The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the inclusion of functions from an unreliable and uncontrolled area, allows a perpetrator to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

openSUSE 16: glab / glab-bash-completion / glab-fish-completion / etc (openSUSE-SU-2026:21662-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21662-1 advisory. Changes in glab: - Update to version 1.114.0: featapi: support dynamic custom headers for authenticating proxies featartifact-registry: add glab...

openSUSE 16 Security Update : gh (openSUSE-SU-2026:21663-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21663-1 advisory. Changes in gh: - Update to version 2.98.0: chore: fix extra whitespace Default Codespaces port forwarding to loopback Bump gh-aw-actions to...

PT-2026-82890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where a virtio net hdr used in tun/tap or AF PACKET with PACKET VNET HDR can incorrectly mark IPv4 or IPv6 fragments as Generic Segmentation Offload GSO. The functions in...

PT-2026-83102

gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to trigger an index out of bounds panic, aborting the clien...

GraftyVul: Synthesising Insecure Programs through Real-World Vulnerability Grafting

Vulnerability datasets underpin a wide range of security research, including vulnerability detection, automated remediation, and secure code generation. However, existing datasets sacrifice at least one of three desirable properties: diversity of language or vulnerability type,...

The vulnerabilities of the Repo.blame() and Repo.blame_incremental() functions, which are part of the security mechanism for the unsafe_git_revision_options library in the Python library for interacting with Git repositories in GitPython, allow attackers to gain unauthorized access to protected information.

The vulnerability of the Repo.blame and Repo.blameincremental functions in the GitPython library’s unsafegitrevisionoptions protection mechanism is related to the implementation or modification of arguments. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

PT-2026-83103

gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state and open functions to repositories outside .git/modules...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21645-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21645-1 advisory. This update for trivy fixes the following issue: - CVE-2026-72815,CVE-2026-72816,CVE-2026-72817: github.com/go-chi/chi/v5: multiple IP spoofing...

ansible-role-cve

Ruolo Ansible: CVE Questo ruolo mitiga/applica patch alle CVE definite. Variabili del Ruolo Vulnerabilità Dirty COW. http://dirtycow.ninja. Il valore predefinito è false. Questa mitigazione dovrà essere eseguita ogni volta che il server su cui è stata applicata viene riavviato. root@kitploit:...

CVE-2022-39275

CVE-2022-39275 POC per CVE-2022-39275. Risorse per l'advisory: NIST NVD CVE.org Github Security Advisory Questo è un fork del commit hash: 47f9f5fb29be2b5892c79ace4f23022f397a0a5e link, semplicemente ripushato perché c'erano anche dei git submodule che dovevano essere modificati. Setup del POC...

CVE-2024-28085

Wall-Escape CVE-2024-28085 Il comando wall di util-linux non filtra le sequenze di escape dagli argomenti della riga di comando. Il codice vulnerabile è stato introdotto nel commit cdd3cc7fa4 2013. Ogni versione successiva è vulnerabile. Un rapporto completo è disponibile qui. Ho soprannominato...

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

Client Java per Kubernetes Client Java per l'API di kubernetes. Versionamento del client Il client Java utilizza il Semantic Versioning. Incrementiamo il numero di versione major ogni volta che rigeneriamo il client per una nuova versione di Kubernetes vedi la tabella sotto. Ogni volta che lo...

apache__jspwiki_CVE-2022-46907_2-11-3

Apache JSPWiki 2.11 - Documentazione root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

awscanner

awscanner Informazioni Trova le risorse esposte su internet in un account AWS. I risultati della scansione verranno inseriti nella cartella results https://owasp.org/www-project-awscanner/ Installazione root@kitploit: git clone https://github.com/OWASP/awscanner.git pip install aws-shell cd...

zarp

Introduzione Zarp è uno strumento di attacco di rete incentrato sullo sfruttamento delle reti locali. Questo non include lo sfruttamento dei sistemi, ma piuttosto l'abuso dei protocolli e degli stack di rete per prendere il controllo, infiltrarsi e mettere fuori uso. Le sessioni possono essere...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu è un...

weape

wEAPe Weape-Wireless-EAP-Extractor Script ============================================ Estrae automaticamente i nomi utente EAP 802.1x Sviluppato da Daniel Compton presso Info-Assure Ltd https://github.com/commonexploits/weape.git Installazione root@kitploit: git clone...

Malicious code in pushgitquickx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557f230f5bf78b909b207a6568053a346e32a2fcbd14130a824bd6de8fc7fbf6 The push subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error text and JSON-serialized git...

MAL-2026-14578 Malicious code in pushgitquickx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557f230f5bf78b909b207a6568053a346e32a2fcbd14130a824bd6de8fc7fbf6 The push subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error text and JSON-serialized git...