ngrep

ngrep 1.49.0 2.7.2026 ngrep GNU grep के समान है, लेकिन यह नेटवर्क लेयर पर लागू होता है। यह एक PCAP-आधारित उपकरण है जो आपको पैकेट के डेटा पेलोड से मिलान करने के लिए एक विस्तारित नियमित या हेक्साडेसिमल अभिव्यक्ति निर्दिष्ट करने की अनुमति देता है। यह कई प्रकार के प्रोटोकॉल को समझता है, जिनमें IPv4/6...

CVE-2019-6467

CVE-2019-6467 BIND nxdomain-redirect لأغراض تعليمية فقط تشغيل root@kitploit: $ docker run --rm --name cve-2019-6467 -it -p 53:53/udp knqyf263/cve-2019-6467 استغلال استعلام عادي root@kitploit: $ dig @127.0.0.1 nxdomain.example.com يمكن استبدال nxdomain بأي شيء يعني اسم نطاق غير موجود. مثال:...

eavesarp

Eavesarp أداة استطلاع تحلل طلبات ARP لتحديد المضيفين الذين يحتمل أنهم يتواصلون مع بعضهم البعض، وهو مفيد في تلك المواقف الصعبة التي لا يتم فيها استخدام LLMNR/NBNS لحل الأسماء. مقدمة من: المتطلبات / التثبيت هذا يعمل فقط على Kali أو توزيعات لينكس الأخرى القائمة على Debian يتطلب eavesarp Python3.7 و...

pretender

pretender Il tuo compagno MitM per attacchi di relay con DHCPv6 DNS takeover e spoofing di mDNS, LLMNR e NetBIOS-NS pretender è uno strumento sviluppato da RedTeam Pentesting per ottenere posizioni di intermediazione machine-in-the-middle tramite spoofing della risoluzione dei nomi locale e...

DEBIAN-CVE-2026-78680

NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent.reprsvg, allowing attackers to execute arbitrary code by placing a malicious dot binary in the search path or current working directory. Attackers can...

CVE-2026-78680

NLTK versions before 3.10.3 are vulnerable to arbitrary code execution via the Graphviz dot binary . The root cause is that dependencygraph.dot2img and AlignedSent._repr_svg_ invoke dot using a bare name rather than a validated absolute path. On Windows , an attacker can place a malicious dot bin...

UBUNTU-CVE-2026-71513

NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

CVE-2026-65816

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

PT-2026-79201

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An issue involving the use of an incorrectly-resolved name or reference allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

CVE-2026-71210 mealie - DNS-Rebinding TOCTOU in SSRF Guard Allows Internal Network and Cloud Metadata Access

Mealie's AsyncSafeTransport SSRF guard mealie/pkgs/safehttp/transport.py resolves a target hostname once, checks the resolved IP against private-range rules, but then issues the actual outbound HTTP request using the original hostname, which the underlying async transport re-resolves independentl...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-54729

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.5, isurlsafe can treat localhost as safe when DNS resolver 1.1.1.1 returns NXDOMAIN because dns.resolve4 yields no address and no dns.lookup fallback occurs, allowing server-side...

samba security update

4.10.16-25.0.11 - Fix CVE-2026-4408 and CVE-2026-4480 Orabug: 39599120 4.10.16-25.0.9 - s3:winbindd: avoid using any netlogon call to get a dc name Orabug: 38560263 - winbindd: use finddomainfromnamenoinit in finddnsdomainname Orabug: 38560263 4.10.16-25.0.7 - Fixed winbind dsgetdcname calls w.r....

SUSE CVE-2026-44507

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43617. Reason: This candidate is a duplicate of CVE-2026-43617. Notes: All CVE users should reference CVE-2026-43617 instead of this candidate...

CVE-2025-71390

SurrealDB before 2.2.6, 2.3.6, and 2.1.8 and 3.0.0-alpha.7 and earlier fails to validate DNS-resolved hostnames against --deny-net network access restrictions in its http:: functions. An authenticated user can invoke http:: with a hostname that resolves to a denied IP address, causing the server ...

EUVD-2026-45377

A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the function matchesAllowlist/extractBin of the file internal/tools/execapproval.go. Executing a manipulation can lead to incorrectly-resolved name. The attack may be performed from remote. The exploit has...

CVE-2026-16120 nextlevelbuilder GoClaw exec_approval.go extractBin name resolution

A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the function matchesAllowlist/extractBin of the file internal/tools/execapproval.go. Executing a manipulation can lead to incorrectly-resolved name. The attack may be performed from remote. The exploit has...

CVE-2026-16120

A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the function matchesAllowlist/extractBin of the file internal/tools/execapproval.go. Executing a manipulation can lead to incorrectly-resolved name. The attack may be performed from remote. The exploit has...

CVE-2026-16120 nextlevelbuilder GoClaw exec_approval.go extractBin name resolution

A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the function matchesAllowlist/extractBin of the file internal/tools/execapproval.go. Executing a manipulation can lead to incorrectly-resolved name. The attack may be performed from remote. The exploit has...