Apache Druid - Remote Code Execution

Apache Druid is susceptible to remote code execution because by default it lacks authorization and authentication. Attackers can send specially crafted requests to execute arbitrary code with the privileges of processes on the Druid server. id: CVE-2021-25646 info: name: Apache Druid - Remote Cod...

ForgeRock OpenAM <7.0 - Remote Code Execution

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/ request to the server. The vulnerabilit...

the-few-chosen-ctf-2026

The Few Chosen CTF 2026 — Writeups Solutions, exploits, and w...

pingap v0.14.2

pingap Before the pingap version is stable, no pull requests will be accepted. If you have any questions, please create a new issue first. Overview Pingap is a high-performance reverse proxy powered by the Cloudflare Pingora . It simplifies operational management by enabling dynamic, zero-downtim...

Root-My-Device-Payloads

Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...

sj v2.8.2

sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...

Exploit for CVE-2026-65615

JFrog Artifactory Pre-authenticated RCE Full Attack Chain CVE...

smolvm v1.15.0

smolvm Ship and run software with isolation by default. This is a CLI tool that lets you: 1. Manage and run custom Linux virtual machines locally with: sub-second cold start, cross-platform macOS, Linux, Windows, elastic memory usage. 2. Pack a stateful virtual machine into a single file...

hermes-agent v2026.9.11

Hermes Agent ☤ Hermes Agent | Hermes Desktop The self-improving AI agent built byNous Research. It's the only agent with a built-in learning loop — it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a...

sakuda

sakuda sakuda is short for 「さくっとDAST」 "DAST, quickly...

eJPT-Prep-Guide

eJPT-Prep-Guide eJPT Junior Penetration Tester preparation a...

clawpatrol v0.5.10

clawpatrol The security firewall for agents. Claw Patrol sits between your agents and prod, parses their traffic at the wire, and gates each action against rules you write in HCL. For example, you can block destructive SQL, or pause kubectl delete pod until a human approves it before the request...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cifs-utils (UTSA-2026-054012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054012 advisory. cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = equal sign characters but is not a valid credentials file. Tenabl...

SENTINEL: A Multi-Pathway Architecture for Detecting Living-Off-The-Land APT Attacks on Windows Command Lines

Living-Off-the-Land LOTL is the dominant evasion technique of Advanced Persistent Threat APT actors, exploiting legitimate Windows utilities to conduct malicious operations without deploying custom malware and enabling state-sponsored campaigns to maintain persistent access within military and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2023-002404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002404 advisory. In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2026-090421)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090421 advisory. Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external...

Fedora 43 : elixir (2026-25056dbe2f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-25056dbe2f advisory. Elixir ver. 1.19.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000611)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000611 advisory. Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-002881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002881 advisory. A flaw was found in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091341 advisory. FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded...