439 matches found
fusionauth-samlv2
fusionauth-samlv2 هذا المستودع يوفّر ارتباطات SAML v2.0 بلغة Java باستخدام JAXB. ستستخدم هذه المكتبة لمعالجة طلبات واستجابات SAML. راجع الاختبارات للحصول على أمثلة على الكود. الإفصاحات الأمنية إذا وجدت ثغرة أمنية أو خطأ آخر متعلقًا بالأمان، يرجى الإبلاغ عن الثغرة هنا قبل فتح issue على GitHub. سيس...
Log4j_CVE-2021-44228
Log4j CVE-2021-44228 समाधान विचार करें कि क्या आपको वास्तव में Log4j2 Core की आवश्यकता है। सबसे अधिक संभावना है, आपका अपना कोड या कोई तृतीय-पक्ष लाइब्रेरी जिस पर आप निर्भर हैं केवल Log4j के लॉगिंग API फ़ेसाड की आवश्यकता है - लेकिन दूसरे बैक-एंड पर लॉग कर सकता है। इसलिए आप केवल...
twitter-advanced-search
🔍 Ricerca Avanzata su Twitter Questi operatori funzionano su Web, Mobile, Tweetdeck. C'è qualche sovrapposizione, ma in gran parte questi non funzioneranno per le API di v1.1 Search, Premium Search o v2 Search. Adattato da TweetDeck Help, @lucahammer Guida, @eevee Manuale di Twitter, @pushshift e...
Defender_Exclusions-BOF
BOF per le esclusioni di Defender Cosa Un BOF per determinare le esclusioni di Windows Defender: Estensioni Processi Cartelle Perché Esempi di utilizzo del compilatore C++ per creare BOF senza la necessità delle dereferenziazioni intermedie della vtable. Compilazione root@kitploit: cd src make al...
BadExclusionsNWBO
BadExclusions Now With Better Opsec BadExclusionsNWBO è un'evoluzione di BadExclusions per identificare esclusioni di cartelle personalizzate o non documentate su AV/EDR. Come funziona? BadExclusionsNWBO copia ed esegue HookChecker.exe in tutte le cartelle e sottocartelle di un dato percorso. Dev...
DOCxNGINxFX
WORDLISTxGENERATORxFX Versão 1.0 Versão 2.0 WORDLISTxGENERATORxFX renomeado para DOCxNGINxFX Versão 3.0 DOCxNGINxFX Escrevi isto para retribuir algo à grande e poderosa comunidade de código aberto que compartilha seus conhecimentos ou frameworks e de quem tanto aprendi. A função principal da...
morty
Morty Web content sanitizer proxy as a service Morty rewrites web pages to exclude malicious HTML tags and attributes. It also replaces external resource references to prevent third party information leaks. The main goal of morty is to provide a result proxy for searx, but it can be used as a...
ffufw
ffufw ffuf com aquele molho especial Instalação root@kitploit: go install github.com/puzzlepeaches/ffufw@latest Por quê? O ffufw é um wrapper em torno do ffuf para tornar o bruteforce de diretórios mais fácil e inteligente. A ferramenta possui os seguintes recursos: Execução multithread de comand...
resolvers
Resolvers The most exhaustive list of reliable DNS resolvers resolvers.txt: A simple list of resolver IP addresses, which you can pass directly to your DNS enumeration tool. resolvers-extended.txt: All of the resolvers in resolvers.txt with additional information about each server, including the...
golddigger
Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...
TimeException
Haftungsausschluss Dieses Tool dient ausschließlich Bildungszwecken. Alle Handlungen und Aktivitäten im Zusammenhang mit dem in diesem Repository enthaltenen Material liegen in Ihrer alleinigen Verantwortung. Die missbräuchliche Verwendung dieses Tools kann zu strafrechtlichen Anklagen gegen die...
CVE-2026-14978
go-slug v0.4.0-v0.18.2 mishandles Unicode normalization during .terraformignore matching (CWE-176), allowing files differing only by normalization form to bypass exclusions and be uploaded to Terraform Cloud/Enterprise, exposing sensitive local files. Fixed in v0.18.3; no workaround provided. Exp...
CVE-2026-14978 Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions
HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...
Security Bulletin: Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions
Summary The github.com/hashicorp/go-slug library before v0.18.3 is vulnerable to an exclusion bypass in .terraformignore handling that may allow files intended to be excluded from Terraform Cloud or Terraform Enterprise working directory uploads to be included instead on affected macOS filesystem...
OESA-2026-3191 python-setuptools security update
Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages. Security Fixes: setuptools is a package that allows users to download, build, install, upgrade, and...
PT-2026-66545
Name of the Vulnerable Software and Affected Versions Leantime version 3.6.2 Description An issue exists where the Laravel VerifyCsrfToken middleware is excluded from the global middleware stack in app/Http/Kernel.php. This allows unauthenticated attackers to perform state-changing actions on...
EUVD-2026-42323
setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision NFC/NFD on macOS APFS/HFS+...
GHSA-H35F-9H28-MQ5C setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
Summary When building a source distribution python -m build --sdist / setup.py sdist, setuptools' FileList applies MANIFEST.in directives exclude, global-exclude, recursive-exclude, prune by matching a compiled glob against on-disk file names byte-for-byte, with no Unicode normalization. On...
CVE-2026-65065
Summary: CVE-2026-65065 affects Data::RoaringBitmap::Shared before 0.02 for Perl. The code creates a shared mmap backing file via open(path, O_RDWR|O_CREAT, 0666) with mode 0666, yielding a world-readable 0644 file after umask. Absence of O_NOFOLLOW allows following a symlink, and absence of O_EX...
