Security update for docker

This update for docker rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...

Security update for buildah

This update for buildah rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...

UNIVERGE IX-R/IX-V series routers vulnerable to missing authentication for critical function

Overview UNIVERGE IX-R/IX-V series routers provided by NEC Corporation contain the following vulnerability. Missing authentication for critical function CWE-306 - CVE-2026-16876 Kojiro Enokida of SOPHOS reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

lure v0.5.1

lure Local Linux binary analysis. Zero cloud. Zero root. Zero cost. ⚠️ Early development v0.4.0. Core features inspect, run, diff work end to end on x8664 Linux. This is a young project — expect rough edges, limited error handling on unusual inputs, and missing features. Bug reports, feedback, and...

Security update for cosign

This update for cosign rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...

SHIRO-721

SHIRO-721 Vulnerabilità RCE del Padding Oracle di RememberMe 0x00 Introduzione: Il RememberMe del cookie è crittografato tramite AES-128-CBC, il che lo rende vulnerabile agli attacchi Padding Oracle. Un attaccante può utilizzare un cookie RememberMe valido come prefisso per l'attacco Padding...

Redis-RCE

Redis-RCE Remote-Code-Ausführung für Redis 4 und Redis 5 Python-Code von https://github.com/Ridter/redis-rce Durch das Laden der SO-Datei wird der neue Befehl system.exec hinzugefügt, um die Befehlsausführung erfolgreich durchzuführen strings explin.so |grep sys root@kitploit: system system.exec...

jvmtiAgentLoad-Exploit

Esecuzione arbitraria di codice tramite jvmtiAgentLoad Descrizione: Strumenti e codice per generare un JAR dannoso per sfruttare jvmtiAgentLoad Utilizzo: root@kitploit: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Target Linux Il seguente comando genera un JAR...

CVE-2026-39987

CVE-2026-39987 marimo è un notebook Python reattivo. Prima della versione 0.23.0, Marimo presenta una vulnerabilità RCE pre-autenticazione root@kitploit: / | |// / / / / / / |/ |/ \ / | | | \ /| | /| //|/|/ / | | | / -----/ | |/ |/ ----- \ | |/ \ / / / / //// / | |// CVE-2026-39987...

V2E_artifacts

CVE-2021-43267 Work Artifacts This bundle preserves the curre...

node9-proxy v1.67.3

🛡️ Node9 What did your AI agent actually do? Find out. Node9 sits between your AI agent and the tools it can use — discover what it's already been doing, protect against risky actions in real time, and review what happened over any time window. Works with Claude Code · Codex CLI · Antigravity agy ...

secpub

Cisco Nexus OS NX-OS - Problemi di "command injection" / sanificazione dei comandi. Scoperto da: Peter Adkins [email protected] Accesso: Locale; è richiesto accesso autenticato. Tracciamento e identificativi: CVE - CVE-2011-2569 Sistemi operativi interessati: Cisco Nexus OS NX-OS...

BlackNET

BlackNET 😈 VB.NET का उपयोग करके विकसित एक सुंदर और सुरक्षित PHP पैनल के साथ मुफ्त, उन्नत और आधुनिक Windows botnet। BlackNET के बारे में 🤓 VB.NET का उपयोग करके निर्मित एक सुंदर और सुरक्षित PHP पैनल के साथ मुफ्त, उन्नत और आधुनिक Windows botnet। यह बॉटनेट नियंत्रक बहुत सारी सुविधाओं और सबसे सुरक्षित...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

invoker

Invoker Penetrationstest-Dienstprogramm und Antiviren-Bewertungstool. Erstellt mit Visual Studio Community 2022 v17.5.4 64-Bit und getestet unter Windows 10 Enterprise OS 64-Bit. Für Bildungszwecke erstellt. Ich hoffe, es wird helfen! Dieses Repository hat bekannte Signaturen und ich habe keine...

lnkbomb

Lnkbomb Lnkbomb is used for uploading malicious shortcut files to insecure file shares. The vulnerability exists due to Windows looking for an icon file to associate with the shortcut file. This icon file can be directed to a penetration tester's machine running Responder or smbserver to gather...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

gokart

GoKart - Analisi Statica di Sicurezza per Go GoKart è uno strumento di analisi statica per Go che trova vulnerabilità utilizzando la forma SSA assegnazione statica singola del codice sorgente Go. È in grado di tracciare l'origine delle variabili e degli argomenti delle funzioni per determinare se...

gokart

GoKart - Go Security Static Analysis GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA single static assignment form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces...

findom-xss

FinDOM-XSS FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner. Installation root@kitploit: $ git clone https://github.com/dwisiswant0/findom-xss.git --recurse-submodules Dependencies: LinkFinder Usage To run the tool on a targe...