19356 matches found
defender
๐ก๏ธ Linux-Defender.sh ๐ Table of Contents ๐ Overview ๐ Features ๐ง Supported Distros ๐ฆ Tools Installed โ๏ธ Installation Building from Source General ๐ฆ Package Installation Debian .deb Package Arch Linux Package ๐งฐ Running the Defender ๐งพ License ๐โโ๏ธ Author โ Support & Contribution ๐ Overview Linux...
Script-For-CVE-2024-20666
CVE-2024-20666 ไฟฎๅค่ๆฌ ่ชๅจๆดๆฐ WinRE ๅๅบ๏ผๆ ้ๅ ่ฐๆดๅ ถๅคงๅฐ๏ผๅนถไฟฎ่กฅ CVE-2024-20666 BitLocker ๆผๆดใ ๅพฎ่ฝฏ้พๆฅ๏ผ่ๆฌๅจๆญค๏ผ ้็จไบ Windows Server 2022๏ผๆๅกๅจๆ ธๅฟๅฎ่ฃ ๏ผ๏ผKB5034439๏ผ้็จไบ Azure Stack HCI ็ๆฌ 22H2 ๅ Windows Server 2022 ็ Windows ๆขๅค็ฏๅขๆดๆฐ๏ผ2024 ๅนด 1 ๆ 9 ๆฅ๏ผ Windows Server 2022๏ผKB5034439๏ผ้็จไบ Azure Stack HCI ็ๆฌ 22H2 ๅ Windows Server 2022 ็...
Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for August 2026.
Summary Security vulnerabilities are addressed with IBM Business Automation Insights 26.0.0-IF002 and 24.0.1-IF009. These vulnerabilities have been also addressed in 24.0.0-IF008 and 25.0.0-IF006 Vulnerability Details CVEID:CVE-2026-11806 DESCRIPTION: IBM WebSphere Application Server - Liberty...
CVE-2026-16675 Rockwell Automation FactoryTalkยฎ Activation Manager - Privilege Escalation
A privilege escalation security issue exists within FactoryTalkยฎ Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows...
CVE-2026-84235
A denial-of-service vulnerability exists in the Rockwell Automation 1756-ENBT CIP Ethernet module. A crafted CIP packet sent to the affected module causes it to crash, rendering the device non-operational until it is restarted. The vulnerability is exploitable over the network with low complexity...
CVE-2026-84235 Rockwell Automation 1756-ENBT Denial of Service Vulnerability
A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a restart to recover...
CVE-2026-19472
CVE-2026-19472 affects Rockwell Automation ArmorStartยฎ LT , specifically its embedded web server . The root cause is the improper handling of a crafted HTTP PUT request , which leads to a denial-of-service condition and loss of web server availability. The vendor-assigned CVSS 4.0 score is 8.7 (H...
CVE-2026-19471 Rockwell Automation ArmorStartยฎ LT Stored Cross-site scripting
Multiple stored cross-site scripting security issues exist within ArmorStartยฎ LT. Stored XSS occurs when user input is not properly sanitized and is stored on the server, allowing an attacker to inject malicious scripts that will be executed when other users access the affected page...
CVE-2026-19471
Rockwell Automation ArmorStartยฎ LT is affected by multiple stored cross-site scripting (XSS) vulnerabilities. The root cause is improper sanitization of user input that is stored on the server, enabling an attacker to inject malicious scripts that execute when other users access the affected page...
OpenPLC_v3
OpenPLC Runtime version 3 ็ฎไป OpenPLC ๆฏไธไธชๅบไบ่ฝฏไปถใๆไบไฝฟ็จ็ๅผๆบๅฏ็ผ็จ้ป่พๆงๅถๅจใๆไปฌ็้็นๆฏไธบ่ชๅจๅไธ็ ็ฉถๆไพไฝๆๆฌ็ๅทฅไธ่งฃๅณๆนๆกใOpenPLC ๅทฒ่ขซๅค็ฏ็ ็ฉถ่ฎบๆ็จไฝๅทฅไธ็ฝ็ปๅฎๅ จ็ ็ฉถ็ๆกๆถ๏ผๅ ไธบๅฎๆฏๅฏไธๆไพๅฎๆดๆบไปฃ็ ็ๆงๅถๅจใOpenPLC ้กน็ฎๅ ๅซไธไธชๅญ้กน็ฎ๏ผ 1. Runtime 2. ็ผ็จ็ผ่พๅจ 3. HMI ๆๅปบๅจ ๅฎ่ฃ root@kitploit: mkdir /opt/PLC cd /opt/PLC git clone https://github.com/tranquac/OpenPLCv3.git cd OpenPLCv3...
