2168 matches found
packj
Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...
missing-cve-nuclei-templates
Weekly updated list of missing CVEs in nuclei templates official repository Note This repository is 100% automated so there can be errors, but in general is pretty accurate. Go to section "How it works" to understand how data is collected. Stats 📊 CVEs analyzed : 172424 CVEs missing : 68205...
Xstream-1.4.17
Xstream-1.4.17 The above Xstream Demo environment was built by me. The vulnerability exploitation environment is based on JDK1.8u131. It currently supports local testing and HTTP remote packet sending. XSTREAM=1.4.17 vulnerability reproduction CVE-2021-39141, CVE-2021-39144, CVE-2021-39150,...
zap-scripts
zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: root@kitploit: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to u...
manul
Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start root@kitploit: pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3...
bluemonday
bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...
zipbrk
zipbrk 2.2.0 Zip break is a tool to disect, modify, and reassemble zip files for a variety of tasks. It is designed to be cross-platform and as simple as possible to port between varied systems. It has been tested on Windows 9x/2k/XP, Windows Vista/7/8, Fedora 23/24/25/26/27, Kali, Debian 8/9,...
patch-checker
PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...
ioctlance
IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...
versionscan
versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...
CLSA-2026-1790157664 TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 29 CVEs. Fixed in 5.2.10.RELEASE-tuxcare.1...
CLSA-2026-1790123797 TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 25 CVEs. Fixed in 5.3.3-tuxcare.1...
CLSA-2026-1790110789 TuxCare security update for fastify (3 CVEs)
TuxCare rebuilt fastify to address 3 CVEs. Fixed in 5.2.1-tuxcare.2...
CLSA-2026-1790106019 TuxCare security update for 8 packages (3 CVEs)
TuxCare rebuilt 8 packages to address 3 CVEs. Fixed in 2.10.15-tuxcare.8...
CLSA-2026-1790102888 TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 11 CVEs. Fixed in 5.3.27-tuxcare.10...
CVE-2018-13379
IOC's for CObalt Strike/CVE-2018-13379 All credit goes to Awake/Arista/https://www.linkedin.com/in/kevin-romano-48071a42/ IOCs copied from DD: https://awakesecurity.com/blog/exploiting-cve-2018-13379-a-case-study-of-threat-actors-exploiting-years-old-cves/...
CLSA-2026-1790091120 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.7-tuxcare.10...
CLSA-2026-1790091092 TuxCare security update for org.springframework (13 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 13 CVEs. Fixed in 5.3.6-tuxcare.2...