Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Malicious code in cloushaar-poc-exfil-91827 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ec6abf4fcd51274f6bf53cece87bc47051b0751b117e137c68d964b05753e16 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

Malware already running on a Mac can quietly take over Meta's Muse assistant and use the broad access its owner granted the app, security researcher Patrick Wardle has shown in a proof-of-concept released on September 21. It works by changing a hidden setting so that when the user taps the...

zip-shotgun

ZIP Shotgun Script de utilidad para probar la funcionalidad de carga de archivos zip y posible extracción de archivos zip en busca de vulnerabilidades también conocido como Zip Slip. La idea de este script proviene de esta publicación en Silent Signal Techblog - Compressed File Upload And Command...

zip-shotgun

ZIP Shotgun Utility script to test zip file upload functionality and possible extraction of zip files for vulnerabilities aka Zip Slip. Idea for this script comes from this post on Silent Signal Techblog - Compressed File Upload And Command Execution and from OWASP - Test Upload of Malicious File...

libsignal

Overview libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library. The underlying implementations are written in Rust: libsignal-protocol: Implements the Signal protocol, including the Double Ratchet algorithm. A...

threatcl

threatcl Modelado de Amenazas con HCL ¿Qué pasó con hcltm? hcltm ha sido renombrado a threatcl. ¡Bienvenido! Resumen !TIP ¿Quieres leer la nueva documentación? Dirígete a threatcl.dev Hay muchas formas diferentes de documentar un modelo de amenazas. Desde un archivo de texto simple, hasta...

grafanaExp

grafanaExp Explota la vulnerabilidad de lectura arbitraria de archivos CVE-2021-43798 de Grafana, detecta automáticamente si hay vulnerabilidades, los plugins existentes, extrae claves, descifra el archivo db del servidor y genera información de datasourrce. Uso Proporciona funcionalidades de exp...

sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...

sx

sx es el escáner de red de línea de comandos diseñado para seguir la filosofía UNIX. El objetivo de este proyecto es crear el escáner de red más rápido con un código limpio y simple. 📖 Índice de contenidos Features Install Build from source Quick Start References Contributing Credits License ✨...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

Exploit for CVE-2026-13355

CVE-2026-13355 — Meta Box AIO Unauthenticated Administrator Pr...

OpenSC

OpenSC documentation Manual pages for the OpenSC command line tools as well as for the OpenSC configuration files are available online and typically distributed along with your installation. The OpenSC Wiki includes, among others, information for: Windows Quick Start macOS Quick Start Compiling a...

Phirautee

Phirautee A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell and does not require any third-party libraries. This tool steals the information, holds an organisation’s data to hostage for payments or...

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...

sshprank

Descripción Una herramienta rápida de escáner masivo SSH, cracker de inicios de sesión, capturador de banners y verificador de autenticación por contraseña que utiliza los módulos python-masscan y shodan. Uso root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // /...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr,...

secbutler

Utilidades esenciales para pentesters, cazadores de bug-bounty e investigadores de seguridad Características • Uso • Instalación • Licencia • secbutler es una herramienta de utilidad creada para pentesters , cazadores de bug-bounty e investigadores de seguridad que incluye todas las tareas más...

dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...