writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

React2Shell-CVE-2025-55182

HackIndex.IO - React2Shell - CVE-2025-55182 + CVE-2025-66478 Um ambiente sandbox do HackIndex.io para a vulnerabilidade React2Shell. Isso iniciará uma aplicação web na porta 3000 e um servidor SSH na porta 2222. Iniciar o ambiente root@kitploit: docker compose up --build --force-recreate Admin we...

challenge-cve-2024-3552

challenge-cve-2024-3552 esegui il comando per avviare la challenge: docker-compose up poi accedi a: http://localhost:8080 la directory web del plugin attivo è libera :D E avvia l'exploit...

proteus

Proteus Proteus - Die axiom-Datenbank und -API https://github.com/pry0cc/axiom. Ursprünglich geschrieben für Zusammenbau einer ASM-Plattform mit ProjectDiscovery-Tools. Einrichtung Zuerst das Repository klonen root@kitploit: git clone https://github.com/pry0cc/proteus /.proteus cd /.proteus Als...

EUVD-2026-63905

Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, including the chat completion and websocket paths, and nothing binds the value to the caller. A client can therefore name...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

reternal-quickstart

RE:TERNAL Nota: Ainda em desenvolvimento, use apenas para testes e não exponha interfaces! O compose atual ainda não funciona, tente apenas se souber o que está fazendo RE:TERNAL é um serviço centralizado de orquestração de purple team para gerenciar frameworks C2 de terceiros. Agentes são...

GO-2025-3527 vulnerabilities

Vulnerabilities for packages: docker-compose, kubescape, docker-compose-fips...

GO-2025-3699 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-fips, docker-compose, neuvector, docker-compose-fips...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: conftest, trivy, buildah-fips, kubescape, skaffold-fips, podman-fips, docker-compose, kubescape-server-fips, osv-scanner, kaniko-fips, docker-cli-buildx-fips, kaniko, kubescape-server, docker-cli-buildx, buildah, trivy-operator, guac, scorecard, zot, cloudbeat-fips,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: k9s-fips, kyverno-notation-aws-fips, ratify-fips, rancher-security-scan, boring-registry-fips, beats, gitlab-cng-fips, neuvector-sigstore-interface-fips, gitlab-cng, kyverno, pluto-fips, beats-fips, zitadel, istio-fips, bank-vaults, grafana-fips, jitsucom-bulker,...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubescape, volume-modifier-for-k8s, kubevela, prometheus-adapter-fips, temporal-fips, temporal-server-fips, docker-compose, kubernetes, aws-ebs-csi-driver, metrics-server-fips, prometheus-adapter, kube-oidc-proxy, rancher-webhook-fips...

GO-2025-3699 vulnerabilities

Vulnerabilities for packages: docker-compose, neuvector-scanner...

GO-2025-3527 vulnerabilities

Vulnerabilities for packages: docker-compose, kubescape...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: docker-compose, podman, kubescape, trivy, docker-cli-buildx, guac, conftest, scorecard, kaniko, trivy-operator, zot, skaffold, buildah, osv-scanner...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: docker-compose, podman, kubescape, trivy, docker-cli-buildx, guac, conftest, scorecard, kaniko, trivy-operator, zot, skaffold, buildah, osv-scanner...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: docker-compose, k3d, policy-controller, cri-tools, buf, grype, helm-push, docker, syft, wolfictl, kaniko, harbor-scanner-trivy, dagger, melange, neuvector-scanner...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: docker-compose, spire-server, aws-otel-collector, syft, wolfictl, buildah, tw, opentelemetry-collector, apko, k9s, docker-cli-buildx, buildkitd, opentelemetry-collector-contrib, zot, dagger, melange, trivy, cadvisor, splunk-otel-collector, trufflehog, falcoctl,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: docker-compose, spire-server, crossplane, syft, wolfictl, tkn, up, buildkitd, zot, dagger, melange, trivy, cadvisor, ko, buf, kaniko, ctop, kubescape, aactl, grype, conftest, kargo, cilium-cli...

CVE-2026-72865

Dokploy prior to 0.29.13 suffers an OS command injection via an unvalidated composePath used by the compose.update/deploy flow. An authenticated user with compose write and deploy permissions can craft a path that is interpolated into docker commands (docker compose -f, docker stack deploy -c) an...