gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...

PT-2026-81052

Name of the Vulnerable Software and Affected Versions ACPT Pro - Custom Post Types Plugin for WordPress versions 2.0.63 and earlier Description PHP Object Injection occurs when an application deserializes untrusted data, allowing an attacker to manipulate the resulting object and potentially...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

gha-lab-7ccf56a2a4

HomeAssistant - Tapo : Contrôle des caméras Composant personnalisé - Tapo : Contrôle des caméras - pour ajouter les caméras, sonnettes et carillons Tapo dans Home Assistant ⭐ Expose désormais également un flux pour les appareils sans capacités RTSP ou ONVIF. Installation Copiez le contenu de...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin...

litmus

लिटमस क्लाउड-नेटिव कैओस इंजीनियरिंग...

ids-traffic-analysis

Network Intrusion Detection and Traffic Analysis Platform Thi...

CVE-2025-13486

Mass Exploit CVE-2025-13486 Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - अनधिकृत दूरस्थ कोड निष्पादन prepareform में ⚠️ भेद्यता विवरण Advanced Custom Fields: Extended वर्डप्रेस प्लगइन संस्करण 0.9.0.5 से 0.9.1.1 में prepareform फ़ंक्शन के माध्यम से दूरस्थ कोड निष्पादन की भेद्यता है। यह इस...

EvilCrowRF_Custom_Firmware_CC1101_FlipperZero

EvilCrowRFCustomFirmwareCC1101FlipperZero Idée, développement et implémentation de ce firmware : h-RAT https://github.com/h-RAT/. Discord : hrat Idée, développement et implémentation du firmware original : Joel Serna @JoelSernaMoreno - https://github.com/joelsernamoreno/. Collaborateur principal ...

Sigma-Rules

Sigma-Rules मेरे अपने Sigma डिटेक्शन नियमों का एक रिपॉजिटरी।...

SLAE

SecurityTube Linux Assembly Expert यह ब्लॉग पोस्ट SecurityTube Linux Assembly Expert प्रमाणन की आवश्यकताओं को पूरा करने के लिए बनाई गई है: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ छात्र आईडी: SLAE-1134 लेख असाइनमेंट 1: Linux x86 IPv4, IPv6, और डुअल नेटवर...

CVE-2026-75932

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

EUVD-2026-63997

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

CVE-2026-75932 Jet Admin tenant isolation failure

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

CVE-2026-75932

CVE-2026-75932 is a tenant isolation failure in Jet Admin (a web-based admin platform). An unauthenticated attacker can create a malicious app, connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected, t...

CVE-2026-55621

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing the name of a project that they don't have access to and the name of a custom volume in that project can copy the custom volume t...

CVE-2026-55621

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing the name of a project that they don't have access to and the name of a custom volume in that project can copy the custom volume t...

CVE-2026-55621

Incus , a system container and virtual machine manager, has a missing authorization check in its custom volume copy functionality prior to version 7.2.0 . An authenticated attacker who knows the name of a project they lack access to and a custom volume within that project can copy the volume to a...

CVE-2026-55621 Incus has a project restriction bypass for custom volume copy across projects

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing the name of a project that they don't have access to and the name of a custom volume in that project can copy the custom volume t...