Blackash-CVE-2025-68613
๐จ CVE-2025-68613 โ n8n ไธญ็ไธฅ้ RCE ๆผๆด ไธฅ้ๆง๏ผ ๐ด ไธฅ้ ๅฝฑๅ๏ผ ่ฟ็จไปฃ็ ๆง่ก ๅๅฝฑๅๅนณๅฐ๏ผ n8n๏ผๅทฅไฝๆต่ชๅจๅ๏ผ ๐งฉ ๆฆ่ฟฐ CVE-2025-68613 ๆฏ n8n ๏ผไธไธชๅผๆบๅทฅไฝๆต่ชๅจๅๅนณๅฐ๏ผไธญ็ไธไธชไธฅ้ๅฎๅ จๆผๆด ใ ่ฏฅ้ฎ้ขๅ ่ฎธ็ป่ฟ่บซไปฝ้ช่ฏ็ๆปๅป่ ้่ฟๆปฅ็จๅทฅไฝๆต่กจ่พพๅผ็ๆฑๅผๆนๅผ๏ผๅจๆๅกๅจไธๆง่กไปปๆไปฃ็ ใ ๐ฏ ๆผๆด่ฏฆๆ ็ฑปๅ๏ผ ่กจ่พพๅผๆณจๅ ฅ โ ่ฟ็จไปฃ็ ๆง่ก CWE๏ผ CWE-913 โ ๅฏนๅจๆ็ฎก็็ไปฃ็ ่ตๆบ็ๆงๅถไธๅฝ ๆปๅปๅ้๏ผ ็ฝ็ป ๆ้ๆ้๏ผ ไฝ๏ผๅทฒ่ฎค่ฏ็จๆท๏ผ ็จๆทไบคไบ๏ผ ๆ ๅฝฑๅ่ๅด๏ผ ๅทฒๆดๆน ๐ฅ ไธบไปไนๅฑ้ฉ๏ผ ๆถๆ่กจ่พพๅผๅจๆฒกๆ้ๅฝๆฒ็ฎฑ้็ฆป...
CVE-2025-66478-github-patcher
Next.js CVE ่ชๅจไฟฎๅคๅทฅๅ ท ไฝฟ็จ Go ็ผๅ็่ชๅจๅๅทฅๅ ท๏ผ็จไบๆซๆ GitHub ไปๅบ๏ผๆฃๆตๅญๅจๆผๆด็ Next.js ็ๆฌ๏ผCVE-2025-66478๏ผ๏ผๅนถ่ชๅจๅๅปบๅ ๅซ็นๅฎๅฎๅ จ่กฅไธ็ Pull Requestใ ๐ ๅๆๆกไปถ ่ฏท็กฎไฟไฝ ็็ฏๅขไธญๅทฒๅฎ่ฃ ๅนถ้ ็ฝฎไบไปฅไธๅทฅๅ ท๏ผ 1. Go ๏ผ1.20 ๆๆด้ซ็ๆฌ๏ผ 2. Git ๏ผSSH ๅฏ้ฅๅทฒ้ ็ฝฎๅนถๅ ่ฝฝๅฐไปฃ็ไธญ๏ผ 3. GitHub CLI gh ่บซไปฝ้ช่ฏ ๅจ่ฟ่กๆญคๅทฅๅ ทไนๅ๏ผไฝ ๅฟ ้กปๅจ GitHub CLI ไธญๅฎๆ่บซไปฝ้ช่ฏ๏ผ root@kitploit: gh auth login Select "SSH" as git protoc...
Shockwave-OSS
BountyTricks Sharing Bug Bounty tips and tricks with the community including but not limited to automation, one liners and useful thoughts Cyllabus ๐โโ๏ธ Misc Regex Validator Homograph Generator Shodan-Scripts HTTP Headers MIME Types Reverse-Proxies Writeups HTTP Request Smuggling Github local recon...
LabAutomationCVE-2021-43798
LabAutomationCVE-2021-43798 ๆ็ผๅไบไธไธช็จไบๆธ้ๆต่ฏ่ชๅจๅ็่ๆฌ๏ผๅฉ็จ CVE-2021-43798๏ผGrafana ไธญ็่ทฏๅพ้ๅๆผๆด๏ผ็ชๅ็จๆทๆบๅฏ๏ผSSH ๅฏ้ฅ๏ผ๏ผ้ๅๅจ Linux ็ณป็ปไธ๏ผ้่ฟ SUID๏ผๆๅๆ้ใ ๆ่ชๅจๅไบ่ฟไธชๅฎ้ช๏ผไปฅๅไบซๆธ้ๆต่ฏๆนๆณ่ฎบใ...
CVE-2026-53553
Goploy is an open-source automation deployment system affected by a path traversal vulnerability in the /deploy/fileDiff (File Compare) backend API endpoint. The flaw occurs when handling client-supplied file paths, enabling arbitrary file read with potential for remote server compromise , as ind...
awesome-soc โ Updated!
Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...
WordPress Groundhogg โ CRM, Newsletters, and Marketing Automation plugin < 4.5.13 - Unauthenticated Stored XSS vulnerability
Unauthenticated Stored XSS vulnerability discovered by Artus KG in WordPress Plugin Groundhogg versions 4.5.13...
osmedeus v5.1.0
Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...