AutoProber

AutoProber AutoProber is the hardware hacker's flying probe automation stack for giving your agent everything it needs to go from "there's a new target on the plate" to probing individual pins in a safe way. Demo video: https://gainsec.com/autoprober-demo-mp4/ Flow 1. Tell the agent to ingest the...

CVE-2023-46003

CVE-2023-46003 Хранимый XSS в i-doit Pro 25 и ниже i-doit Pro 25 и ниже уязвимы для хранимой XSS-уязвимости. Это позволяет удаленным аутентифицированным злоумышленникам с низкими или высокими привилегиями сохранять опасные данные XSS-пейлоад или поддельную HTML-страницу в базе данных, которые буд...

CVE-2021-45232-RCE

CVE-2021-45232 CVE-2021-45232 Apache apisix Dashboard API несанкционированное RCE Версия: 2.10.1 Fofa: title="Apache APISIX Dashboard" POC: root@kitploit: IP:PORT/apisix/admin/migrate/export...

CVE-2026-79754

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...

CVE-2026-52832

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default NOP auth mode. The spec.handler field e.g., mymodule:myfunction is parsed by functionconfig.ParseHandler which split...

CVE-2026-53635

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function setcoursemodeprice at lms/djangoapps/instructor/views/instructordashboard.py:430 is decorated only with @loginrequired and performs no course-level permission check. An...

CVE-2026-45730

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnerability in Nuclio Dashboard's project management API, allowing any authenticated user without membership in the target project to bypass OPA authorization checks on write paths P...

IP-Biter

IP-Biter - Framework The Hacker-friendly Tracking Framework IP-Biter is an open source, easy to deploy, tracking framework that generate high configurables and uniques tracking images and links to embed in e-mails, sites or chat systems and visualize, in an hacker-friendly dashboard, high detaile...

Sirius

Sirius Scan Sirius is an open-source vulnerability scanner with automated discovery, CVE-based detection, and a modern web UI. Clone, run four commands, start scanning. Quick Start root@kitploit: git clone https://github.com/SiriusScan/Sirius.git cd Sirius docker compose -f...

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

agent-scanning

Control your AI agents. Track costs. Stay compliant. open-souce What It Does One dashboard to manage your AI team...

CVE-2026-79756

Nuclio is a serverless framework for real-time events and data processing. Prior to version 1.17.4 , an incomplete fix for unauthenticated OS command injection in the Nuclio dashboard on the local/Docker platform leaves the list-all resource path vulnerable: when no specific resource name is prov...

CVE-2026-79754 Nuclio: Kaniko build tempDir command injection

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...

CVE-2026-79754

Nuclio , a serverless framework for real-time events and data processing, is affected by a command injection in its Dashboard build pipeline. Between versions 1.6.19 and 1.17.1 , the spec.build.tempDir field is not sanitized before being used to construct a shell command. When the Kaniko containe...

EUVD-2026-70217

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...

CVE-2026-52832 Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default NOP auth mode. The spec.handler field e.g., mymodule:myfunction is parsed by functionconfig.ParseHandler which split...

EUVD-2026-70215

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default NOP auth mode. The spec.handler field e.g., mymodule:myfunction is parsed by functionconfig.ParseHandler which split...

CVE-2026-52832

Nuclio (a serverless framework for real-time event/data processing) is affected by an unauthenticated path traversal in the Dashboard's POST /api/functions endpoint. In the default NOP auth mode, the spec.handler field is parsed by functionconfig.ParseHandler() which splits on : without path vali...

gdb-dashboard

GDB dashboard GDB dashboard — это отдельный файл .gdbinit, написанный с использованием Python API, который предоставляет модульный интерфейс, показывающий соответствующую информацию об отлаживаемой программе. Его основная цель — сократить количество команд GDB, необходимых для проверки состояния...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...