CVE-2024-38063-scanner

Panoramica Questo progetto è uno script Python progettato per identificare e sfruttare sistemi Windows vulnerabili utilizzando Shodan per la ricognizione e Scapy per creare e inviare pacchetti IPv6 malevoli mirati a CVE-2024-38063. Lo strumento automatizza il processo di ricerca di host...

o3_finds_cve-2025-37899

basato su Come ho usato o3 per trovare CVE-2025-37899, una vulnerabilità zero-day remota nell'implementazione SMB del kernel Linux vulnerabilità target vulnerabilità ollama CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34...

Stalker

Was ist Stalker Ein sehr einfaches und wahrscheinlich schlecht geschriebenes OSINT-Tool, mit dem Sie schnell mehrere Websites nach einem einzelnen Benutzernamen durchsuchen können. Es soll Zeit sparen und ich wollte es einfach halten, daher ist alles in einer einzigen, unordentlichen .py-Datei. I...

CVE-2026-72699

The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration . The register() method in classes/Login.php throws a distinct exception (EMAIL_NOT_AVAILABLE) when a submitted email already belongs to an existing account, while allowing registration to pr...

MicroBurst

MicroBurst: Ein PowerShell-Toolkit für Angriffe auf Azure MicroBurst enthält Funktionen und Skripte, die die Erkennung von Azure-Diensten, die Prüfung auf schwache Konfigurationen sowie Post-Exploitation-Aktionen wie das Dumping von Anmeldedaten unterstützen. Es ist für den Einsatz bei...

PT-2026-81896

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...

ChaosKobra

ChaosKobra 🐍 Un altro strumento per l'enumerazione dei sottodomini per i normali, scritto in Python3. 🔧 Tecnologie e Strumenti 📚 Requisiti Python 3.9+ pip3 Installazione Usa il gestore di pacchetti pip per installare i requisiti. Se non è installato, installalo con il seguente comando...

saas_enum

SaaS Enum SaaS Enum è uno strumento da riga di comando per scoprire le piattaforme SaaS che un'azienda potrebbe utilizzare. Lo strumento cerca voci DNS che corrispondono a pattern noti dei provider e opzionalmente esegue controlli web leggeri per conferma. Installazione root@kitploit: pip install...

EUVD-2026-64924

The UMP Stream responder library in lib/midi2/umpstreamresponder.c builds reply packets in a 16-byte struct midiump uint32t data4. The builders makeendpointinfo and makefunctionblockinfo populate only the first two words res.data0 and res.data1 and, before this fix, declared their result as an...

CVE-2026-58314

A flaw was found in Gitea. This vulnerability, known as Server-Side Request Forgery SSRF, allows an attacker to trick the server into making requests to internal network resources. A logged-in user can exploit this by crafting malicious webhooks or repository migration configurations, leading to...

CVE-2026-76840

creationtimestamp| type| source ---|---|--- 2026-08-24 14:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtti7jp5vh2p...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipv6: Annotated data-race in ndiscrouterdiscovery The syzbot found that ndiscrouterdiscovery could read and write in6dev-ramtu without holding a lock 1 This seems fine, as IFLAINET6RAMTU is a best-effort mechanism. Add...

Astra Linux – Vulnerability in wpa

A vulnerability was discovered in the way p2p/p2ppd.c in wpasupplicant processes P2P Wi-Fi Direct provision discovery requests before version 2.10. This could lead to denial of service or other impacts, potentially including the execution of arbitrary code, if an attacker is within range of the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/i915/gt: Handling cleanup of partially initialized engines If we abort the driver initialization during the process of engine discovery, some engines will be fully initialized while others will not. Those incompletely...

Astra Linux – Vulnerability in bluez

In BlueZ before version 5.55, a double-free error was detected in the gatttool disconnectcb routine from the shared/att.c file. A remote attacker could potentially cause a denial of service or code execution during service discovery, due to the redundant disconnect MGMT event...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: A potential reference count leak has been fixed in ndiscrouterdiscovery. This issue occurs on specific paths within the function. After the object rt and neigh are successfully acquired, when lifetime is non-zero but the...

cygor

Cygor Panoramica Generale Cygor è un framework modulare di scoperta degli asset che riunisce scansione, parsing ed enumerazione dei servizi in un unico flusso di lavoro. Sostituisce l'insieme eterogeneo di strumenti separati con un processo automatizzato che gestisce senza soluzione di continuità...

hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

udpx

Fast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Windows. Unlike internet-wide scanners like zgrab2 and zmap, UDPX is...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...