S2-Reaper

S2-Reaper Questo progetto viene utilizzato per raccogliere URL vulnerabili interessati da Struts2 S2-045 dai risultati di ricerca di Google. Utilizzo root@kitploit: python reaper.py Informazioni Il file reaper.py eseguirà un crawler di ricerca Google con parole chiave definite in crawler.conf per...

magento2-session-reaper-patch

Patch Magento 2 per Session Reaper per CVE-2025-54236 Patch per CVE-2025-54236 noto anche come Session Reaper che consente il takeover dell'account cliente e l'esecuzione remota di codice RCE in determinate condizioni. Questa patch è in realtà un'estensione Magento 2 e universalmente compatibile...

firmware

🦈 Bruce Bruce è un firmware ESP32 versatile, ricco di strumenti di sicurezza offensiva, progettato per rendere le operazioni Red Team rapide e portabili. Supporta inoltre i prodotti M5Stack, LILYGO , RockBase IoT ed Elecrow, e funziona alla grande con Cardputer, Stick, M5Core, T-Deck e T-Embed. ⚡...

gpg_reaper

GPG Reaper TL;DR: Ottenere/Rubare/Ripristinare Chiavi Private GPG dalla cache/memoria di gpg-agent Questa POC dimostra un metodo per ottenere chiavi private GPG dalla memoria di gpg-agent su Windows. Normalmente ciò dovrebbe essere possibile solo entro un intervallo di 10 minuti valore di...

dnsReaper

DNS Reaper DNS Reaper è un altro strumento per il subdomain takeover, ma con un'enfasi su precisione, velocità e il numero di firme nel nostro arsenale! Possiamo scansionare circa 50 sottodomini al secondo, testando ciascuno con oltre 50 firme di takeover. Ciò significa che la maggior parte delle...

gpg_reaper

GPG Reaper TL;DR: Obtain/Steal/Restore GPG Private Keys from gpg-agent cache/memory This POC demonstrates method for obtaining GPG private keys from gpg-agent memory under Windows. Normally this should be possible only within 10 minutes time frame --default-cache-ttl value. Unfortunately...

CLEANSTART-2026-IW13101 Security fixes in cassandra-reaper-fips 3.7.1-r4

Package cassandra-reaper-fips version 3.7.1-r4 fixes 42 vulnerabilities: CVE-2022-1471, CVE-2022-38752, CVE-2022-41854, CVE-2025-52999, ghsa-72hv-8253-57qq...

CLEANSTART-2026-YG95344 Security fixes in cassandra-reaper-fips 3.8.0-r7

Package cassandra-reaper-fips version 3.8.0-r7 fixes 4 vulnerabilities: ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-44431, CVE-2026-44432...

CVE-2026-59901 vulnerabilities

Vulnerabilities for packages: infinispan, logstash, opensearch, apicurio-registry, cassandra-reaper, apache-activemq-artemis, wavefront-proxy, keycloak, celeborn, kserve-modelmesh, apache-pulsar, zookeeper, cloudwatch-exporter, flyway, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi,...

GHSA-558V-64GR-WGG4 vulnerabilities

Vulnerabilities for packages: infinispan, logstash, opensearch, apicurio-registry, cassandra-reaper, apache-activemq-artemis, wavefront-proxy, keycloak, celeborn, kserve-modelmesh, apache-pulsar, zookeeper, cloudwatch-exporter, flyway, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi,...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: kafbat-ui, management-api-for-apache-cassandra-4.0, localstack, sonar-scanner-cli, airbyte-server, akhq, sonarqube, cassandra-reaper, s3proxy-fips, zookeeper, knative-kafka-broker-fips, nacos-docker, airbyte-server-fips, nacos, cassandra-fips, trino,...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: kafbat-ui, management-api-for-apache-cassandra-4.0, localstack, sonar-scanner-cli, airbyte-server, akhq, sonarqube, cassandra-reaper, s3proxy-fips, zookeeper, knative-kafka-broker-fips, nacos-docker, airbyte-server-fips, nacos, cassandra-fips, trino,...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: cassandra-reaper, zookeeper, management-api-for-apache-cassandra-5.0, trino, thingsboard, keycloak-config-cli, sonar-scanner-cli, cassandra, sonarqube, apache-nifi, kserve-modelmesh, nextflow, akhq, apache-nifi-registry...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, zookeeper, management-api-for-apache-cassandra-5.0, trino, thingsboard, keycloak-config-cli, sonar-scanner-cli, cassandra, sonarqube, apache-nifi, kserve-modelmesh, nextflow, akhq, apache-nifi-registry...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: cgroup: Defer the CSS kill operation on rmdir until after the cgroup is emptied. A series of commits back to v7.0 revised rmdir to comply with the controller invariant, which states that the -cssoffline method of a subsystem...

