honeypot-auditor

root@kitploit: .. | :: H-AUDITOR :: v0.9.0 :: "DIALING IN... CARRIER DETECTED" :: | |------------------------------------------------------------------------------| | "warez? nah. headers. we trade banners, not bins." | | "if it answers any password, it ain't production — it's a lure." | | "respe...

CIS GitLab Benchmark Scanner

CIS GitLab Benchmark 스캐너 - gitlabcis 배경 2024년 4월 17일, GitLab™은 자사의 Center for Internet Security® CIS GitLab Benchmark를 소개하는 블로그 게시물을 게시했습니다. 이는 제품의 보안을 개선하고 GitLab 고객에게 강화hardening 권장 사항을 제공하기 위한 목적입니다. Center for Internet Security® 웹사이트에 게시된 벤치마크 사본을 다운로드할 수 있습니다. "CIS GitLab Benchmark는 CIS와...

macchanger

GNU MAC Changer GNU MAC Changer is an utility that makes the maniputation of MAC addresses of network interfaces easier. Web site: http://www.gnu.org/software/macchanger Repository: http://github.com/alobbs/macchanger All the best, Alvaro Lopez Ortega [email protected]...

h3c-pt-tools

h3c-pt-tools Huawei/H3C/HP Penetration Testing Tools A small collection of scripts to assist penetration testing/auditing networks which have Huawei and/or HP/H3C devices...

ImCurvin

ImCurvin' ImCurvin is an open-source web security auditing and penetration testing tool designed as a Proof-of-Concept PoC to automate environment misconfiguration detection, track exposed configuration blueprints, and probe backend vulnerabilities. Detailed information regarding ImCurvin can be...

web-server-audit_CVE-2026-42945

webserveraudit Don't ask if you're vulnerable. Ask if you're exploitable. A single-file Python tool that audits nginx and Apache against known CVEs by checking both the installed version and whether the vulnerable code path is actually reachable through your configuration. Why? Most CVE scanners...

fufu-sec

fufu-sec fufu-secFramework for Uninvited Frequency Usage는 개인 및 기업 무선 감사를 위한 차세대 WiFi 보안 프레임워크입니다. 단일 브라우저 대시보드에서 802.11 네트워크의 전체 공격 표면을 다룹니다. 네트워크 탐색, 핸드셰이크 캡처, PMKID 추출, WPS 공격, 로그 액세스 포인트, 서비스 거부, WEP 크래킹, GPU 가속 비밀번호 복구까지 모두 한곳에서 제공합니다. 승인된 사용만 허용됩니다. 소유한 네트워크 또는 감사에 대한 서면 허가를 받은 네트워크만 테스트하세요...

CVE-2026-64435

A flaw was found in the Linux kernel's auditing subsystem. Multiple readers could access the auditqueue length qlen concurrently with a writer without proper synchronization, leading to a data race. This race condition could result in inconsistent data reads, potentially causing unpredictable...

CVE-2026-14820

The Quiz and Survey Master QSM WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditing on its front-end credential-check functionality and returns distinct responses for valid and invalid accounts, allowing unauthenticated attackers to enumerate valid...

CVE-2026-14820

The Quiz and Survey Master QSM WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditing on its front-end credential-check functionality and returns distinct responses for valid and invalid accounts, allowing unauthenticated attackers to enumerate valid...

CVE-2026-14820

The CVE-2026-14820 entry concerns the Quiz and Survey Master (QSM) WordPress plugin prior to version 11.1.3. The front-end credential-check function does not implement rate limiting or standard failed-login auditing and returns distinct responses for valid vs. invalid accounts, enabling unauthent...

[SECURITY] Fedora 43 Update: sssd-2.12.0-3.fc43

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

OESA-2026-3149 sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

CVE-2026-53367

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux subsystem. The per-task avdcache access vector cache incorrectly stored and reused auditing information. This prevented some critical security permission checks, such as directory write operations, from being properly audited...

Linux Distros Unpatched Vulnerability : CVE-2026-53367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the...

SUSE CVE-2026-53367

In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avcauditrequired rather than recomputing based on the currently requested permissions and distinguishing the...

OESA-2026-3021 sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

CVE-2026-53367

In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avcauditrequired rather than recomputing based on the currently requested permissions and distinguishing the...

CVE-2026-53367

CVE-2026-53367 is a Linux kernel vulnerability affecting SELinux auditing. The per-task avdcache was incorrectly saving and reusing the auditing vector produced by avc_audit_required(), instead of recomputing it from the currently requested permissions and distinguishing denied vs allowed outcome...

CVE-2026-53367

In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avcauditrequired rather than recomputing based on the currently requested permissions and distinguishing the...