github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.69 packages and security update

Red Hat OpenShift Container Platform release 4.15.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

Google-Dorker

nDorker Automate Dorking Faster and Better than Ever. What can it do? 1. Google Dorking 2. Vendor Dorking 3. Github Dorking 4. Shodan Dorking Get nDorker root@kitploit: git clone https://github.com/nerrorsec/nDorker cd nDorker Usage root@kitploit: python3 nDorker.py -d example.com Found a bug? Fe...

social-analyzer

Social Analyzer - API, CLI y aplicación web para analizar y encontrar el perfil de una persona en más de 1000 redes sociales/sitios web. Incluye diferentes módulos de análisis y detección, y puedes elegir qué módulos usar durante el proceso de investigación. Los módulos de detección utilizan un...

cypher

🌹 CYPHER TOOLS 🌹 作者：TMRSWRR 版本 1.0.0 密码学 一站式工具。 Instagram：Capture the Root 🖼️ 截图 🖼️ 📹 如何使用 📹 点击图片... 🧰 功能特性 🧰 本工具 包含： 📍 HASH 📍 RSA 📍 XOR 📍 AES ECC 📍 AES CBC 📍 DES ECB 📍 FERNET 📍 RC2 📍 RC4 📍 CHACHA20POLY1305 📍 TRANSPOSITION 📍 DIFFIE HELMAN 📍 图片加密/解密 📍 文件加密/解密 📀 安装 📀 使用 requirements.txt 安装...

cypher

🌹 CYPHER TOOLS 🌹 Written by TMRSWRR Version 1.0.0 All in one tools for CRYPTOLOGY. Instagram: Capture the Root 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image... 🧰 Features 🧰 This tool include: 📍 HASH 📍 RSA 📍 XOR 📍 AES ECC 📍 AES CBC 📍 DES ECB 📍 FERNET 📍 RC2 📍 RC4 📍 CHACHA20POLY1305 📍...

CVE-2026-87722

Gerrit Code Review versions 2.1.6 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 are vulnerable to Uncontrolled Resource Consumption (CWE-400 / CWE-1333). The root cause is the compilation of user-supplied regular expressions into unbounded dk.brics.automaton instances on the re...

CVE-2026-87722 Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review

Uncontrolled Resource Consumption CWE-400 / CWE-1333 in regex search query predicates such as RegexProjectPredicate, RegexRefPredicate, RegexPathPredicate, and sibling predicates and REST regex filter endpoints RegexListSearcher /projects/?r= and RefFilter /projects/project/branches/?r= in Gerrit...

1earn

Everything is hard at the beginning, and then it stays hard... Introduction : The original intention of this project is to share knowledge resources, allowing more people to access and understand the fields of security and operations. However, due to my limited ability, there will inevitably be...

Sealighter

Sealighter - Easy ETW Tracing for Security Research I created this project to help non-developers dive into researching Event Tracing for Windows ETW and Windows PreProcessor Tracing WPP. Features Subscribe to multiple ETW and WPP Providers at once Automatically parse events into JSON without...

rosenbridge

project:rosenbridge : hardware backdoors in x86 CPUs github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax Overview project:rosenbridge reveals a hardware backdoor in some desktop, laptop, and embedded x86 processors. The backdoor allows ring 3 userland code to circumvent processor...

github-endpoints

github-endpoints Encuentra endpoints en GitHub. Descripción Esta herramienta Go realiza búsquedas en GitHub y analiza los resultados para encontrar endpoints de un dominio determinado. Instalación root@kitploit: go install github.com/gwen001/github-endpoints@latest o root@kitploit: git clone...

CVE-2026-87721

Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 are vulnerable to Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g ). An unauthenticated remote attacker can trigger a persistent deni...

CVE-2026-87721 Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

iGPU-Leak

CVE-2019-14615: The iGPU-Leak Vulnerability Wenjian He, Wei Zhang, Sharad Sinha and Sanjeev Das. iGPU Leak: An Information Leakage Vulnerability on Intel Integrated GPU. In Proceedings of the 25th Asia and South Pacific Design Automation Conference ASP-DAC'20. View PDF View Slides What happened? ...

dhcpoptinj

DHCP 选项注入器 你是否曾想截获 DHCP 请求，并在发送者不知情的情况下悄悄塞入几个额外的 DHCP 选项？大概率没有。不过，如果真有此需要，dhcpoptinj 将（但愿能）帮到你。 为什么 篡改 DHCP 请求的原因可以有很多，尽管更可能的是你应该寻找一个更好的方法来解决你的问题。也许你无法访问 DHCP 服务器/客户端，却需要修改它们的 DHCP 选项；也许 DHCP 软件难以配置（或不支持你需要做的事情）；也许你有一个非常复杂和/或特殊的设置；又或者你只是想尝试发送畸形或错误格式的选项？dhcoptinj 还是有一点点可能真的派上用场。 如何工作 dhcpoptinj...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

graphw00f

Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...

graphw00f

标志致谢 Nick Aleks！ graphw00f - GraphQL 服务器指纹识别 目录 工作原理是什么？ 检测引擎 GraphQL 威胁矩阵 前置条件 安装 配置 使用示例 指纹识别 GraphQL 检测并指纹识别 GraphQL 支持与问题 资源 工作原理是什么？ graphw00f（灵感来源于 wafw00f）是针对 GQL 端点的 GraphQL 指纹识别工具，它通过发送一系列良性和畸形的查询来识别后台运行的 GraphQL 引擎。 graphw00f 将利用 GraphQL 威胁矩阵项目，提供每项技术默认提供的安全防御措施以及它们是默认开启还是关闭的洞察。...

maigret

Maigret English · 简体中文 Maigret 仅凭一个用户名,就能在大量站点上查找其账号,并从网页中收集所有可获取的公开信息,为目标人物生成一份档案。无需任何 API 密钥。AI 画像演示 。 赞助商 711Proxy 提供可靠的住宅代理,适用于网页抓取、用户名查询及公开数据采集。覆盖 200+ 个国家超 1 亿 住宅 IP · 高成功率 · 稳定快速。 特别优惠 :免费试用!轮换住宅代理低至 $0.55/GB 。无并发限制的不限量住宅代理低至 $15/小时 。 9Proxy 提供住宅代理,低至 $0.018/IP 或 $0.68/GB 。覆盖 90+ 国家超 2000 ...