CVE-2026-9973-exploit

CVE-2026-9973 Correction de bug https://chromium-review.googlesource.com/c/v8/v8/+/7822799 wasmturboshaft Fix Phi handling in Load Elimination some more Multiple Phis can depend on each other, so we have to clear all their replacements up front. Fixed: 509268941 Change-Id:...

httpd bug fix and enhancement update

An update is available for httpd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

Bug-Bounty

Voici quelques ressources Bug Bounty de Twitter Table des matières : Common Vulnerabilities and Exposures | Injection SQL | Cross-Site Scripting ---|---|--- CVE-2022-40684 | SQLiDetector | XSS CVE-2022-41040 | SQLI Payload | XSS Payload | | | | | | Soutien:...

Bug-Bounty-Wordlists

Bug-Bounty-Wordlists Un dépôt qui contient toutes les wordlists importantes utilisées lors de la chasse aux bugs. Les wordlists seront mises à jour régulièrement Vous êtes également les bienvenus pour contribuer à ce projet et téléverser vos propres wordlists. Très appréciable. Note : Ce dépôt...

DEBIAN-CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

EUVD-2026-95525

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-98375

The Linux kernel contains a vulnerability in the xen/netfront component where handle_incoming_queue() fails to verify if the pull_to length is at least ETH_HLEN . This allows a backend to provide a short RX slot, causing eth_type_trans() to either trigger a BUG() in __skb_pull() (if subsequent sl...

CVE-2026-98375 xen/netfront: drop RX packets with a short Ethernet header

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-98375 xen/netfront: drop RX packets with a short Ethernet header

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

domained

domained archived A domain name enumeration tool This project is no longer maintained. Thank you to @ccsplit and @mzfr for their work on domained. Gist: Some terrible continually updated python code leveraging some awesome tools that I use for bug bounty reconnaissance. The tools contained in...

telegram_bbbot

telegrambbbot بوت مكافآت الثغرات في تيليغرام https://telegram.me/bugbountychannel التاريخ تم تخصيص هذا البوت للنشر على Heroku الأغراض العامة لهذا البوت - "كن مفيدًا لمجتمع أمن المعلومات!" يستخدم البوت https://github.com/maddevsio/bbcrawler لجلب المعلومات تم استخدام Heroku...

celerystalk

celerystalk يساعدك celerystalk في أتمتة عملية مسح الشبكة/التعداد باستخدام مهام غير متزامنة تُعرف بـ المهام مع الاحتفاظ بالتحكم الكامل في الأدوات التي ترغب في تشغيلها. عرض توضيحي تفاعلي: وضع مكافآت الاختراق HackerOne عرض توضيحي تفاعلي: وضع تقييم الثغرات / اختبار الاختراق آلات HackTheBox.eu المتقاع...

kenzer

KENZER - Automated web assets enumeration & scanning DEPRECATED Mentions A Conceptual Introduction to Automating Bug Bounties Demo Screenshots Instructions for running 0. Run git clone https://github.com/ARPSyndicate/kenzer /home/ubuntu/kenzer && cd /home/ubuntu/kenzer preferred 1. Create an...

gitls

تعداد روابط مستودعات git من قائمة URL / User / Org. صديق لخطوط الأنابيب هذه الأداة متاحة عندما يكون المستودع، مثل github، ضمن نطاق bugbounty. أحيانًا يتم تحديد اسم المنظمة أو اسم المستخدم بدلاً من مستودع محدد، ويمكنك استخدام هذه الأداة لاستخراج الروابط من جميع المستودعات العامة المضمنة في org/use...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

gato

!WARNING This repository is deprecated and archived Gato has been superseded by Trajan , Praetorian's multi-platform CI/CD vulnerability detection and attack automation tool. Trajan consolidates GitHub Actions Gato and GitLab Glato CI/CD attack capabilities into a single, actively-maintained...

socialhunter

socialhunter !IMPORTANT This tool is no longer working, and we won't be able to fix it as it has become difficult to bypass social media protections. Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attack...

socialhunter

socialhunter !IMPORTANT هذه الأداة لم تعد تعمل، ولن نتمكن من إصلاحها لأن تجاوز حماية وسائل التواصل الاجتماعي أصبح صعبًا. تقوم الأداة بزحف الرابط المحدد والعثور على روابط وسائل التواصل الاجتماعي المعطلة التي يمكن اختطافها. قد تسمح روابط التواصل الاجتماعي المعطلة للمهاجم بشن هجمات تصيد. كما يمكن أن...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

SubMon

SubMon Some say bug bounty isn't just about finding bugs, but being the "first" to find them. I'm building this tool to notify hunters when new subdomains appear. Features You can add your favorite target: name + domain. Then you can either click scan or schedule a scan. When the scan finishes, y...