reverse-shell

reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...

lynis

Documentation Do you like this software? Star the project and become a stargazer. lynis Lynis - Security auditing and hardening tool, for UNIX-based systems. Lynis is a security auditing tool for systems based on UNIX like Linux, macOS, BSD, and others. It performs an in-depth security scan and...

punk.py

punk.py Herramienta 1337 de post-explotación SSH en Unix cómo funciona punk.py es una herramienta de post-explotación diseñada para ayudar en el pivoteo de redes desde una caja Unix comprometida. Recolecta nombres de usuario, claves SSH y hosts conocidos de un sistema Unix, y luego intenta...

Narthex

Narthex Narthex Griego: Νάρθηξ, νάρθηκας es un generador de diccionarios modular y minimalista para sistemas operativos Unix y similares a Unix escrito en C y Shell. Contiene programas autónomos al estilo Unix para la creación de diccionarios personalizados que pueden utilizarse para recuperación...

Shellshock

Shellshock Exploit CVE-2014-6271 Exploit Description This repository contains an exploit for a vulnerability that affects unix-based systems. Please note that this is merely a proof-of-concept script created for educational purposes and should be used responsibly. This exploit is designed to...

CVE-2026-54241

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

GHSA-9MR8-PWPW-3J2W vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-67325 vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-87732

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticatedecryptinto and Chacha20.authenticatedecryptinto functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false,...

CVE-2026-82057

A security issue was discovered in MongoDB where an authenticated user...

GHSA-JXWJ-J7WR-GFRW vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

CVE-2026-54874 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-528H-PC64-C93X vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

CVE-2026-78897 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-76172 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, prism, tensorflow-gpu-jupyter, nextcloud-server, keep, unleash, unleash-fips, keep-fips, kibana, wazuh-dashboard-fips, tileserver-gl, langfuse, langfuse-fips, vitess, gitlab-rails-ce-fips, opensearch-dashboards-fips, gitlab-rails-ce, unleash-proxy,...

CVE-2026-67315 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server, lerna, jitsucom-jitsu, kubeflow-centraldashboard, opensearch-dashboards, prism...

CVE-2026-27878 vulnerabilities

Vulnerabilities for packages: commercial-grafana, grafana, grafana-fips...

CVE-2026-55520

Protego is a pure-Python robots.txt parser with support for modern conventions. Prior to 0.6.2, protego.urlpattern.URLPattern.preparepatternforregex translates every asterisk in an Allow or Disallow directive into a lazy regular-expression wildcard, so a directive containing many asterisks create...

CVE-2026-54548

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

CVE-2026-59981

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, the OpenEXRUtil library returns an out-of-bounds pointer from the SampleCountChannel::ro...