Hash-Eye

🔍 HashEye - أداة متقدمة للكشف عن أنواع التجزئة Hashes HashEye هي أداة CLI قوية بلغة Python للكشف الفوري عن أنواع التجزئة وتحليلها. توفر معلومات مفصلة حول تنسيقات التجزئة، مستويات الأمان، تحليل الإنتروبيا، واكتشاف الأنماط. مقدمة منIsaac Security Labs 🔗 روابط: GitHub: @ishaklaz تلغرام:...

sonicwall-audit-toolkit

Toolkit di audit di sicurezza SonicWall Framework automatizzato di valutazione della sicurezza per appliance SonicWall. Esclusivamente per attività di penetration testing autorizzate. Avvio rapido root@kitploit: Install dependencies pip install -r requirements.txt Run all modules against a target...

chaps

CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

py-web-vuln-scanner

No d...

MINI-WWXP-HJXC-7547

Bulletin has no description...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: argo-cd, grafana-alloy, amazon-cloudwatch-agent-fips, eks-distro, jaeger, rke2-runtime, splunk-otel-collector-fips, opentelemetry-collector-fips, nats, coredns-fips, eks-distro-fips, opentelemetry-collector-contrib-fips, jaeger-fips, tempo, verticadb-operator,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: argo-cd, guac, aws-sigv4-proxy, age, prometheus-mongodb-exporter, flux, sbom-scorecard, pvc-autoresizer, kube-conformance, nvidia-nsight-compute-12.8, blob-csi, runc, google-osconfig-agent, net-kourier-fips, wgcf, ini-file, pushprox-fips, sriov-network-device-plugin,...

CVE-2026-63424

During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges...

GHSA-P7H3-7Q52-72W8 printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)

The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in environment strings, the uutils implementation silently skips these entries rather than printing the raw bytes. This vulnerability allows...

printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)

The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in environment strings, the uutils implementation silently skips these entries rather than printing the raw bytes. This vulnerability allows...

GHSA-7CR3-H577-G38J rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)

The --preserve-root check uses a path-string test path.hasroot && path.parent.isnone rather than comparing device/inode. A symlink to / e.g. /tmp/rootlink - / has a parent component, so it passes the check. GNU caches /'s dev/inode at startup and compares every traversed directory against it...

cut: -s (only-delimited) ignored when delimiter is a newline

The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...

GHSA-WV33-5PXH-R7J7 cut: -s (only-delimited) ignored when delimiter is a newline

The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...

GHSA-2W8R-9XJ7-69J5 mktemp: empty TMPDIR creates temp files in CWD instead of /tmp

The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR is an empty string, the uutils implementation treats the empty string as a valid path. This causes temporary files to be created in the...

Strapi Content API Sanitization Bypass Detection Module Scanner

This Python script assesses exposure to CVE-2026-27886 in Strapi Content API endpoints by performing differential filter validation against where parameters. Detection compares baseline query behavior against controlledfilter predicates to determine whether unsanitized conditions reach backend...

vulnerability-assessment-metasploitable2

Vulnerability Assessment — Metasploitable 2 A end-to-end vuln...

Chatwoot Scanner

This is a security assessment tool designed to evaluate authentication status, response behavior, and possible exposure indicators in Chatwoot conversation filtering functionality...

CVE-2025-10238

During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode SMM...

CVE-2025-10237

CVE-2025-10237 involves ThinkPad embedded controller firmware. A potential vulnerability could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions. The available connected records confirm a LOCAL attack vector with HIGH impact on confidentiality, integr...