subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

at-doom-fortigate

At Doom Fortigate root@kitploit: ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||...

sonar

root@kitploit: ██████ ███ ██████ ██ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███ ██ ██ ██ ██ ██ ██ Know what's running on your machine. Sonar shows everything listening on localhost and puts it in order: every port belongs to a grou...

dc-sonar

DC Sonar Community Repositories The project consists of repositories: dc-sonar-frontend dc-sonar-user-layer dc-sonar-workers-layer ntlm-scrutinizer Disclaimer It's only for education purposes. Avoid using it on the production Active Directory AD domain. Neither contributor incur any responsibilit...

sonar v0.4.1

root@kitploit: ██████ ███ ██████ ██ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███ ██ ██ ██ ██ ██ ██ Know what's running on your machine. Sonar shows everything listening on localhost and puts it in order: every port belongs to a grou...

Stored XSS vulnerability in sonar

sonar 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. TIP: On Jenkins 2.53...

CVE-2026-70446

Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2019-12752

The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in use on the resident system...

GHSA-25QH-J22F-PWP8 vulnerabilities

Vulnerabilities for packages: trino, apache-nifi-registry, sonar-scanner-cli, keycloak-config-cli, kserve-modelmesh, management-api-for-apache-cassandra-5.0, thingsboard, cassandra-reaper, akhq, cassandra, nextflow, dependency-track, apache-nifi, zookeeper...

CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: trino, apache-nifi-registry, sonar-scanner-cli, keycloak-config-cli, kserve-modelmesh, management-api-for-apache-cassandra-5.0, thingsboard, cassandra-reaper, akhq, cassandra, nextflow, dependency-track, apache-nifi, zookeeper...

CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: apache-nifi, kserve-modelmesh, management-api-for-apache-cassandra-5.0, zookeeper, ontop-fips, keycloak-config-cli, kayenta-fips, hadoop-fips, knative-kafka-broker, management-api-for-apache-cassandra-4.0, zookeeper-fips, apache-nifi-registry, thingsboard, akhq,...

GHSA-25QH-J22F-PWP8 vulnerabilities

Vulnerabilities for packages: apache-nifi, kserve-modelmesh, management-api-for-apache-cassandra-5.0, zookeeper, ontop-fips, keycloak-config-cli, kayenta-fips, hadoop-fips, knative-kafka-broker, management-api-for-apache-cassandra-4.0, zookeeper-fips, apache-nifi-registry, thingsboard, akhq,...

EUVD-2019-4338

Malware in sbrugna...

EUVD-2021-18422

Malware in sbrugna...

EUVD-2022-2776

Malicious code in bioql PyPI...

EUVD-2022-6439

Malicious code in bioql PyPI...

EUVD-2022-7681

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-31523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to ga...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: druid, confluent-kafka, kserve-modelmesh, cassandra-reaper, celeborn, nextflow, airflow, management-api-for-apache-cassandra-5.0, spark, spdx-tools-java, gradle, flyway, keycloak-config-cli, nrjmx, wildfly, apicurio-registry, jenkins, apache-tika, akhq, zipkin,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: druid, confluent-kafka, kserve-modelmesh, cassandra-reaper, celeborn, nextflow, airflow, management-api-for-apache-cassandra-5.0, spark, spdx-tools-java, gradle, flyway, keycloak-config-cli, nrjmx, wildfly, apicurio-registry, jenkins, apache-tika, akhq, zipkin,...