nuubi

Nuubi 도구 스캐너, 리콘 세부 정보 root@kitploit: 옵션: -h/--help | 도움말 메시지 표시 및 종료 인자: -b/--banner | 대상 IP 주소의 배너 그래빙 -s/--subnet | 대상 서브넷 조회 -c/--cms | 헤더를 통한 CMS 감지 -d/--dns | 대상 도메인의 DNS 조회 -e/--extract | 대상 URLhttps/http에서 링크 추출 -H/--http | 대상 URL의 HTTP 헤더 -n/--nmap | 대상 도메인의 Nmap 스캔 -S/--sub | 대상 도메인의...

vscode-github-token-grab-extension

hello-world README インストールしないでください。これは私がvscode publishingをテストするための拡張機能です。...

sshkey-grab

sshkey-grab 이 스크립트는 ssh-agent의 버그를 이용하여 에이전트에 마지막으로 추가된 키를 가져올 수 있습니다. ssh-agent가 종료되지 않고 이전 키가 제거된 이후 새 키가 추가되지 않은 경우, ssh-add -t, -d, -D를 통해 ssh-agent에서 제거된 키를 복구할 수 있습니다. 이 버그는 보고되었으며 새 버전의 OpenSSH에서 수정될 수 있으므로, 이 도구가 작동하지 않을 수 있습니다. 요구 사항 grabagentmem.sh는 제대로 작동하기 위해 대상 시스템에서 root 액세스와 gdb가...

Solr-GRAB

Solr-GRAB Apache Solr 인스턴스의 쿼리를 사용자 이름과 비밀번호 유무에 관계없이 가져옵니다. 면책 조항 : 이 프로젝트는 승인된 테스트 및 교육 목적으로만 사용되어야 합니다. 다운로드 root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB 사용법 Censys를 통해 "Welcome To Solr" 또는 "Apache Solr Admin"이라는 dork를 사용하여 Apache Solr 인스턴스를 검색할 수 있습니다. 쿼리를 가져오려면 HTTP 액...

CVE-2026-22018-Jenkins-Pipeline-Shared-Library-Code-Execution-via-Grab-

CVE-2026-22018 – Ejecución de código en la biblioteca compartida de Jenkins Pipeline mediante @Grab Código del programa pipeline de Groovy root@kitploit: // Jenkinsfile - loads untrusted shared library @Library'evil-library@master' node evilStep CVE-2026-22018 – Ejecución remota de código en la...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ubifs: A fix was made to increment the reference count of a page once it is set as private. The MM structure defines a rule 1 very clearly: once a page is marked with the PGprivate flag, the reference count of that page should be...

CVE-2026-32467

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467

CVE-2026-32467 affects the WordPress "[Aotuman] Grab WeChat Articles" plugin up to version 2.0.1. Authenticated subscribers can trigger an SSRF by causing the server to fetch arbitrary internal/external URLs, enabling internal network probing or external requests. CVSS 6.0 MEDIUM (AV:N/AC:H/PR:L/...

CVE-2026-32467 WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-50292

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution...

Astra Linux – Vulnerability in Vim

“Buffer over-reading” in the grabfilename function in the GitHub repository’s Vim/Vim version prior to 8.2.4956. This vulnerability could cause the software to crash, lead to memory modifications, and may allow for remote execution...

Astra Linux – Vulnerability in xorg-server, xwayland

A heap-based buffer overflow vulnerability was discovered in the X.org server’s ProcXIPassiveGrabDevice function. This issue occurs when length values that are swapped in bytes are used in responses, potentially leading to memory leakage and segmentation faults, especially when triggered by a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fs/namespace: The reference leak in grabrequestedmntns has been fixed. lookupmntns already takes a reference to mntns. grabrequestedmntns does not need to take an additional reference...

Malicious Package

Overview chai-grab is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-720 Malicious code in chai-grab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59ae1d48ae982c1945929febb9d9c184264443d2d93c3f187a42813efbeae89 The package chai-grab was found to contain malicious code. Source: ghsa-malware da21a86e003e8f1a127a9431ea7b49004f0f142dc8f619b04adc74000f145cae Any...

Malicious code in chai-grab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59ae1d48ae982c1945929febb9d9c184264443d2d93c3f187a42813efbeae89 The package chai-grab was found to contain malicious code. Source: ghsa-malware da21a86e003e8f1a127a9431ea7b49004f0f142dc8f619b04adc74000f145cae Any...

SUSE CVE-2025-68300

In the Linux kernel, the following vulnerability has been resolved: fs/namespace: fix reference leak in grabrequestedmntns lookupmntns already takes a reference on mntns. grabrequestedmntns doesn't need to take an extra reference...

CVE-2025-52582

CVE-2025-52582 describes an out-of-bounds read vulnerability in the Grassroot DICOM 3.024 package, specifically in the function Overlay::GrabOverlayFromPixelData . A specially crafted DICOM file can cause an information leak. The available connected documents identify the affected component and t...

CVE-2025-68300

In the Linux kernel, the following vulnerability has been resolved: fs/namespace: fix reference leak in grabrequestedmntns lookupmntns already takes a reference on mntns. grabrequestedmntns doesn't need to take an extra reference...