s3tk

s3tk A security toolkit for Amazon S3 🍊 Battle-tested at Instacart Installation Run: root@kitploit: pip install s3tk You can use the AWS CLI or AWS Vault to set up your AWS credentials: root@kitploit: pip install awscli aws configure See IAM policies needed for each command. Commands Scan Scan yo...

secureboot_objects

Объекты безопасной загрузки Этот репозиторий содержит объекты безопасной загрузки, рекомендованные Microsoft. Документацию смотрите в нашей Wiki! Версионирование Этот репозиторий следует семантическому версионированию .., что является схемой версионирования, передающей смысл нижележащих изменений...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

cryptr

cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation root@kitploit: git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...

golang-x-text

Go 텍스트 이 저장소는 텍스트 처리를 위한 보조 Go 패키지를 포함하며, 대부분 유니코드와 관련됩니다. CLDR 버전 관리 x/text에서 사용하는 유니코드 버전이 Go 컴파일러에서 사용하는 버전과 일치하는 것이 중요합니다. x/text 저장소는 여러 버전의 유니코드를 지원하며 유니코드 버전을 Go 컴파일러의 버전에 맞춥니다. 현재 이 기능은 Go 컴파일러 1.7 버전부터 지원됩니다. 기여하기 이 저장소에 변경 사항을 제출하려면 http://go.dev/doc/contribute를 참조하세요. git 저장소는...

React2Shell-CVE-2025-55182-Detector

사전 요구 사항 package.json이 포함된 프로젝트 루트 디렉토리에 접근 가능 사용하는 스크립트에 따라 다음 런타임 중 하나 필요: Python Javascript PowerShell Bash jq 설치 필요 사용법 모든 스크립트는 package.json 파일이 있는 대상 프로젝트의 루트 디렉토리에서 실행해야 합니다. 1. Python 감지 안정적인 시맨틱 버전 비교를 위해 Python 스크립트 실행: root@kitploit: python3 scripts/python/checkreactversions.py 2...

CVE-2026-73265 RustFS: Version-specific object reads authorize the non-version action

RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, CopyObject sources, and UploadPartCopy sources with s3:GetObject instead of s3:GetObjectVersion, allowing principals without historical-version permission to disclose known...

CVE-2026-18958

A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. Affected by this vulnerability is an unknown functionality of the file loginCheckTest.php of the component Login. The manipulation of the...

CVE-2026-18958

A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. Affected by this vulnerability is an unknown functionality of the file loginCheckTest.php of the component Login. The manipulation of the...

CLSA-2026-1784769500 TuxCare security update for semver (8 CVEs)

TuxCare rebuilt semver to address 8 CVEs. Fixed in 5.1.0-tuxcare.1...

CLSA-2026-1779238050 TuxCare security update for semver (1 CVE)

TuxCare rebuilt semver to address 1 CVE. Fixed in 7.3.4-tuxcare.1...

CLSA-2026-1775089654 TuxCare security update for semver (1 CVE)

TuxCare rebuilt semver to address 1 CVE. Fixed in 7.3.2-tuxcare.1...

CLSA-2026-1775089629 TuxCare security update for semver (1 CVE)

TuxCare rebuilt semver to address 1 CVE. Fixed in 7.1.3-tuxcare.1...

CLSA-2026-1772496674 TuxCare security update for semver (2 CVEs)

TuxCare rebuilt semver to address 2 CVEs. Fixed in 6.3.0-tuxcare.1...

CVE-2026-65712

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

CVE-2026-65712

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

PT-2026-63609

CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

nmap-enumeration-lab

Network Scanning & Host Enumeration with Nmap Host discovery,...

PYSEC-2026-1204 AWorld OS Command Injection vulnerability

A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as critical. This issue affects the function subprocess.run/subprocess.Popen of the file AWorld/aworld/virtualenvironments/terminals/shelltool.py. The manipulation leads to os command...

CVE-2026-13498

A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unknown function of the file /forgotpassword.php of the component POST Parameter Handler. Such manipulation of the argument email leads to sql injection. The attack can be launched remotely. The explo...