ZEROScan

ZEROScan 简介 ZEROScan 是多线程漏洞检测框架，通过它可以很容易地获取或者开发漏洞检测插件，来对目标进行渗透测试。界面和使用方式借鉴了metasploit-framework框架，很容易上手使用和开发插件。 特点 支持多线程并发模式 极简式脚本编写，无需参考文档 支持Linux, Windows, Mac OSX, BSD 安装 $ git clone https://github.com/zer0yu/ZEROScan.git 或者你可以下载最新的zip源码包进行解压安装: $ wget...

Dshell

Dshell 一个可扩展的网络取证分析框架。支持通过快速开发插件来解析网络数据包捕获。 主要特点： 使用专用插件进行深度数据包分析 强大的流重组能力 支持 IPv4 和 IPv6 多种用户可选的输出格式，并可创建自定义输出处理程序 可链式组合的插件 并行处理选项，可将数据处理分配到独立的 Python 进程 支持开发外部插件包，以便共享和安装新开发的外部插件，而不会与核心 Dshell 插件目录重叠 指南 Dshell 用户指南 包含安装指南以及基于示例的基础和高级分析 帮助新手和有经验的终端用户理解和使用解码器外壳（Dshell）框架 Dshell 开发指南...

puppeteer-extra

puppeteer-extra Este es el monorepo de puppeteer-extra, un framework de plugins modular para puppeteer. :- 🌟 Para la documentación principal, dirígete al paquetepuppeteer-extra. También hemos introducido recientemente soporte para Playwright; si te interesa, dirígete a playwright-extra. Monorepo...

faraday_plugins v1.30.0

Install pip install faraday-plugins Commands List Plugins List all plugins and if its compatible with command or/and report Optional params: -cpf / --custom-plugins-folder PATH: If given will also look for custom plugins on that path faraday-plugins list-plugins Test autodetect plugin from comman...

The vulnerability of the NBDKit Plugin Framework, a tool for creating NBD servers, is related to a single shift error, which allows a hacker to trigger a service failure.

The vulnerability of the NBDKit Plugin Framework, a tool for creating NBD servers, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-26003

CVE-2026-26003 affects FastGPT versions 4.14.0–4.14.5, where an unauthenticated attacker can access the plugin system via FastGPT/api/plugin/xxx, potentially crashing the plugin system and causing loss of plugin installation status. The impact on confidentiality/integrity is limited, with availab...

New Advanced Linux VoidLink Malware Targets Cloud and container Environments

Cybersecurity researchers have disclosed details of a previously undocumented and feature-rich malware framework codenamed VoidLink that's specifically designed for long-term, stealthy access to Linux-based cloud environments According to a new report from Check Point Research, the cloud-native...

EUVD-2019-7057

Malware in sbrugna...

mitmf

This is a Python-based framework for Man-In-The-Middle MITM attacks, called MITMf. It is designed to provide a one-stop-shop for various network attacks and techniques. The framework contains a built-in SMB, HTTP, and DNS server that can be controlled and used by various plugins. It also includes...

Malicious code in semantic-release-metalsmith-mini-css-extract-plugin-framework (npm)

The package semantic-release-metalsmith-mini-css-extract-plugin-framework was found to contain malicious code...

MAL-2025-45995 Malicious code in semantic-release-metalsmith-mini-css-extract-plugin-framework (npm)

The package semantic-release-metalsmith-mini-css-extract-plugin-framework was found to contain malicious code...

[SECURITY] Fedora 42 Update: mingw-gstreamer1-plugins-base-1.26.3-1.fc42

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

CVE-2019-16251

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Plugin Framework for Java (PF4J)

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Plugin Framework for Java PF4J. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-40828 DESCRIPTION: Plugin Framework for Java PF4J coul...

Fedora: Security Advisory for laf-plugin (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: laf-plugin-1.0-35.fc40

The goal of this project is to provide a generic plugin framework for look-and-feels and define the interface of a common kind of plugins - the component plugins...

UBUNTU-CVE-2023-40827

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter...

Plugin Framework for Java 路径遍历漏洞

Plugin Framework for Java PF4J is a Java plugin framework open source by PF4J. A security vulnerability exists in Plugin Framework for Java v.3.9.0 and earlier versions, which originated from a vulnerability that could allow a remote attacker to obtain sensitive information and execute arbitrary...

Plugin Framework for Java 路径遍历漏洞

Plugin Framework for Java PF4J is a Java plugin framework open source by PF4J. A security vulnerability exists in Plugin Framework for Java v.3.9.0 and earlier versions, which originated from a vulnerability that allows remote attackers to obtain sensitive information and execute arbitrary code v...

Plugin Framework for Java 路径遍历漏洞

Plugin Framework for Java PF4J is a Java plugin framework open source by PF4J. A security vulnerability exists in Plugin Framework for Java v.3.9.0 and earlier versions, which originated from a vulnerability that allows remote attackers to obtain sensitive information and execute arbitrary code v...