Lucene search
+L

6761 matches found

Kitploit
Kitploit
added 2026/09/17 6:53 a.m.15 views

harbian-audit

harbian-audit ハードニング はじめに ハードニングされたDebian GNU/LinuxおよびCentOS 8ディストリビューションの監査。 主なテスト環境はDebian GNU/Linux 9/10/11/12/13、CentOS 8、Ubuntu 22であり、その他のバージョンは完全にはテストされていません。このリリースではデスクトップ関連の項目は実装されていません。 コードフレームワークはOVH-debian-cisプロジェクトに基づいており、Debian 9/10/11/12/13およびCentOS 8の機能に応じて元の実装の一部を修正し、STIG...

5.9AI score
SaveExploits0References20
Kitploit
Kitploit
added 2026/09/17 6:48 a.m.7 views

Nessus_CVE-2014-6271_check

NessusCVE-2014-6271check Quick and dirty nessus .audit file to check is bash is vulnerable to CVE-2014-6271...

10CVSS8.4AI score0.99999EPSS
SaveExploits146
Kitploit
Kitploit
added 2026/09/17 6:22 a.m.9 views

mesh-kridik

mesh-kridik Kubernetes サービスメッシュのセキュリティを強化しましょう! mesh-kridik は、istio サービスメッシュを使用した Kubernetes クラスターに対してさまざまなセキュリティチェックを実行し、セキュリティレポートを出力するオープンソースのセキュリティチェッカーです。 セキュリティチェックテストは、istio セキュリティのベストプラクティス の完全な実装です。 セキュリティチェックは、istio サービスメッシュを使用した Kubernetes クラスターに対して実行され、OPA(Open Policy...

5.7AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/17 6:22 a.m.40 views

mesh-kridik

mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report The security checks tests are the full implementation of istio security...

5.5AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/17 6:01 a.m.10 views

CVE-2020-2978

CVE-2020-2978 CVE-2020-2978 refrence link for PoC: https://databasesecurityninja.wordpress.com/2020/12/01/cve-2020-2978-rman-audit-table-point-in-time-recovery-not-logged/...

4.1CVSS7.3AI score0.01242EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/17 5:25 a.m.11 views

keyguard

keyguard Scan codebases, GCP projects, and CI pipelines for exposed Google API credentials — before they get exploited. The problem: Google retroactively enabled Gemini API access on existing API keys Maps, Places, etc. that were designed to be public and embedded in client-side code. When someon...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 3:52 a.m.10 views

kubestriker

Kubernetes 向けの高速セキュリティ監査ツール!!...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/17 3:30 a.m.10 views

dns-zone-audit

DNS Zone Audit A lightweight Bash-based security tool for testing DNS zone transfer misconfigurations AXFR, associated with CVE-1999-0532. This script queries authoritative name servers for a domain and attempts full zone transfers. If successful, it indicates a critical DNS misconfiguration that...

6AI score0.69255EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/17 3:28 a.m.12 views

cloud-security-audit

Cloud Security Audit...

5.8AI score
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.114 views

Jenkin Audit Trail <=3.2 - Cross-Site Scripting

Jenkins Audit Trail 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability. id: CVE-2020-2140 info: name: Jenkin Audit Trail =3.3 which includes a fix for this vulnerability. reference: -...

6.1CVSS6.2AI score0.75975EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.121 views

JumpServer > 3.6.4 - Information Disclosure

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

8.2CVSS6.6AI score0.58538EPSS
SaveExploits5References5
Kitploit
Kitploit
added 2026/09/17 1:43 a.m.11 views

ldapnomnom

LDAP Nom Nom Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by abusing LDAP Ping requests cLDAP Looks for enabled normal user accounts. No Windows audit logs generated. High speed up to 50K/sec per server - go way beyond that with multiple...

5.7AI score
SaveExploits0References3
OSV
OSV
added 2026/09/17 12:00 a.m.3 views

UBUNTU-CVE-2026-84439

When audit logging is enabled zookeeper.audit.enable=true, an unauth...

5.3CVSS0.00272EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 11:06 p.m.8 views

tomcat85-check

tomcat85-check 还在跑 Tomcat 8.5?这个工具告诉你到底中了哪些 2025 年的 CVE —— 因为这个问题,你在官方页面、NVD、扫描器那里都问不出完整答案。 零依赖单 jar,离线跑,不联网、不上传任何东西。 它解决什么 Tomcat 8.5 于 2024-03-31 EOL ,终版是 8.5.1002024-03-19 发布。 之后 Apache 仍在 CVE 记录里逐条声明「8.5 也中招」,而说这话的地方最少人去看 。 Apache 官方 9.x 安全页列出的CVE-2025- 共 17 条,其中 14 条逐字写着: The following...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 10:19 p.m.12 views

CVE-2026-3494_Verfication

CVE-2026-3494 - MariaDB serveraudit 日志记录验证 PoC 本项目提供了一个专用环境,用于验证和分析 MariaDB serveraudit 插件在 SQL 查询中使用特定内联注释(、--)时可能存在的审计日志绕过问题。 主要发现 v11.8.6 中的日志遗漏 :在 MariaDB v11.8.6 中观察到某些查询(例如带注释的 SET PASSWORD 或 Error 1046 场景)未能被记录到审计日志中,而该版本此前被认为已修复此问题。 潜在的解析器差异 :发现近期版本中审计插件解析器行为可能发生了变化,多行注释()可能导致 DCL...

5.3CVSS5.7AI score0.00274EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/16 10:03 p.m.14 views

hyperfox

Hyperfox Hyperfox は、2点間のHTTPおよびHTTPSトラフィックをプロキシして記録するセキュリティ監査ツールです。 インストール 以下のコマンドでhyperfoxの最新版を /usr/local/bin にインストールできます(管理者権限が必要です): root@kitploit: curl -sL 'https://raw.githubusercontent.com/malfunkt/hyperfox/master/install.sh' | sh このバンから無料のキャンディーを受け取りたくない場合は、リリースページ...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 10:03 p.m.10 views

openclaw-technical-analysis

OpenClaw Technical Analysis This repository contains my deep-dive technical reviews and code audits of the OpenClaw AI platform specifically focusing on the February 15 and February 25, 2026 builds. These reviews are grounded in raw architecture analysis, GitHub commit history, and the intersecti...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/09/16 9:17 p.m.8 views

CVE-2026-92809

PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR consent log entries are attributed to the authenticated customer. Authenticated attackers can submit arbitrary customer identifiers to create forged consent records for other customers, corrupting audit logs...

5.3CVSS0.00196EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/16 8:32 p.m.28 views

CVE-2026-92809 PrestaShop psgdpr through 1.4.3 GDPR Log Forgery

PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR consent log entries are attributed to the authenticated customer. Authenticated attackers can submit arbitrary customer identifiers to create forged consent records for other customers, corrupting audit logs...

5.3CVSS0.00196EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/16 8:32 p.m.12 views

CVE-2026-92809

CVE-2026-92809 affects the PrestaShop psgdpr module (versions through 1.4.3 ). The vulnerability is an IDOR (Insecure Direct Object Reference) in GDPR consent logging: the module fails to validate that submitted consent log entries belong to the authenticated customer. An authenticated attacker c...

5.3CVSS0.00196EPSS
SaveExploits0References4
Rows per page
Query Builder