CANToolz

H1 PROJECT IS MOVED HERE: https://github.com/CANToolz/CANToolz More details: https://asintsov.blogspot.de/2017/08/next-page-in-cantoolz-life.html...

CVE-2026-99187

A flaw was found in the Linux kernel. During Central Processing Unit CPU hotplug operations, the Performance Monitoring Unit PMU context migration prematurely stops processing event groups after removing a leader, leaving active events running on the departing processor. A local user running...

coreruleset

Branch| Status ---|--- main| 🛡️ OWASP CRS The OWASP CRS is a set of generic attack detection rules for use with OWASP ModSecurity, OWASP Coraza, or other compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a...

IMDShift

IMDShift AWS workloads that rely on the metadata endpoint are vulnerable to Server-Side Request Forgery SSRF attacks. IMDShift automates the migration process of all workloads to IMDSv2 with extensive capabilities, which implements enhanced security measures to protect against these attacks...

vimana-framework

This project is now hosted here: https://github.com/s4dhulabs/vimana-framework...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Proof of Concept PoC Description This repository contains a Proof of Concept PoC exploit for CVE-2023-6972. The vulnerability allows for Unauthenticated Arbitrary File Deletion AFD in Wordpress Backup Migration Plugin Note: A comprehensive technical breakdown, full case study, and...

util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...

deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

CVE-2023-6553-RCE-Exploit

🔥 CVE-2023-6553 — WordPress Backup Migration RCE Unauthenticated Remote Code Execution via PHP Filter Chain Proof of Concept exploit for CVE-2023-6553 — a critical unauthenticated RCE vulnerability in the WordPress "Backup Migration" plugin versions ≤ 1.3.7. 📋 Vulnerability Overview Property|...

r2kit

r2kit The code previously found in this repository has been properly re-designed and packaged. As such, this repository is no longer maintained. You can check the "old" branch to see the last state; however, due to changes in the r2pipe API, most of the code in the "old" branch is not functional...

staekka

Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...

raider

DEPRECATED Repository Raider has become an OWASP project, so the development will move to their Github account...

pqaudit

pqaudit Scan codebases for quantum-vulnerable cryptography. Get a clear picture of what needs to migrate before Q-Day. pqaudit detects usage of RSA, ECDSA, Ed25519, ECDH, DH, and other algorithms broken by Shor's algorithm. It also identifies already-migrated PQC usage ML-KEM, ML-DSA, SLH-DSA so...

CVE-2019-9053

Fixed it bcz of https://tryhackme.com/room/easyctf : enjoy Critical Issues Fixed 1. Python 2 to Python 3 Compatibility Old: print "string" New: print"string" Changed all print statements to print functions Updated string formatting to use f-strings 2. Deprecated optparse Library Old: import...

pqc-cost-of-delay

Cost of Delay for Post-Quantum Migration Live explorer · Preprint arXiv:2610.09029 · reference implementation, proofs, case studies and statistics for a research paper. Classical hacking risk and harvest-now-decrypt-later HNDL quantum risk, expressed in one unit — US dollars of loss per year of...

zeek-quic

Google QUIC analyzer/detector for Zeek This analyzer can parse and detect the Google implementation of QUIC called GQUIC here for simplicity, using the wire format described at: https://www.chromium.org/quic. The version of GQUIC used by Chrome at the time of writing this analyzer was Q039 with...

WordPress All-in-One WP Migration <=7.62 - Cross-Site Scripting

WordPress All-in-One WP Migration plugin 7.62 and prior contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials a...

WordPress Backup Migration <= 1.3.6 - Path Traversal

WordPress Backup Migration plugin versions up to 1.3.6 contain a path traversal and file validation issue in handledownloading function, letting unauthenticated attackers download backup files containing sensitive information. id: CVE-2023-6266 info: name: WordPress Backup Migration = 1.3.6 - Pat...

All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path. This makes it possible for unauthenticated attackers to create or append a log file in arbitrary locations outside the intended storage...