takeover signatures. This means most organisations can scan their entire D...

gpg_reaper

GPG Reaper TL;DR: Obtain/Steal/Restore GPG Private Keys from gpg-agent cache/memory This POC demonstrates method for obtaining GPG private keys from gpg-agent memory under Windows. Normally this should be possible only within 10 minutes time frame --default-cache-ttl value. Unfortunately...

firmware

🦈 Bruce Bruce is a versatile ESP32 firmware packed with offensive-security tools, built to make Red Team operations fast and portable. It also supports M5Stack, LILYGO , RockBase IoT and Elecrow products, and works great with the Cardputer, Sticks, M5Cores, T-Decks and T-Embeds. ⚡ Get Our Officia...

gpg_reaper

GPG Reaper TL;DR: Obtener/Robar/Restaurar Claves Privadas GPG de la caché/memoria de gpg-agent Este POC demuestra un método para obtener claves privadas GPG de la memoria de gpg-agent en Windows. Normalmente esto solo debería ser posible dentro de un período de 10 minutos valor de...

magento2-template-filter-patch

Magento 2 Template Filter Patch for CVE-2022-24086, CVE-2022-24087 Magento 2 patch for CVE-2022-24086, CVE-2022-24087. Fix the RCE vulnerability and related bugs by performing deep template variable escaping. If you cannot upgrade Magento or cannot apply the official patches, try this one...

kube-reaper

kube-reaper Kubernetes RBAC attack path mapper. It finds what your identity can do, flags dangerous permissions, and chains them into multi-step paths to cluster compromise. Built for red teamers and penetration testers. What It Does kube-reaper scans a Kubernetes cluster from any identity user,...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, ruby3.4-jrjackson, kafka, wavefront-proxy, thingsboard, strimzi-kafka-operator, ruby4.0-jrjackson, akhq, kserve-modelmesh, druid, spark, opensearch, confluent-kafka, zipkin, cassandra, strimzi-kafka-oauth, wildfly, apicurio-registry,...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, ruby3.4-jrjackson, kafka, wavefront-proxy, thingsboard, strimzi-kafka-operator, ruby4.0-jrjackson, akhq, kserve-modelmesh, druid, spark, opensearch, confluent-kafka, zipkin, cassandra, strimzi-kafka-oauth, wildfly, apicurio-registry,...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, ruby3.4-jrjackson, kafka, wavefront-proxy, thingsboard, strimzi-kafka-operator, ruby4.0-jrjackson, akhq, kserve-modelmesh, druid, spark, opensearch, confluent-kafka, zipkin, cassandra, strimzi-kafka-oauth, wildfly, apicurio-registry,...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, ruby3.4-jrjackson, kafka, wavefront-proxy, thingsboard, strimzi-kafka-operator, ruby4.0-jrjackson, akhq, kserve-modelmesh, druid, spark, opensearch, confluent-kafka, zipkin, cassandra, strimzi-kafka-oauth, wildfly, apicurio-registry,...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, ruby3.4-jrjackson, kafka, wavefront-proxy, thingsboard, strimzi-kafka-operator, ruby4.0-jrjackson, akhq, kserve-modelmesh, druid, spark, opensearch, confluent-kafka, zipkin, cassandra, strimzi-kafka-oauth, wildfly, apicurio-registry,...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, ruby3.4-jrjackson, kafka, wavefront-proxy, thingsboard, strimzi-kafka-operator, ruby4.0-jrjackson, akhq, kserve-modelmesh, druid, spark, opensearch, confluent-kafka, zipkin, cassandra, strimzi-kafka-oauth, wildfly, apicurio-registry,...

DEBIAN-CVE-2026-93241

In the Linux kernel, the following vulnerability has been resolved: memcg: bypass the reclaim and oom killer for dying tasks once oomreaper is done At Meta, we are seeing instances where an OOM killed job is stuck in the exit path for several hours. In one particular case, the job was stuck for...

PT-2026-97908

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory control group memcg where dying tasks can become stuck in the exit path for extended periods. This occurs when the oom reaper a kernel mechanism that attemp...

CLEANSTART-2026-FV16777 Security fix for ghsa-wxr5-93ph-8wr9 applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, druid-fips 35.0.0-r1, stargate 1.0.90-r4, stargate 2.0.44-r4, stargate 2.0.44-r6

ghsa-wxr5-93ph-8wr9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KY67158 Security fix for ghsa-g8m5-722r-8whq applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cloudwatch-exporter 0.16.0-r0, stargate 1.0.90-r4

ghsa-g8m5-722r-8whq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KP76579 Security fix for ghsa-w37g-rhq8-7m4j applied in: cassandra-fips 4.0.19-r2, cassandra-fips 4.1.10-r1, cassandra-reaper-fips 3.6.1-r3

ghsa-w37g-rhq8-7m4j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HD46315 Security fix for ghsa-9w3m-gqgf-c4p9 applied in: cassandra-fips 4.0.19-r2, cassandra-fips 4.1.10-r1, cassandra-reaper-fips 3.6.1-r3

ghsa-9w3m-gqgf-c4p9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QU79402 Security fix for ghsa-mjmj-j48q-9wg2 applied in: cassandra-fips 4.0.19-r2, cassandra-fips 4.1.10-r1, cassandra-reaper-fips 3.6.1-r3, s3proxy 3.3.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, stargate 2.0.44-r4

ghsa-mjmj-j48q-9wg2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...