openSUSE 16 Security Update : cjose (openSUSE-SU-2026:21944-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21944-1 advisory. - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap- based buffer overflow bsc1279844. -...

Creosote

Creosote Creosote は、CVE-2007-4559 で説明されている tarfile の脆弱性を検索するためのソリューションです。このツールは、指定されたディレクトリを再帰的に走査し、Python ファイルを探します。Python ファイルが見つかると、tarfile モジュールをスキャンし、コードを AST に解析して脆弱性のあるコードを探します。 Creosote は、見つかったすべての脆弱性を次の 3 つの主要カテゴリに分類します。 Vuln: これはツールが提供する最高の信頼度レベルであり、Vuln とマークされたものはすべて分析する必要があります。 Probab...

CVE-2022-45472

CVE-2022-45472 DOM Based XSS Software: CAE Learning Space Enterprise with Intuity License Image Version: 267r Patch Level: 639 Vulnerability: DOM Based XSS Description The CAE Learning Space Enterprise management software is vulnerable to a DOM Based XSS attack. A DOM Based XSS attack is when a...

sonicwall-cve-2019-7482

sonicwall cve-2019-7482 stack-based overflow...

rhuss__jolokia_CVE-2018-1000129_1-4-0

Jolokia is a fresh way to access JMX MBeans remotely. It is different from JSR-160 connectors in that it is an agent-based approach which uses JSON over HTTP for its communication in a REST-stylish way. Multiple agents are provided for different environments: WAR Agent for deployment as web...

spyre

Spyre ...간단하고 자체 포함된 모듈식 호스트 기반 IOC 스캐너 Spyre는 YARA 패턴 매칭 엔진 및 기타 스캔 모듈을 기반으로 구축된 간단한 호스트 기반 IOC 스캐너입니다. 이 프로젝트의 주요 목표는 YARA 규칙 및 기타 침해 지표를 쉽게 운영화하는 데 있습니다. 사용자는 자신의 규칙 세트를 준비해야 합니다. awesome-yara 저장소는 무료 YARA 규칙 세트에 대한 좋은 개요를 제공합니다. Spyre는 침해 대응자가 조사 도구로 사용하기 위한 것입니다. 어떤 종류의 엔드포인트 보호 서비스로 발전하도록...

CVE-2025-25967

CVE-2025-25967: Cross-Site Request Forgery CSRF DDSN Interactive cm3 Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery CSRF. This flaw enables attackers to trick authenticated users into performing unauthorised actions, such as account deletion or user creation, by embedding...

dfirtrack

DFIRTrackDigital Forensics and Incident Response Tracking application는 Django를 기반으로 PostgreSQL 데이터베이스 백엔드를 사용하는 오픈소스 웹 애플리케이션입니다. 주로 사례 기반으로 CERT, SOC 등의 일상 업무를 지원하는 다른 훌륭한 사고 대응 도구와 달리 DFIRTrack은 APT 사례에서 자주 관찰되는 것처럼 많은 영향을 받은 시스템을 가진 하나 이상의 주요 사고를 처리하는 데 중점을 둡니다. 대규모 사건에서 전담 사고 대응 팀을 위한 도구로 사용되...

CallStackMasker

CallStackMasker This repository demonstrates a PoC technique for dynamically spoofing call stacks using timers. Prior to our implant sleeping, we can queue up timers to overwrite its call stack with a fake one and then restore the original before resuming execution. Hence, in the same way we can...

CVE-2024-9465

CVE-2024-9465 Checkpoint SQL Injection via Time-Based Attack CVE-2024-9465 SHODAN SEARCH root@kitploit: https://www.shodan.io/search?query=html%3A%22Expedition+Project%22 html:"Expedition Project" FOFA SEARCH root@kitploit: https://en.fofa.info/ body="Expedition Project" || title="Expedition...

Revenant

Revenant Revenant is a 3rd party agent for Havoc written in C, and based on Talon. This implant is meant to expand on the Talon implant by implementing covert methods of execution, robust capabilities, and more customization. Setup This project aims to be a self-contained Havoc C2 implant. The go...

authz0

Authz0는 자동화된 권한 부여 테스트 도구입니다. URL과 역할Role 및 자격 증명Credentials을 기반으로 인가되지 않은 접근을 식별할 수 있습니다. URL과 역할은 YAML 기반 템플릿으로 관리되며, authz0를 통해 자동으로 생성 및 추가할 수 있습니다. 한 번 생성/작성된 템플릿 파일을 사용하여 여러 인증 헤더와 쿠키를 기반으로 테스트할 수도 있습니다...

ngrep

ngrep 1.49.0 2.7.2026 ngrepは、ネットワークレイヤーに適用されたGNU grepのようなものです。これはPCAPベースのツールで、拡張正規表現または16進表現を指定してパケットのデータペイロードと照合できます。IPv4/6、TCP、UDP、ICMPv4/6、IGMP、Rawなど、多くの種類のプロトコルを理解し、さまざまなインターフェースタイプに対応し、tcpdumpやsnoopなどのより一般的なパケットスニッフィングツールと同様にBPFフィルターロジックを理解します。 新機能 Docker/Podmanのコンテナ名解決（-r フラグ）...

CVE-2023-1454

CVE-2023-1454 CVE-2023-1454 Vulnerability Detection Script This article is for reference only. Do not use the technical materials and tools in this article to intrude into any computer system without authorization. The direct or indirect consequences and losses caused by the information provided ...

EUVD-2026-87360

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

CVE-2026-10758 Esri Lerc has a security vulnerability

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

CVE-2026-10758

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

CVE-2020-11023

CVE-2020-11023 POC Dom XSS This proof of concept, demostraste an security flaw of dom-bases XSS manipulating and using JQuery DOM Methods. eg:.append, .text,.html Payload i used: alert"Text: " + $"test".text; To test the vulnerability do the following: 1. Open and web console, on your browser and...

nmap

Nmap Nmap は、GPLv2 に基づく（ただし互換性のない）カスタムライセンスの下でリリースされています。Nmap ライセンスはエンドユーザーによる自由な使用を許可しており、また、自社製品に Nmap テクノロジーを再配布したい企業向けの商用ライセンスも提供しています。詳細については、Nmap Copyright and Licensing を参照してください。 このソフトウェアの最新版と、Windows、macOS、Linux（RPM）用のバイナリインストーラは、Nmap.org から入手できます。 完全なドキュメントも Nmap.org ウェブサイト で入手できます。 質問や提...

CVE-2026-54597

CVE-2026-54597 - ITFlow Time-Based Blind SQL Injection Severity: High Advisory: GHSA-m63v-j7fw-hq2h Affected: ITFlow agent/ajax.php — expires parameter Fixed in: Commit 63d8691 Author: iltosec Summary A time-based blind SQL injection vulnerability in ITFlow's share link generation handler. The...