60 matches found
scannerl
Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...
trivy
📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image...
copy_fail_mitigation
copyfailmitigation 1. このスクリプトは、copyfail攻撃を緩和することを目的としています。CVE-2026-31431 2. Kali、ParrotSec、BlackArchなど、すべてのDebian/Ubuntu Archベースのプラットフォームで動作します。 使用方法: 3. cd 4. chmod +x copyfailmitigation.sh 5. rootとして実行することを推奨します。 6. ./copyfailmitigation.sh...
ssh-hardening
SSHの強化 Debian/Ubuntu でのSSHを一度にロックダウン：新しいポート、rootログイン禁止、鍵ベースの認証、オプションのUFWとFail2Ban。 表示される内容 スクリプトを実行すると、OSを検出し、設定を表示してから続行するかどうかを尋ねます： クイックスタート（ステップバイステップ） 1️⃣ gitのインストール（必要な場合） Debian/Ubuntuの場合： root@kitploit: sudo apt-get install -y git 2️⃣ リポジトリのクローンとフォルダへの移動 root@kitploit: rm -rf ssh-hardening...
CPLHF
CyberPatriot Linux 加固工具包 一个模块化的 Bash 工具包，用于在比赛时间压力下加固 Debian/Ubuntu 系列系统。在多个赛季的 CyberPatriot 全国青少年网络防御竞赛 中构建并不断完善，最近在 2025 年半决赛中获得了 Linux 组别的白金级别。 这不是一个通用合规框架。它是一个针对六小时限时演练的检查清单自动化工具：它正确、快速且幂等地完成 Linux 加固过程中可脚本化的绝大部分工作，记录它触及的所有内容，并将需要判断的决策留给运行它的人。 目录 为什么存在这个项目 架构 快速开始 它实际做了什么 比赛安全注意事项 配置 仓库布局 测试...
CVE-2022-0543
CVE-2022-0543 - Redis Lua サンドボックスエスケープによるリモートコード実行 Debian/Ubuntu CVE-2022-0543 は、DebianベースのLinuxディストリビューション （DebianやUbuntuを含む）上のRedisに影響を与える重大なセキュリティ脆弱性です。この脆弱性はパッケージングの欠陥に起因し、Luaサンドボックスエスケープ を引き起こします。その結果、影響を受けるシステム上でリモートコード実行（RCE）が可能になります。 アップストリームのRedis自体は脆弱ではありません —...
Linux Distros Unpatched Vulnerability : CVE-2026-42792
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang...
CVE-2026-42792
Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...
CVE-2026-42792 epmd permanent DoS via EMFILE on accept(2) in erts
Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...
CVE-2026-50289
systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...
CVE-2026-50289 systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More
This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either. Forums are talking, researchers are finding easy cracks, and defenders have more cleanup waiting...
Linux Distros Unpatched Vulnerability : CVE-2026-41073
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10 and 6.0.0 through 6.0.2 contain a spreadsheet CSV/formula...
CVE-2025-13640
Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.41 allowed a local attacker to bypass authentication via physical access to the device. Chromium security severity: Low...
CVE-2025-13721
Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-13631
Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. Chromium security severity: High...
CVE-2025-12428
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...
CVE-2025-11756
Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
CVE-2025-11205
Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
