rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

tricorne

Tricorne A Fedora Remix for offensive security. "My treasure? If you want it, I'll let you have it. Seek it out! I left everything at that place!" Gol D. Roger The short version Kali owns Debian. BlackArch owns Arch. Parrot owns the "security-focused desktop" niche. No one owns RPM-world offensiv...

ageverificationbypass

AgeVerificationBypass AVB The Sanctuary Protocol for Sovereign Systems Why do I need to provide an ID to log into a Linux VM? This is not appropriate. 🚨 The Problem: The Archon Age-Gate As of 2026/2027, major distributions Ubuntu and Fedora have begun integrating the...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

it355-lab4-enterprise-lan-security

IT355 Lab 4: Enterprise LAN Security & Shellshock Analysis 📌 Project Overview This repository contains a comprehensive security assessment of an enterprise LAN environment. The core focus of this project was the identification, exploitation, and remediation of the Shellshock CVE-2014-6271...

CVE-2024-3094_xz_check

CVE-2024-3094 xz Check Script This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as specified by CVE-2024-3094. See the description and impact statement below from information available via RedHat...

CVE-2021-4154

CVE-2021-4154 This bug was fix in https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b This exploit works on most pre-patch kernels for: CentOS 8 kernels higher than linux-4.18.0-305.el8 Debian 11 kernels higher than 5.10.0-8 Fedor...

CVE-2022-27666

CVE-2022-27666 This is the exploit for CVE-2022-27666, a vulnerability that achieves local privilege escalation on the latest Ubuntu Desktop 21.10. Our preliminary experiment shows this vulnerability affects the latest Ubuntu, Fedora, and Debian. Our exploit was built to attack Ubuntu Desktop...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser. What can an instantbox do? 1. provides a clean Linux environment for a presentation 2. let...

[SECURITY] Fedora 45 Update: openjpeg-2.5.4-5.fc45

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profile-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multiple...

[SECURITY] Fedora 45 Update: ImageMagick-7.1.2.34-1.fc45

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

CVE-2023-6246

Tested on default fedora WS 38...

CopyFail-Patcher

Patcher script for CVE-2026-31431 This repo provide script for the CopyFail vulnerability, for Debian/Ubuntu/RHEL/Fedora, didn't test on other distros but anyway... Just follow these : $ git clone https://github.com/mhdgning131/CopyFail-Patcher.git $ cd CopyFail-Patcher $ chmod +x patchcopyfail.s...

FEP3370-advanced-ethical-hacking

DynoRoot CVE-2018-1111 Final project for the course Advanced Ethical Hacking at KTH, Stockholm This project demonstrates a known vulnerability of Fedora and RedHat machines related to an unsafe client-side implementation of the Dynamic Host Configuration Protocol DHCP. A rogue DHCP server can cra...

abrt_root

Overview This repository contains an exploit PoC for CVE-2025-12744, a local privilege escalation vulnerability in default installations of Fedora Linux versions 43 and below, both Desktop and Server. The flaw stems from a command injection in the ABRT daemon, allowing any local user to gain root...

Fedora 43 : brotli / perl-Alien-Brotli (2026-4aade61415)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-4aade61415 advisory. Brotli 1.2.1 update which is security fix for CVE-2026-111497 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 44 : libreswan (2026-fe33d29b75)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fe33d29b75 advisory. Fixes CVE-2026-77205, CVE-2026-77206, CVE-2026-77207 and CVE-2026-9445 Tenable has extracted the preceding description block directly from the Fedor...

Fedora 44 : python-pillow (2026-4dcd14a170)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4dcd14a170 advisory. Backport fix for CVE-2026-112892. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 44 : clevis (2026-9379466325)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9379466325 advisory. Add new sources release 24 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 43 : libreswan (2026-92b72db5d7)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-92b72db5d7 advisory. Fixes CVE-2026-77205, CVE-2026-77206, CVE-2026-77207 and CVE-2026-9445 Tenable has extracted the preceding description block directly from the Fedor...