lightweight_static_analysis

Análisis estático ligero Este repositorio contiene el código del PoC de una charla de ShellCon 2019, «Crea el tuyo propio: Cómo escribir herramientas de análisis estático personalizadas y ligeras» diapositivas. En pocas palabras, este repositorio demuestra algunos ejemplos concretos de cómo puede...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg is a Java RMI vulnerability scanner and can be used to identify and verify common security vulnerabilities on Java RMI endpoints...

entropy

担心你的庞大代码库中会有秘密泄露？Entropy 来帮你找到它们！ Entropy Entropy 是一款 CLI 工具，可以扫描你的代码库中高熵的行 ，这些行往往就是秘密。 安装 从源码使用 Go（推荐） root@kitploit: go install github.com/EwenQuim/entropy@latest entropy 更多选项 entropy -h entropy -top 20 -ext go,py,js entropy -top 5 -ignore-ext min.js,pdf,png,jpg,jpeg,zip,mp4,gif my-folder...

intercept

!zreadhttps://img.shields.io/badge/AskZread-.svg?style=plastic&color=00b0aa&labelColor=000000&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQuOTYxNTYgMS42MDAxSDIuMjQxNTZD...

preflight

Preflight.sh Preflight.sh 是一个命令行工具，用于扫描你的代码库，检查上线就绪状态。它能在你部署到生产环境之前，识别缺失的配置、集成问题、安全隐患、SEO 元数据缺口以及其他常见错误。 别在生产环境丢人现眼。直接运行命令即可。 安装 Homebrew macOS/Linux root@kitploit: brew install preflightsh/preflight/preflight npm root@kitploit: npm install -g @preflightsh/preflight Go root@kitploit: go install...

core

OPNsense GUI y gestión del sistema El proyecto OPNsense invita a los desarrolladores a comenzar a contribuir al código base. Para tus propios propósitos o – mejor aún – para unirte a nosotros en la creación del mejor cortafuegos de código abierto disponible. El proceso de compilación ha sido...

CVE-2025-46822

CVE-2025-46822 未经验证的任意文件读取（通过绝对路径） 描述： 尽管 Path.resolve 方法被用来防止路径遍历，但我发现使用绝对路径成功读取了内部文件。该端点也未经过身份验证，这意味着任何人都可以读取整个组织的文件，从配置文件 application-dev.properties 中设置的存储根目录 files.store.root = /file-store/ 开始的文件系统。这允许未经授权访问敏感的内部文件。 详细信息： storageService.loadAsResource 方法使用了...

moltis

Moltis — 一个用 Rust 编写的安全持久化个人代理服务器 一个二进制文件 — 沙箱化、安全、属于你。 安装 • 对比 • 架构 • 安全 • 功能 • 工作原理 • 贡献 Moltis 最近登上了 Hacker News 首页。如果遇到任何不便之处，请提交 issue。我正专注于让 Moltis 变得卓越。 安全设计 — 你的密钥永远不会离开你的机器。每条命令都在沙箱容器中运行，绝不会在你的主机上执行。 你的硬件 — 可在 Mac Mini、Raspberry Pi 或你拥有的任何服务器上运行。一个 Rust 二进制文件，无需 Node.js、无需 npm、无需运行时。 功能齐...

preflight v0.22.0

Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevents deadlock by changing j1939sockslock to rwlock. The following 3 locks may race against each other, causing a deadlock situation in the Syzbot bug report: - j1939sockslock - activesessionlistlock -...

preflight v0.20.1

Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...

openjdk-orb: unauthed class loading via IIOP in EAP

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

CVE-2026-15560 Openjdk-orb: unauthed class loading via iiop in eap

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

PT-2026-70091

Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform affected versions not specified Description When the software runs with the -secmgr flag, the JDKBridge component of openjdk-orb processes attacker-supplied CDR Common Data Representation codebase URLs...

PYSEC-2026-1556 llama-index has Insecure Temporary File

The llamaindex library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, dat...

Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes

Description Symfony\Component\HtmlSanitizer\Visitor\AttributeSanitizer\UrlAttributeSanitizer::getSupportedAttributes enumerates the attribute names whose values are scrubbed through UrlSanitizer::sanitize scheme and host allow-lists, javascript: rejection, BiDi check, etc.. The list is 'src',...

CodeQL 2.25.6

Discover vulnerabilities across a codebase with CodeQL, an industry-leading semantic code analysis engine. CodeQL lets you query code as though it were data. Write a query to find all variants of a vulnerability, eradicating it forever. Then share your query to help others do the same...

CVE-2025-70099

A NULL pointer dereference in the ext4direngetnamelen function in include/ext4dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a specially crafted EXT4 filesystem image with malformed directory entries. During directory iteration, the code may fail to validate the...

PT-2026-45548

Name of the Vulnerable Software and Affected Versions lwext4 version 1.0.0 Description A NULL pointer dereference occurs in the ext4 dir en get name len function within the include/ext4 dir.h file. This issue allows an attacker to trigger a denial of service by providing a specially crafted EXT4...

CodeQL 2.25.5

Discover vulnerabilities across a codebase with CodeQL, an industry-leading semantic code analysis engine. CodeQL lets you query code as though it were data. Write a query to find all variants of a vulnerability, eradicating it forever. Then share your query to help others do the same...