Reaper macOS Infostealer Abuses Script Editor to Steal Crypto and Passwords

Threat actors are deploying an updated SHub Stealer variant named Reaper that exploits the native macOS Script Editor to bypass OS-level protections and compromise cryptocurrency assets...

New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords

The newly discovered Reaper malware bypasses Apple's macOS Tahoe 26.4 security updates to steal passwords, crypto assets, and install a permanent backdoor...

CLEANSTART-2026-GH89210 Security fixes for CVE-2015-0886, CVE-2020-8908, CVE-2022-1471, CVE-2022-24823, CVE-2022-38752, CVE-2022-41854, CVE-2023-2976, CVE-2023-34462, CVE-2024-12798, CVE-2024-12801, CVE-2024-13009, CVE-2024-47535, CVE-2024-6763, CVE-2024-8184, CVE-2024-9823, CVE-2025-11143, CVE-2025-24970, CVE-2025-25193, CVE-2025-48734, CVE-2025-48924, CVE-2025-52999, CVE-2025-58057, CVE-2026-1225, CVE-2026-23901, CVE-2026-44431, CVE-2026-44432, ghsa-25qh-j22f-pwp8, ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4g8c-wm8x-jfhw, ghsa-5mg8-w23w-74h3, ghsa-6mjq-h674-j845, ghsa-6v67-2wr5-gvf4, ghsa-72hv-8253-57qq, ghsa-7g45-4rm6-3mm3, ghsa-9h6p-92jq-888x, ghsa-9w3m-gqgf-c4p9, ghsa-c4qc-4q9p-m9q9, ghsa-g8m5-722r-8whq, ghsa-gc5v-m9x4-r6x2, ghsa-h46c-h94j-95f3, ghsa-j26w-f9rq-mr2q, ghsa-j288-q9x7-2f5v, ghsa-jc7h-c423-mpjc, ghsa-mf9v-mfxr-j63j, ghsa-mjmj-j48q-9wg2, ghsa-pr98-23f8-jwxv, ghsa-q4rv-gq96-w7c5, ghsa-qccp-gfcp-xxvc, ghsa-qh8g-58pp-2wxh, ghsa-qqpg-mvqg-649v, ghsa-w37g-rhq8-7m4j, ghsa-wjpw-4j6x-6rwh, ghsa-wxr5-93ph-8wr9, ghsa-xq3w-v528-46rv applied in versions: 3.6.1-r0, 3.6.1-r1, 3.6.1-r2, 3.6.1-r3, 3.6.1-r4

Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EP51501 Security fixes for CVE-2024-6763, CVE-2025-11143, CVE-2026-1225, CVE-2026-22184, CVE-2026-27171, CVE-2026-34757, CVE-2026-44431, CVE-2026-44432, ghsa-25qh-j22f-pwp8, ghsa-72hv-8253-57qq, ghsa-gc5v-m9x4-r6x2, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, ghsa-qh8g-58pp-2wxh, ghsa-qqpg-mvqg-649v applied in versions: 4.0.1-r1, 4.0.1-r2, 4.0.1-r3, 4.0.1-r4

Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LZ07533 Security fixes for CVE-2026-44431, CVE-2026-44432, ghsa-gc5v-m9x4-r6x2, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 3.8.0-r3, 3.8.0-r7

Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details...