Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

RogueWinRM

RogueWinRM RogueWinRM은 SeImpersonatePrivilege 권한이 있는 서비스 계정에서 WinRM 서비스가 실행되지 않을 경우Win10 기본값이지만 Windows Server 2019에서는 아님 로컬 시스템 계정으로 권한 상승을 가능하게 하는 로컬 권한 상승 익스플로잇입니다. 간단히 설명하자면, 실제 WinRM 서비스를 가장하여 포트 5985에서 들어오는 연결을 수신합니다. 이는 해당 포트에 연결하려는 모든 서비스와 NTLM 인증을 협상하려는 최소한의 웹 서버일 뿐입니다. 그러면 BITS 서비스Local...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

lmg

Linux Memory Grabber Linux 메모리 덤프 및 VolatilityTM 프로필을 생성하는 스크립트. Hal Pomeranz [email protected], 2020-02-01 감사의 말 "만약 내가 더 멀리 보았다면, 그것은 거인의 어깨 위에 서 있었기 때문이다." 아이작 뉴턴 이 간단한 도구를 가능하게 만든 많은 분들께 감사드립니다: -- AVML을 제공해 주신 Microsoft의 좋은 분들 -- LiME 작업을 해 주신 Joe Sylve -- 지속적으로 작업을 이어오고 있는...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: ES File Explorer の認証なしHTTPサービス CVE-2019-6447 に対して独立に実装された、安全性に配慮した研究用ハーネスと技術分析です。これは、Android 版 ES File Explorer の脆弱なバージョンが公開する認証なしHTTPサービスを対象としています。 許可された研究のみに使用してください。 このプロジェクトは、自分が所有するデバイス、またはテストの明示的な許可を得たデバイスに対してのみ使用してください。CLI...

DumpSMBShare

Windows SMB 공유에서 원격으로 파일과 폴더를 덤프하는 파이썬 스크립트입니다. 기능 --list-shares 옵션으로 공유 목록만 표시. 주어진 확장자--extensions로만 파일을 선택하거나 모든 파일을 선택. --dump-dir 옵션으로 덤프할 로컬 폴더 선택. --base-dir 옵션으로 공유 내에서 검색할 기본 폴더 선택. 사용법 root@kitploit: $ ./DumpSMBShare.py -h DumpSMBShare v1.3 - by Remi GASCOU Podalirius usage: Dump.py -h ...

sagex3-cve-2020-7388-poc

sagex3-cve-2020-7388-poc CVE-2020-7388 の概念実証エクスプロイトコードです。Sage X3 の AdxDSrv サービスに対する、SYSTEM 権限での未認証リモートコード実行 RCE を実証します。 Overview Sage X3 は、AdxAdmin コンポーネントの一部であるプロセス「AdxDSrv.exe」の下で、TCP/1818 ポート（デフォルト。変更可能）に管理サービスを公開しています。このサービスは、Sage X3 Console を介した Sage ERP...

tmpmail

A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...

kern

kern：一个快速、免 root 的沙箱和虚拟资源运行时，适用于任何工作负载，包括不可信和 AI 生成的代码。 约 3.5 ms 启动一个真正由内核强制的容器，仅凭一个 1.52 MB 的二进制文件，且无需守护进程。 空闲时 0 RAM · 无守护进程、无套接字、无需启动任何东西 · 一个静态二进制文件，libc 是其唯一的 Rust 依赖 %20%C2%B7%20ARM%20boards-informational.svg root@kitploit: install the release binary static, 1.52 MB, checksum-verified by th...

ZEROScan

ZEROScan 概要 ZEROScan はマルチスレッド脆弱性検出フレームワークです。これを利用することで、脆弱性検出プラグインを簡単に入手または開発し、対象に対してペネトレーションテストを実施できます。インターフェースと使い方は metasploit-framework を参考にしており、プラグインの使用と開発が容易です。 特徴 マルチスレッド並列モードをサポート ミニマルなスクリプト記述で、ドキュメント不要 Linux, Windows, Mac OSX, BSD をサポート インストール root@kitploit: $ git clone...

PT-2026-81312

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The...

PT-2026-81352

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default security.yaml allows /usr/bin/git, while security.go omits ! from containsShellMetacharacters and containsDangerousShellConstructs and applies no per-executable argument policy. A...

FreeBSD-SA-26:57.unix

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:57.unix Security Advisory The FreeBSD Project Topic: Use-after-free in unix SOCKSTREAM message handling Category: core Module: unix Announced: 2026-08-25...

FreeBSD-SA-26:62.tty

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:62.tty Security Advisory The FreeBSD Project Topic: Kernel use-after-free via tty ioctls Category: core Module: tty Announced: 2026-08-25 Credits: tsune of...

FreeBSD-SA-26:58.sound

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:58.sound Security Advisory The FreeBSD Project Topic: Kernel use-after-free via the SNDCTLDSPSYNCSTART ioctl Category: core Module: sound Announced:...

PT-2026-81507

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

PT-2026-81860

GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...

PT-2026-81901

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...