nodejs:22 security update

An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

php:7.4 security, bug fix, and enhancement update

An update is available for module.php-pecl-xdebug, module.libzip, php, module.php-pecl-rrd, php-pecl-apcu, module.php-pecl-apcu, libzip, php-pecl-zip, php-pecl-rrd, module.php, php-pecl-xdebug, php-pear, module.php-pear, module.php-pecl-zip. This update affects Rocky Linux 8. A Common Vulnerabili...

wget security, bug fix, and enhancement update

An update is available for wget. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, a...

libssh security update

An update is available for libssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libssh is a library which implements the SSH protocol. It can be used to...

WordPress MotoPress Appointment Booking plugin < 2.4.8 - Unauthenticated Arbitrary Reservation Deletion vulnerability

Unauthenticated Arbitrary Reservation Deletion vulnerability discovered by Ahmed Hashim Ismael in WordPress Plugin MotoPress Appointment Booking versions 2.4.8...

CVE-2025-1094-Lab-Setup

🛠️ Configuration du laboratoire CVE-2025-1094 ⚠️ Avertissement Ce laboratoire est destiné uniquement à des fins éducatives et de recherche. N'utilisez PAS les informations ou techniques présentées ici sur des systèmes que vous ne possédez pas ou pour lesquels vous n'avez pas d'autorisation...

secretlint v13.0.5

Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...

CVE-2026-21876

CVE-2026-21876 Contournement WAF OWASP CRS Conteneur docker CVE-2026-21876 + PoC minimal. Je tiens à remercier séparément @airween et @fzipi pour leur réponse rapide ! Le correctif de la vulnérabilité a été prêt en très peu de temps. PoC root@kitploit: POST /submit HTTP/1.1 Host: localhost...

CVE-2021-26085

CVE-2021-26085 POC de la vulnérabilité de lecture arbitraire de fichier avant authentification dans Atlassian Confluence Server 7.5.1 Points de terminaison vulnérables : root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml...

Security Bulletin: IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent are vulnerable to improper encoding in Apache Log4j [CVE-2026-49844]

Summary IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent are vulnerable to Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API, which produces output that is not valid JSON CVE-2026-49844. This...

CVE-2024-36971

CVE-2024-36971 — 概念验证（仅限研究与分析） ⚠️ 免责声明 — 使用本仓库前请阅读 本仓库仅 用于防御性研究、分析和负责任的报告 。 它包含一个不可利用的概念验证文件，名为 CVE-2024-36971，以及一个公开可用的 Android 内核头文件片段（sock.h），用于说明受影响的区域。 不提供任何漏洞利用代码、复现命令或逐步操作说明。 请不要 在正式设备、第三方系统或非您控制的网络上运行本仓库中的任何文件。作者对误用不承担任何责任。 目录 1. 概述 2. 仓库内容 3. 高级技术摘要 4. 关于包含的 sock.h 片段 5. 研究环境（高级，不可操作） 6...

CVE-2024-1939

CVE-2024-1939 Ceci est un court rapport pour la CVE-2024-1939, que j'ai utilisée pour réclamer V8CTF M122. La cause racine de ce problème est le manque de prise en charge de kWasmS128 dans la conversion wasm-to-js. Plus précisément, les opérations wasmS128Const se produisant dans les piles de...

CVE-2025-57529

CPAS-bug CPAS审计管理信息系统存在SQL注入漏洞 北京优达数聚科技有限公司 域名: http://youdatasum.com 信息 root@kitploit: CVE-ID: CVE-2025-57529 受影响版本: findArchiveReportByDah@RequestParamvalue = "pageNum", defaultValue = "0" int pageNum, @RequestParamvalue = "pageSize", defaultValue = "10" int pageSize, @RequestParamvalue =...

git-hound

🐾 GitHound A pattern-matching, patch-attacking, batch-catching secret snatcher. Overview GitHound hunts down exposed API keys, secrets, and credentials across GitHub by pairing GitHub dorks with pattern matching, contextual detection, and commit-history analysis. Input a GitHub dork into GitHound...

CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

🔐 CVE-2024-38063 — IPv6 TCP/IP 远程代码执行分析 📌 项目描述 本项目提供了对关键漏洞 CVE-2024-38063 的技术分析与实际演示 ，该漏洞由微软在 2024年8月13日的补丁星期二 披露。 该漏洞影响 Windows TCP/IP 协议栈，特别是内核驱动中实现的 IPv6 组件 ： C:\Windows\System32\drivers\tcpip.sys 由 昆仑实验室 的安全研究员 XiaoWei 发现，该漏洞可能允许攻击者通过利用 IPv6 扩展头的错误处理来实现远程代码执行（RCE） 。 🎯 目标 理解现代协议为何可能引入安全风险 分析...

appmon

Добро пожаловать в AppMon! Как было показано на США и ЕС AppMon — это автоматизированный фреймворк для мониторинга и модификации системных API-вызовов нативных приложений macOS, iOS и Android. Он основан на Frida. Этот проект стал возможен только благодаря Ole André Vadla Ravnås , и я посвящаю ег...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

CVE-2025-68493

CVE-2025-68493 CVE-2025-68493 7. Referencias 1 Vulnerabilidad ApacheStrutsXWorkXML CVE-2025-68493 PoC y script | ZONE.CI Red Global. https://zone.ci/secarticles/wx/486533.html 8. Verificación y explotación de la vulnerabilidad Para verificar y explotar la vulnerabilidad CVE-2025-68493, se pueden...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg is a Java RMI vulnerability scanner and can be used to identify and verify common security vulnerabilities on Java RMI endpoints...

vphone-cli

🇰🇷한국어 | 🇯🇵日本語 | 🇨🇳中文 | 🇬🇧English vphone-cli PCC 리서치 VM 인프라를 사용하여 Apple의 Virtualization.framework로 가상 iPhone을 부팅합니다. 사전 요구 사항 호스트: Apple Silicon macOS 15+ Sequoia Xcode + iOS SDK 게스트 데몬 크로스 컴파일용 서명되지 않은 바이너리로 private PV=3 권한을 허용하기 위한 SIP/AMFI 완화 의존성: root@kitploit: brew install...