packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

badssl.com

テストサブドメインのリストについては、badssl.com をご覧ください。以下を含みます： self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com サーバー設定 標準のUbuntu VM、badssl.com. および .badssl.com. のDNS AレコードをVMにポイントしています。...

catphish

CATPHISH フィッシング攻撃用の類似ドメインを生成します。期限切れドメインおよびそのカテゴリ化されたステータスを確認して、プロキシカテゴリ分類を回避します。ホワイトリストに登録されたドメインはC2サーバーに最適です。Red Teamの活動に最適です。 Installation root@kitploit: bundle install Current Algorithms SingularOrPluralise prependOrAppend doubleExtensions mirrorization homoglyphs dashOmission Punycode Versio...

CVE-2022-24449

CVE-2022-24449 Solar Appscreener XXE 建议描述 在 Solar AppScreener SAST 工具至 3.10.4 版本中发现一个问题。未授权的攻击者可能利用安装了受影响版本的主机，通过上传特制的 XML 文件到主机（这些主机的许可证已过期或未安装），从而进行攻击。最低确认的影响是 XXE-SSRF。 附加信息 已在 3.10.4 版本中修复 漏洞类型 CWE-611：XML外部实体引用限制不当 供应商 SOLAR SECURITY LLC https://en.rt-solar.ru/ 受影响产品代码库 受影响版本：Solar Appscreen...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

domainhunter

Domain Hunter 作者：Joe Vest @joevest 和 Andrew Chiles @andrewchiles 域名选择是渗透测试尤其是红队行动准备中的重要环节。通常，那些先前用于合法用途且已被正确分类的域名，只需几美元即可购买。这类域名可以帮助团队绕过基于信誉的Web过滤器和网络出口限制，用于钓鱼和C2相关任务。 这款基于Python的工具旨在快速查询Expireddomains.net搜索引擎，寻找已过期/可用的、具有先前使用历史的域名。然后，它可以选择性地针对Symantec Site Review（BlueCoat）、IBM X-Force和Cisco...

CVE-2026-77860

A flaw was found in Unbound. A remote attacker can exploit a vulnerability in the 'serve-expired' code path by sending specially crafted DNS queries. This manipulation causes a double decrement of a security counter, effectively bypassing a protection mechanism designed to limit pending queries...

AZL-101718 CVE-2026-77860 affecting package unbound 1.26.0-1

In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP essentially bypassing one of the counter measures that was introduced for DNSBomb CVE-2024-33655. A malicious actor can...

CVE-2026-77860

In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP essentially bypassing one of the counter measures that was introduced for DNSBomb CVE-2024-33655. A malicious actor can...

CVE-2026-77860

NLnetLabs Unbound versions 1.20.0 through 1.26.0 are affected by a double-decrement flaw in the serve-expired code path that causes the per-client wait-limit counter to be decremented twice. An attacker controlling an authoritative zone with short TTLs can alternate "slow" queries (never answered...

CVE-2026-77860

In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP essentially bypassing one of the counter measures that was introduced for DNSBomb CVE-2024-33655. A malicious actor can...

EUVD-2026-80286

In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP essentially bypassing one of the counter measures that was introduced for DNSBomb CVE-2024-33655. A malicious actor can...

Linux Distros Unpatched Vulnerability : CVE-2026-77860

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' count...

CVE-2026-46455

CVE-2026-46455 — camel-keycloak: Verificación ISACTIVE faltante Tokens expirados aceptados Reproductores de prueba de concepto ejecutables para la misma vulnerabilidad de Apache Camel, uno por entorno de ejecución:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket The Dst objects are leaked in ip6negativeadvice, when this function is executed for an expired IPv6 route located in the exception table. There are several conditions that...

MagicSigner

MagicSigner 用于 signtool 的补丁 DLL，允许使用过期证书进行签名 用法 只需将 XmlLite.dll 放在 signtool.exe 旁边即可 演示 使用 MagicSigner 之前 使用 MagicSigner 之后 替代方案 你也可以直接将计算机的时钟调回去。但这需要管理员权限，并且往往会破坏其他应用程序，因为它会使 TLS 连接（如 HTTPS）当时使用的所有证书失效。 如何防范 只需应用 Microsoft 易受攻击的驱动程序阻止列表，其中包含所有已知的泄露证书。 许可证 root@kitploit: BSD 零条款许可证 版权所有 c 2023...

CVE-2026-78123

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

AZL-100037 CVE-2026-78123 affecting package strongswan 5.9.14-10

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

DEBIAN-CVE-2026-78123

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

CVE-2026-78123

strongSwan (IKE/IPsec suite) versions 5.0.2 through 6.0.7 contain an expired pointer dereference (undefined memory access) in the openssl plugin during PKCS#7 container parsing , which can result in a crash and denial of service. The CVSS 3.1 score is 5.9 (Medium) with high attack complexity and ...