sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

Astra Linux – Vulnerability in nss

During RSA key generation, bignum implementations used a variant of the Binary Extended Euclidean Algorithm, which involved significant input-dependent processes. This allowed attackers to perform electromagnetic-based side-channel attacks to capture traces that could lead to the recovery of secr...

cargo-fuzz

cargo fuzz Acargo subcommand for fuzzing with libFuzzer! Easy to use! Installation root@kitploit: $ cargo install cargo-fuzz Note: libFuzzer needs LLVM sanitizer support, so this only works on x86-64 and Aarch64, and only on Unix-like operating systems not Windows. This also needs a nightly...

wifi-pineapple-cloner-builds

Wifi Pineapple Cloner: ビルド 長い間、2018年に始まったこのプロジェクトの作者を名乗る人々がいることに気づいていました。 さらに、その先を行き、すぐに使えるデバイスを販売している人々もいます... 公開されており無料であるものに対してお金を払って騙される人を防ぐため、生成済みビルドをまとめた2つ目のリポジトリを作ることにしました。 Issues and Pull Request これらはすべて元のプロジェクトで対応します。 対応デバイス すべてのビルドは以下を使用して作成されています: OpenWrt 19.07.7 Wifi Pineapple Cloner...

cryptomator

支持 Cryptomator 尽管 Cryptomator 的开发投入巨大，它仍作为开源项目免费提供，因此依赖于捐赠。如果您也希望推动项目的持续发展，我们为您提供以下支持方式： 通过 Cryptomator 官网进行一次性或定期捐赠。 通过 Cryptomator 的赞助商网站成为赞助商。 金牌赞助商 --- 银牌赞助商 | | ---|---|--- 特别鸣谢 ARM64 构建的持续集成托管服务由 MacStadium 提供。 简介 Cryptomator 为您的云端文件提供跨平台的透明客户端加密。 可在 cryptomator.org 下载 Cryptomator...

CVE-2024-29895-CactiRCE-PoC

Cacti RCE - CVE-2024-29895 Uso: python3 cve-2024-29895.py -u https://target.com/ -c id Afecta a las versiones de Cacti 1.3.X en compilaciones DEV donde cmdrealtime.php está presente y POLLERID está habilitado. La inyección de comandos es posible a través de este endpoint, solicitando por GET con ...

CVE-2024-29895.py

Cacti RCE - CVE-2024-29895 用法： python3 cve-2024-29895.py -u https://target.com/ -c id 影响 DEV 构建版本中的 Cacti 1.3.X，这些版本中存在 cmdrealtime.php 且启用了 POLLERID。 可通过该端点实现命令注入：以 HTML 查询参数的形式携带 payload 发送 GET 请求即可。 Dork： Google：inurl:cmdrealtime.php Shodan：Cacti Hunter.how：/product.name="Cacti"...

SharpCollection

SharpCollection 常见 C 攻击性工具的每日构建，直接从各自 master 分支获取最新代码，使用 Azure DevOps 发布管道以 CDI 方式构建并发布。 找不到你喜欢的工具？欢迎提交 issue 或在 X 上私信我 @Flangvik 请注意，Cobalt Strike 的 execute-assembly 仅接受以 "Any CPU" 配置编译的二进制文件。 OpSec 在实际交战中，我应该盲目部署这些二进制文件吗？ 当然不行 ，始终仔细检查你在客户端或网络上部署的任何内容。例如 https://github.com/dnSpyEx/dnSpy...

CVE-2026-84145

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant...

CVE-2026-59984

A flaw was found in OpenEXR. When processing a specially crafted B44-compressed EXR image, an out-of-bounds write can occur due to an integer truncation vulnerability in ILP32 builds. This allows an attacker to cause a denial of service or potentially lead to memory corruption. Mitigation Red Hat...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 的预编译构建版本。 当然，你不应该信任预编译的构建版本 : 此版本的工作方式略有不同：首先创建一个最小的共享对象。该对象被打包到主二进制文件中，并在执行时释放。使用 Musl 进行编译以尽量减少依赖（例如特定的 libc 版本？） 致谢 Qualys 的原始公告：https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Berdav（Davide Berardi）的 PoC：https://github.com/berdav/CVE-2021-4034...

CVE-2026-87058

A flaw was found in olm-operator-konflux-sample. The hermetic build mode is disabled by default, allowing bundle builds to perform live network fetches. This means that external, unverified resources can be pulled during the build process, potentially compromising the integrity and trustworthines...

CVE-2026-86259

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud...

EUVD-2026-72126

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud...

CVE-2026-86259 OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud...

Linux Distros Unpatched Vulnerability : CVE-2026-84965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operati...

Root-My-Device v0.0.7

Root My Device A fork of BuSung-dev/Root-My-Galaxy, under the Apache License 2.0 — see LICENSE and Credits. Root My Device is a one-click installer for explicitly supported firmware builds. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build...

CVE-2026-84965

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently larg...

DEBIAN-CVE-2026-84965

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently larg...

CVE-2026-84965 Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently larg...