katoolin3

katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...

DevAudit

Note : DevAudit uses the OSS Index database, which has some rate limiting. If you notice you are hitting the limit please raise an issue. Authenticated users get a higher limit, and we am implementing authentication into DevAudit soon. Most non-authenticated users probably won't notice the limit...

ipmap

English readme • 简体中文 readme • 正體中文 readme • Lengua española readme • Deutsche readme • Svenska readme • 한국어 readme • Français readme • हिन्दी readme • Português readme • Italian readme • Русский readme • Indonesian readme • فارسی readme • عربي readme • Türkçe readme • Polskie readme يحدد تطبيق...

CLEANSTART-2026-YC32527 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the consul package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-TQ62696 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the consul package. gRPC-Go is the Go language implementation of gRPC...

ms-msdt-vulnerability-pdq-package

ms-msdt-vulnerability-pdq-package You will need all of the files in order for the package to properly run "out of the box". If you do not have PDQ Inventory, Please remove the scan step from the package before running. This package now searches for the search-ms registry key in addition to the...

CVE-2025-69604

CVE-2025-69604 Description This vulnerability is similar to the one that is described in CVE-2025-61229 – an attacker can edit the task template to get SuperDuper backup tasks to install an arbitrary package. The package can then run shell scripts as the root user and with the highest level of...

go-pillage-registries

go-pillage-registries This project takes a Docker registry and pillages the manifest and configuration for each image in its catalog. It uses Google's crane command's package, which should follow docker's keychain semantics. If you would like to override this, just change authn.DefaultKeychain as...

crlfi

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install crlfi Run bellow command to check crlfi -h Configurations 2. We integrated with the Telegram API to receive instant notificatio...

citrix-netscaler-memory-leak

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install citrix-netscaler-memory-leak Run bellow command to check citrix-netscaler-memory-leak -h Configurations 2. We integrated with t...

CVE-2026-39983

Ссылки https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q https://github.com/patrickjuchli/basic-ftp/commit/2ecc8e2c500c5234115f06fd1dbde1aa03d70f4b https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1...

CVE-2026-21436

CVE-2026-21436 Solus OS 패키지 관리자인 eopkg = 4.3.4는 .eopkg 확장자를 가진 패키지 설치 중 패키지 내용에 absolute path를 포함한 파일을 지정된 디렉터리에 직접 기록합니다. 패키지를 특정 디렉터리에 설치하기 위해 사용되는 --destdir 매개변수를 사용하더라도, 패키지 내부의 ../traversal 문자를 통해 이 제한을 우회할 수 있으며, 공격자가 준비한 파일을 시스템의 임의 디렉터리에 기록할 수 있습니다. eopkg 도구가 패키지 설치 중 root 권한으로 실행되기 때문에,...

deephas-1.0.7-Prototype-Pollution-PoC-CVE-2026-25047-

deephas = 1.0.8. Ссылки: Git...

CVE-2023-37478_npm_vs_pnpm

pnpm vs npm exploit This repo showcases how a difference in npm and pnpminstallation from tarballs can be exploited. The exploit is recorded in CVE-2023-37478. The javascript package constructed here claims it prints out a nice message to the user. When installed with npm, this is true. However,...

opencode-secure

The open source AI coding agent. Installation YOLO curl -fsSL https://opencode.ai/install | bash Package managers npm i -g opencode-ai@latest or bun/pnpm/yarn scoop install opencode Windows choco install opencode Windows brew install anomalyco/tap/opencode macOS and Linux recommended, always up t...

CVE-2026-29786

CVE-2026-29786 Research: Joshua van Rijswijk Description This repository contains a Proof of Concept PoC for CVE-2026-29786 , a vulnerability in the tar npm package that allows a crafted archive to create a hardlink pointing outside the intended extraction directory. The issue occurs when a tar...

ip2

@bybrave/ip2 Maintained fork of ip — IP address utilities for Node.js — with the unpatched SSRF advisory fixed. The original package has 38M downloads/month, no release since February 2024, and a HIGH-severity advisory CVE-2024-29415 / GHSA-2p57-rm9w-gvfp that affects every published version and...

JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

DescriptionA language pack ships a Plural-Forms header saying how the language counts, for example nplurals=2; plural=n != 1;. JupyterLab turns that string into a function with new Function, so the header gets executed. The check that meant to keep it safe was a regular expression. The regex was...

CVE-2024-25641

CVE-2024-25641 Exploit Title: Cacti 1.2.26 - RCE Authenticated Date: 06/01/2025 Exploit Author: D3Ext Vendor Homepage: https://cacti.net/ Software Link: https://github.com/Cacti/cacti/archive/refs/tags/release/1.2.26.zip Version: 1.2.26 Tested on: Kali Linux 2024 CVE: CVE-2024-25641 Explanation...

CVE-2026-30082

Stored Cross-site Scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server Affected version: IngEstate Server - 11.14.0 Affected Function Affected API: Affected API: PUT /emgui/rest/appDatasheet//?full=true HTTP/1.1 PoC To exploit this Stored...