ghidra

Ghidra in Docker Build Dalla directory principale della tua release di Ghidra, esegui il comando seguente. root@kitploit: ./docker/build-docker-image.sh Questo creerà l'immagine docker di ghidra con un tag corrispondente alla versione di release di Ghidra. La variabile d'ambiente MODE Il containe...

idasql

IDASQL Geben Sie jedem KI-Agenten die Fähigkeit, kompilierte Binärdateien zu verstehen. IDASQL ist eine SQL-Schnittstelle für IDA-Pro-Datenbanken, erstellt von Elias Bachaalany. Es stellt mehr als 30 virtuelle Tabellen für Funktionen, Querverweise, Zeichenketten, Typen, Imports, Disassembly und...

appsandbox

App Sandbox App Sandbox ist eine Virtual-Machine-App für Windows und macOS mit Fokus auf Leistung und Benutzerfreundlichkeit. Windows-Funktionen: Funktioniert unter Windows 11 Home oder Pro, ohne Hyper-V Unterstützung für Windows 11- oder Ubuntu-26.04-LTS-VMs Zero-Touch-Installation Kopieren und...

burp-automation

BurpOMation Durchführung automatisierter Scans mit Burp Suite Pro & Vmware Burp Rest API und Robot Framework mittels Python3. Blog Besuche den Blog für eine detaillierte Erklärung der einzelnen Schritte. Erklärungs- & Installations-Blog Was es tut Ein-Klick-Ausführung mittels Bash installiert all...

katana

Un framework di crawling e spidering di nuova generazione...

scrying

NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...

CVE-2026-76072

The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...

EUVD-2026-65059

The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...

CVE-2026-76072 Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode

The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...

CVE-2026-76072

Continue CLI through 1.5.47 uses an incomplete denylist in evaluateTerminalCommandSecurity.ts as its sole barrier against destructive shell commands in headless and auto modes. The dangerous-path check covers only /, ~, /usr, /etc, /bin, and /sbin, leaving paths like /home, /root, /var, /opt, and...

mole

Mole Mole è un plugin per Binary Ninja progettato per identificare percorsi di esecuzione interessanti nei binari. Esegue backward slicing sulle variabili usando il Medium Level Intermediate Language MLIL di Binary Ninja in forma Static Single Assignment SSA, costituendo la base per un'analisi...

PT-2026-66202

Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Headless mode in Google Chrome prior to version 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Headless mode in Google Chrome before version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

CVE-2026-12027

The following flaw was identified in the Chromium browser: Insufficient policy enforcement Headless. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517517155...

Chromium: CVE-2026-10017 Out of bounds read in Headless

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a buffer overflow vulnerability. This vulnerability stemmed from out-of-bounds read operations in Headless mode, which could allow remote attackers with compromised rendering...

Astra Linux – Vulnerability in Firefox and Thunderbird

The nsWindow::PickerOpenvoid method was vulnerable to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

Google has addressed a maximum severity security flaw in Gemini CLI -- the "@google/gemini-cli" npm package and the "google-github-actions/run-gemini-cli" GitHub Actions workflow -- that could have allowed attackers to execute arbitrary commands on host systems. "The vulnerability allowed an...

Command Injection

Overview @google/gemini-cli is a Gemini CLI Affected versions of this package are vulnerable to Command Injection via the processing of untrusted workspace folders in headless mode and the handling of tool allowlisting under --yolo mode. An attacker can execute arbitrary code by submitting...