buds-audit

buds-audit Version 1.0.0 Bluetooth security assessment tool for wireless earbuds affected by the Airoha SDK vulnerability chain CVE-2025-20700 / CVE-2025-20701 / CVE-2025-20702. Scans for nearby devices, fingerprints known-affected Airoha-based chipsets, and probes for unauthenticated GATT access...

AA Discord Audit

aa-discord-audit Reconciliation audit for Alliance Auth's Discord integration. Compares the actual role assignments in the configured Discord guild against the state expressed in Alliance Auth Groups + State per user and closes the gap through which moderators can hand-assign AA-named roles to...

openclaw-hardening-check

This script only reads. It fixes nothing and does not guarantee that you are safe. Green output means only that the checks listed below passed—and nothing more. OpenClaw hardening check openclaw-hardening-check.mjs is a small, dependency-free, offline review of an OpenClaw installation. It reads...

Audit-BlackBox-Web-to-Root

Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...

EUVD-2026-80058

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7webauthlogdumpcgi.c, auditgetcgi.c, and moddispatchauth/plan.json. Attackers can query these audit components to obtain other users' session and browsing history data...

CVE-2026-76855

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7webauthlogdumpcgi.c, auditgetcgi.c, and moddispatchauth/plan.json. Attackers can query these audit components to obtain other users' session and browsing history data...

CVE-2026-76855 Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7webauthlogdumpcgi.c, auditgetcgi.c, and moddispatchauth/plan.json. Attackers can query these audit components to obtain other users' session and browsing history data...

CVE-2026-76855

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in its audit endpoints, specifically in l7_web_auth_log_dump_cgi.c , audit_get_cgi.c , and mod_dispatch_auth/plan.json . Attackers with low privileges can query these components to obtain other users' ses...

Linux-Kernel-Vulnerabilities-CVE-2026-23111

Linux Environment Audit Tool: CVE-2026-23111 This is a lightweight terminal-based script to find out if you are vulnerable to this attack or not. As I have heard at least one of my friends on Discord who uses Zorin OS happened to encounter this type of attack. As for now, security patches is not...

Microsoft-2024-December-Update-Control

Windows December 2024 Security Patches Audit Script This PowerShell script checks whether the required KB updates for specific security vulnerabilities CVE-2024-49124, CVE-2024-49117, CVE-2024-49118, and CVE-2024-49122 announced in the December 2024 Microsoft security bulletins are installed on...

CVE-2026-59827

認可された Metabase CVE-2026-59827 侵入テストツール 承認された侵入テストの一環として、Metabase デプロイメントにおける CVE-2026-59827 の存在を検証するための、認可されたセキュリティ評価ユーティリティです。 このツールは、破壊的または永続的なアクションを試みるのではなく、制御された概念実証デモンストレーションを実行することで、影響を最小限に抑えながら脆弱性の存在を実証するように設計されています。実行されたすべてのアクションはログに記録され、プロフェッショナルなセキュリティ評価に適した監査証跡を提供します。 警告...

runeward

面向 AI 智能体的开源治理框架。 为任意 AI 智能体加上可强制执行的策略、人工审批、隔离执行、预算和签名证据。Runeward 可与现有的智能体或多智能体框架配合使用，而无需引入新的模型或编排栈。 一条命令即可验证 前置条件：运行中的 Docker/Podman 引擎以及 runeward 二进制文件。 root@kitploit: runeward quickstart 该命令会创建 .runeward/quickstart.toml，检查策略、运行时、镜像和状态路径，运行一条被允许的命令，证明破坏性命令在执行前被拒绝，并验证签名审计追踪。除非传入...

CobraAudit

CobraAudit 버그 바운티 감사 프레임워크 — 일반적인 취약점 클래스를 대상으로 하는 세 가지 집중 모듈. root@kitploit: ╔═╗╔═╗╔╗ ╦═╗╔═╗ ╔═╗╦ ╦╔╦╗╦╔╦╗ ║ ║ ║╠╩╗╠╦╝╠═╣ ╠═╣║ ║ ║║║ ║ ╚═╝╚═╝╚═╝╩╚═╩ ╩ ╩ ╩╚═╝═╩╝╩ ╩ 모듈...

sentrygrid

SentryGrid 为联邦零信任架构打造的机器学习驱动威胁检测与持续监控平台。OSCAL 原生支持、符合 FedRAMP Moderate 标准、哈希链审计、三模型异常集成。 快速开始 root@kitploit: make setup install bun + python deps make dev-up bring up the local stack via docker compose make dev turbo dev across workspaces make smoke end-to-end smoke test 打开 http://localhost:3000...

database-sentinel

🛡️ Database Sentinel A Claude Skill that audits your database backends for security vulnerabilities. Drop it into Claude Code, Cursor, or any Claude-powered environment. Say "audit my database" and get a comprehensive security report with exact fix code — in minutes, not days. 170+ Lovable apps...

CVE-2026-90955

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID. However, the legacy SysLogLogable behavior stored that identity in behavior-instance state...

CVE-2026-75015

Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they might carry on their payloads, thus allowing administrators to access such sensitive values. This issue affects Apache...

CVE-2026-75015 Apache Syncope: Nested secrets leak cleartext into audit records readable

Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they might carry on their payloads, thus allowing administrators to access such sensitive values. This issue affects Apache...

CVE-2026-75015

Apache Syncope contains an insufficiently protected credentials vulnerability affecting versions 3.0.0-M0 through 3.0.16 , 4.0.0-M0 through 4.0.7 , and 4.1.0-M0 through 4.1.2 . Audit events stored in the configured store are not sufficiently masked, allowing sensitive values (including nested sec...

EUVD-2026-77461

Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they might carry on their payloads, thus allowing administrators to access such sensitive values. This issue affects Apache...