ghauri

Like Ghauri, consider supporting the developer...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

AFLTriage

AFLTriage AFLTriage هي أداة لتصنيف ملفات الإدخال المتسببة في تعطل البرنامج باستخدام مصحح أخطاء. صُممت لتكون محمولة ولا تتطلب أي تبعيات وقت تشغيل، باستثناء libc ومصحح أخطاء خارجي. تدعم تصنيف الأعطال الناتجة عن أي برنامج، وليس فقط AFL، لكنها تتعرف على أدلة AFL بشكل خاص، ومن هنا جاء الاسم. تشمل بعض...

etl-parser

etl-parser Event Trace Log file reader in pure Python etl-parser is a pure Python 3 parser library for ETL Windows log files. ETL is the default format for ETW as well as the default format for the Kernel logger. etl-parser has no system dependencies, and will work well on both Windows and Linux...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

A flaw was found in the ip-address library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass...

ROOT-OS-DEBIAN-13-CVE-2026-56409 CVE-2026-56409 in expat - Patched by Root

Root has patched CVE-2026-56409 in the expat package for Root:Debian:13. Multiple fixed versions available...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

CVE-2026-70463

An authorization bypass flaw was found in the rsync daemon. The auth users directive parser incorrectly handles group names containing spaces due to comma-only tokenization. This flaw causes deny rules to be silently discarded, allowing an authenticated user to bypass restrictions and gain...

dwarf2json

Introduzione dwarf2json è un'utilità Go che elabora file contenenti informazioni su simboli e tipi per generare l'output JSON dell'Intermediate Symbol File ISF di Volatility3, adatto per l'analisi di Linux e macOS. Per compilare richiede Go 1.18+: root@kitploit: $ go build Per eseguire:...

logparser

Logparser Logparser fornisce un toolkit di machine learning e benchmark per il parsing automatico dei log, un passaggio fondamentale per l'analisi strutturata dei log. Applicando logparser, gli utenti possono estrarre automaticamente modelli di eventi da log non strutturati e convertire i messagg...

caos-os

CAOS — Sistema Operacional de Garantia ao Cliente Responda de uma vez aos questionários de segurança que seus clientes enviam a você. Toda empresa que lida com dados de clientes recebe as mesmas solicitações repetidamente: questionários de segurança, avaliações de privacidade, análises de risco d...

CVE-2025-55315-repro

CVE-2025-55315-repro Questo repository contiene una piccola applicazione console ASP.NET Core per riprodurre e verificare il comportamento di parsing dei trasferimenti in chunk HTTP e delle nuove righe. Maggiori informazioni su CVE-2025-55315. Contenuti Repro/Program.cs - Applicazione console che...

assets-from-spf

assets-from-spf Uno script Python per analizzare netblocks e nomi di dominio dal record DNS SPFSender Policy Framework Per ogni asset analizzato, lo script troverà e stamperà anche i dettagli dell'Autonomous System Number ASN Per ora, l'output viene stampato solo in formato JSON Demo Screenshots...

CVE-2026-78207 exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization

exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject proto, constructor, or prototype keys when merging note objects. Attackers can assign parsed JSON with a malicious proto property to cell notes, modifying Object.prototype and...

Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

ALSA-2026:59152 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

ALSA-2026:59097 Important: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow...

RHEL 9 : fence-agents (RHSA-2026:58548)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:58548 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

RHEL 8 : resource-agents (RHSA-2026:58811)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:58811 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...