Lucene search
+L

268 matches found

Kitploit
Kitploit
•added 2026/09/30 2:57 p.m.•12 views

pastego

pastego Extrae/Parsea Pastebin usando GO y expresión gramatical PEG. pastego.png Instalación $ go get -u github.com/notdodo/pastego Uso Las palabras clave de búsqueda distinguen entre mayúsculas y minúsculas. pastego -s "password,keygen,PASSWORD" Puedes usar operadores booleanos para reducir fals...

6.3AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/30 12:18 p.m.•16 views

inspector

MCP Inspector Una herramienta de desarrollo para inspeccionar servidores de Model Context Protocol MCP. Se distribuye como un único paquete, @modelcontextprotocol/inspector, que ofrece tres formas de inspeccionar un servidor: Web — una aplicación de página única con Vite + React + Mantine y un...

6.1AI score
SaveExploits0References9
Kitploit
Kitploit
•added 2026/09/30 11:47 a.m.•17 views

gophoner

gophoner​​ Check simultaneously if a phone number is registered on popular apps & websites, without any prerequisite. Please star & share this repository if you find it useful ⭐ Table of Contents Disclaimer Features Installation Usage Supported Modules Roadmap Legal & Ethical Use License Credits...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 4:30 p.m.•8 views

stop-bots

Stop Bots A TUI, a web UI and a CLI that help you configure your server to stop bad bots without hiding behind a CDN. It works alongside NGINX and your existing firewall iptables or nftables: NGINX config. - It classifies known bots by category scanners, search engines, AI crawlers and blocks or...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/26 3:32 p.m.•21 views

zttp

ZTTP: Zero-Trust SSH Bastion Proxy 🔗 Project Mirrors: GitHub | GitLab ZTTP is a hardened, self-hosted Zero-Trust SSH bastion proxy built in Golang with HashiCorp Vault-backed key management, RBAC policy enforcement, full session recording, and an interactive admin TUI — designed for teams who nee...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 9:27 a.m.•9 views

Arisu

Arisu — AI Key 自动化采矿系统 Arisu 是一款自动扫描公开代码仓库(GitHub、GitLab、Gitee、Docker Hub、PyPI、npm 等)和代码片段(Gist、Issues、CommonCrawl),提取 AI 服务 API 密钥(DeepSeek、OpenAI、Anthropic、Kimi 等)并验证其有效性及余额的工具。提供 TUI 仪表板和多种输出格式(JSON、CSV、Markdown)。 功能特性 🔍 多源扫描 :GitHub 代码搜索、Sourcegraph、Gist、Issues、GitLab、Gitee、Docker...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/21 2:36 a.m.•9 views

netwatch v0.32.3

NetWatch Network diagnostics in your terminal. netwatch --view dense. Four boxes, no chrome, every keybind on a border. Download grows up from the axis, upload grows down. One binary, no config. sudo netwatch and you have live capture with L7 decode, process attribution where available, and a...

6.2AI score
SaveExploits0References12
Fedora
Fedora
•added 2026/09/15 12:18 a.m.•7 views

[SECURITY] Fedora 45 Update: podman-tui-2.0.0-1.fc45

podman-tui is a terminal user interface for Podman. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...

9.1CVSS5.8AI score0.0062EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/14 12:00 a.m.•10 views

Fedora 45 : podman-tui (2026-14e836e595)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-14e836e595 advisory. release v2.0.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

9.1CVSS5.9AI score0.0062EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2026/09/04 6:14 p.m.•11 views

NPM: CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

NPM: CodeWhale: Project config allowshell override enables arbitrary shell command execution via cloned repository vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.8.6, 0.8.41...

8.5CVSS5.5AI score0.00246EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
•added 2026/09/04 6:12 p.m.•11 views

NPM: CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)

NPM: CodeWhale: rlmeval auto-approves arbitrary Python execution, bypassing the user's approval policy RCE vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.8.33, 0.8.41...

8.5CVSS5.4AI score0.00364EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
•added 2026/09/04 6:11 p.m.•11 views

NPM: CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

NPM: CodeWhale: Argument Injection in gitblame Tool Allows Arbitrary File Read Without Approval vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.3.27, 0.8.41...

8.3CVSS5.3AI score0.00446EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
•added 2026/09/04 6:05 p.m.•12 views

NPM: CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning

TOCTOU on DNS failure for DNS pinning vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.8.5, 0.8.41...

9.2CVSS5.1AI score0.00495EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
•added 2026/09/04 6:03 p.m.•12 views

NPM: CodeWhale: js_execution leaks parent environment to model context via missing env scrub

NPM: CodeWhale: jsexecution leaks parent environment to model context via missing env scrub vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.8.32, 0.8.41...

8.7CVSS5.2AI score0.00678EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/09/04 6:02 p.m.•8 views

GHSA-7J5W-7R7X-9V27 CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval

Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Version 0.8.64 contains the fix in commit 9a34b5034d29f05d1f28fa61b04719ca6a741020. Users should upgrade to 0.8.64 or later. The original reporter analysis is...

9.3CVSS5.8AI score0.00477EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/09/04 6:02 p.m.•9 views

NPM: CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

NPM: CodeWhale: execshellinteract sends LLM-controlled input to a running shell without an approval prompt privilege escalation vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.3.10, 0.8.41...

7.3CVSS5.2AI score0.00155EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
•added 2026/09/04 6:00 p.m.•10 views

NPM: CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository

NPM: CodeWhale: Project config instructions override enables arbitrary file read into AI system prompt via cloned repository vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.8.8, 0.8.41...

8.7CVSS5.3AI score0.0053EPSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
•added 2026/09/04 5:34 p.m.•10 views

NPM: CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes

NPM: CodeWhale: imageanalyze follows workspace symlinks, leaking external file bytes vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.8.32, 0.8.41...

8.7CVSS5.1AI score0.0053EPSS
SaveExploits0References5Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/04 12:00 a.m.•21 views

Malicious code in orbitron-tui (npm)

The npm package orbitron-tui is malicious. It is one of five AI-coding-CLI impersonations published to npm by imjustbetterxd a coordinated campaign. On use, the CLI reads the developer's LLM/provider API key - from environment variables e.g. EXAAPIKEY, NVIDIAAPIKEY and its own config - and routes...

5.7AI score
SaveExploits0References2
OSV
OSV
•added 2026/09/04 12:00 a.m.•8 views

MAL-2026-16011 Malicious code in orbitron-tui (npm)

The npm package orbitron-tui is malicious. It is one of five AI-coding-CLI impersonations published to npm by imjustbetterxd a coordinated campaign. On use, the CLI reads the developer's LLM/provider API key - from environment variables e.g. EXAAPIKEY, NVIDIAAPIKEY and its own config - and routes...

5.7AI score
SaveExploits0References2
Rows per page
Query Builder