grype

Grype A vulnerability scanner for container images and filesystems...

scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

Ametys CMS Information Disclosure

Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/domain/en.xml and similar pathnames for other languages via the auto-completion plugin, which contain all characters typed by all users, including the content of...

CVE-2026-81026

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before marking the corresponding order completed, allowing unauthenticated users to complete full-price orders and gain access to paid content by...

CVE-2026-18233

CVE-2026-18233 affects the MStore API WordPress plugin before 4.21.1 . The plugin fails to verify that an order targeted by one of its delivery endpoints actually belongs to the requester. This allows any authenticated user—even those with the lowest Subscriber role—to mark arbitrary orders as co...

CVE-2026-18233 MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints belongs to the requester, allowing any authenticated user, including Subscribers, to mark arbitrary orders as completed and paid without any payment being made...

CVE-2026-55066

Vikunja (open-source self-hosted task management) has a cross-tenant IDOR in the kanban move-task endpoint. The task_id field is attacker-controlled via the request body, yet TaskBucket.CanUpdate only authorizes the project/view/bucket from the URL — never the task itself. Because Task.ReadOne pe...

CTT-Kernel-Resonance-io_uring-Temporal-Phase-Transition

Este exploit para CVE-2026-24102 representa o auge da série SimoesCTT. Ao atacar o iouring—a interface assíncrona mais avançada do kernel Linux—você está atacando o próprio conceito de "Lógica Sequencial". No iouring, chamadas de sistema não são executadas; elas fluem. Exploraremos a Janela...

CVE-2026-44656

CVE-2026-44656 - Vim Modeline path विकल्प कमांड इंजेक्शन भेद्यता English|中文 यह रिपॉजिटरी CVE-2026-44656 के लिए एक प्रजनन वातावरण प्रदान करती है। यह भेद्यता Vim के modelines में path विकल्प के भीतर बैकटिक विस्तार अभिव्यक्तियों के प्रबंधन में एक दोष से उत्पन्न होती है। हमलावर :find कमांड की Tab...

cryptr

cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation root@kitploit: git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...

CVE-2026-77694

Eventin (also known as WP Event Solution ) WordPress plugin versions below 4.1.19 contain an unauthenticated order-completion vulnerability . The root cause is improper restriction of which changes a guest checkout token is allowed to authorise on an order. An unauthenticated user can mark their ...

CVE-2026-77694 Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token

The Eventin WordPress plugin before 4.1.19 does not properly restrict which changes a guest checkout token is allowed to authorise on an order, allowing unauthenticated users to mark their own unpaid order as completed and be issued a valid paid ticket with no payment taken...

EUVD-2026-66284

The Eventin WordPress plugin before 4.1.19 does not properly restrict which changes a guest checkout token is allowed to authorise on an order, allowing unauthenticated users to mark their own unpaid order as completed and be issued a valid paid ticket with no payment taken...

WordPress Eventin plugin < 4.1.19 - Unauthenticated Order Completion Without Payment vulnerability

Unauthenticated Order Completion Without Payment vulnerability discovered by Nir Yehoshua in WordPress Plugin WP Event SOlution versions 4.1.19...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098724 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req-iv after cryptoaeadencrypt As soon as cryptoaeadencrypt is called,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098817)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098817 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: split transactions in dio completion to avoid credit exhaustion During ocfs2 dio operation...

Vim < 9.2.0845 Command Injection (CVE-2026-73073)

The version of Vim installed on the remote host is prior to 9.2.0845. It is, therefore, affected by a command injection vulnerability: - StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tag...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra-adma: Fix use-after-free There is a use-after-free bug in the Tegra ADMA driver when audio streams are terminated, especially during XRUN conditions. The issue occurs when the DMA buffer is freed by...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-6.1, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Added handling of TMF in tmrlist. An abort that is responded to by iSCSI itself is added to tmrlist, but it does not go to the target core. A LUNRESET that goes through tmrlist takes a refcounter on the abort...