nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

ROOT-OS-DEBIAN-13-CVE-2026-23417 CVE-2026-23417 in linux - Patched by Root

Root has patched CVE-2026-23417 in the linux package for Root:Debian:13. Multiple fixed versions available...

Antignis

Antignis root@kitploit: , , . . '..' / \ / ||| || '-, ,-' / /\ \ / \ \ |/ \ / | |/ / '. .:. .' / | \ | \ | | / // | \ |\ \ '|Y|' | /| /| |\ /|| // , \ / , / / // / / ,- I -, | /=\ | ,-' |=| '-, - / Link para o artigo do blog:...

CVE-2026-65089

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-65089

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

decoder-plus-plus

Decoder++ Decoder++ ist eine erweiterbare Anwendung, die für Penetrationstester, Softwareentwickler und alle dazwischen konzipiert ist, die mühelos Daten in verschiedenen Formaten decodieren und codieren möchten. Sie enthält eine breite Palette vorinstallierter Skripte und Codecs, intelligente...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

ROOT-OS-DEBIAN-12-CVE-2025-38293 CVE-2025-38293 in linux - Patched by Root

Root has patched CVE-2025-38293 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31655 CVE-2026-31655 in linux - Patched by Root

Root has patched CVE-2026-31655 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-50289 CVE-2024-50289 in linux - Patched by Root

Root has patched CVE-2024-50289 in the linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2019-19633

CVE-2019-19633 lib/G/functions.php no Chevereto 1.0.0 até 1.1.4 Free, e até 3.13.5 Core, permite que um atacante realize ataques de força bruta sem acionar o mecanismo de proteção implementado, manipulando o cabeçalho X-Forwarded-For na requisição. O IP no cabeçalho deve ser alterado a cada 25ª...

EUVD-2026-65314

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Radio Field Save and Continue Draft in all versions up to, and including, 1.57.0.2 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-18323 Forminator Forms <= 1.57.0.2 - Unauthenticated Stored Cross-Site Scripting via Radio Field (Save and Continue Draft)

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Radio Field Save and Continue Draft in all versions up to, and including, 1.57.0.2 due to insufficient input sanitization and output escaping. This makes i...

pngcheck-vulns

pngcheck-vulns Um repositório de arquivos de prova de conceito demonstrando vulnerabilidades divulgadas e corrigidas no pngcheck 2.4.0 - 3.0.1. Cada POC é meticulosamente criado com scripts de geração dedicados para acionar bugs específicos, cobrindo vulnerabilidades com e sem número CVE. Para...

bash-shellshock

bash-shellshock Cookbook Questo cookbook è progettato per testare e opzionalmente correggere il bug "shellshock" di bash, più formalmente noto come cve-2014-7169. Una volta che Chef-client ha eseguito questa ricetta su uno o più host, è possibile recuperare un elenco di tutti i nodi vulnerabili...

airstrike

AirStrike Stage0 Dieses Projekt ist ein hochgradig anpassbarer Stage0-C2, der als Vorlage für deinen eigenen C2 verwendet oder als Basis für deine eigenen C2-Agenten genutzt werden kann. Derzeit besteht dieses Projekt aus 4 verschiedenen Teilen: 1. agent ist ein Ordner mit zwei verschiedenen...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

mothership_c2

Mothership C2 $\textcolorred\textAVVERTENZA!$ $\textcolorred\textQUESTO STRUMENTO È SOLO PER USO ETICO!$ Descrizione Mothership C2 è un server di comando e controllo scritto in Python Caratteristiche Supporta la crittografia end-to-end per l'invio e la ricezione di comandi Usa HTTP per tutto...