citrixmash_scanner

CVE-2019-19781 citrixmash escáner Un escáner multihilo para dispositivos Citrix vulnerables a CVE-2019-19781. El escáner no intenta comprometer/explotar hosts y evita descargar contenido sensible. Se utiliza una solicitud HEAD para determinar si un objetivo es vulnerable. Los falsos positivos se...

CVE-2024-31317

CVE-2024-31317 Prólogo Hace un par de días vi que la cuenta oficial de JD publicó un análisis de la vulnerabilidad CVE-2024-31317. Después de leerlo completo, me pareció bastante interesante, y dado que las soluciones principales actuales para unidades de cabeza head units de vehículos son sistem...

Pummel

root@kitploit: ██████╗ ██╗ ██╗███╗ ███╗███╗ ███╗███████╗██╗ ██╔══██╗██║ ██║████╗ ████║████╗ ████║██╔════╝██║ ██████╔╝██║ ██║██╔████╔██║██╔████╔██║█████╗ ██║ ██╔═══╝ ██║ ██║██║╚██╔╝██║██║╚██╔╝██║██╔══╝ ██║ ██║ ╚██████╔╝██║ ╚═╝ ██║██║ ╚═╝ ██║███████╗███████╗ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝╚═════...

peer-tweet

PeerTweet Decentralized feeds using BitTorrent's DHT. Idea from Arvid and The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Screenshot Quick links Download the latest binaries from the releases page. Find and share PeerTweet addresses from the addresses issues page. What is PeerTweet?...

Sec5GLoc

Sec5GLoc: Aseguramiento de la Localización Interior 5G mediante una Arquitectura de Aprendizaje Profundo Resiliente a Adversarios Nuestro trabajo aborda los desafíos de seguridad y privacidad en la localización interior 5G mediante la propuesta de una arquitectura de aprendizaje profundo resilien...

CVE-2026-24733

CVE-2026-24733 What is CVE-2026-24733? Apache Tomcat incorrectly handled an HTTP/0.9-style HEAD request under certain security-constraint configurations. CVE-2026-24733 Defensive Verifier A lightweight, dependency-free Python security verifier for CVE-2026-24733 , an Apache Tomcat HTTP/0.9 HEAD...

CVE-2015-3337

CVE-2015-3337 CVE-2015-3337 Lectura arbitraria de archivos http://10.10.20.166:9200/plugin/head/../../../../../../../../../etc/passwd Uso: python CVE-2015-3337.py root@kitploit: python CVE-2015-3337.py / \ | | | | / | |/ | | | | || || || / | / / | | | | ' / /'| |/' || | | \ / / / / / / / / | | |...

dirsearch

DirSearch Este software es una implementación en Go del dirsearch tool original escrito por Mauro Soria. DirSearch es la primera herramienta que escribo en Go, principalmente para jugar y experimentar con el modelo de concurrencia de Go, canales, etc. : Propósito DirSearch toma una URL de entrada...

reverie

Reverie An efficient implementation of the NIZKPoK outlined in KKW 2018 Reverie is an implementation prover and verifier of the MPC-in-the-head NIZKPoK outlined in Improved Non-Interactive Zero Knowledge with Applications to Post-Quantum Signatures. Reverie seeks to offer concrete prover efficien...

pppoeject

PPPoEject — Linux kernel PPPoE use-after-free tracking site Source for the PPPoEject patch-status tracker: a single-page site recording which distributions have shipped a fix for the PPPoE sendmsg stale skb-head use-after-free in the Linux kernel. Where the facts live Everything about the bug — t...

CVE-2026-37072

CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9 es vulnerable a un Control de Acceso Incorrecto en admin-head-updates.php Un atacante no autenticado puede explotar una vulnerabilidad de Inclusión de Archivos Locales en el parámetro GET 'lang'. Al enviar una solicitud POST...

Linux Distros Unpatched Vulnerability : CVE-2026-90434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - isofs: release zisofs block pointer buffer head zisofsfillpages reads the compressed block pointer table. The error paths release the current bufferhead, the lo...

CVE-2026-90318 fat: release buffer head after rebuilding parent

In the Linux kernel, the following vulnerability has been resolved: fat: release buffer head after rebuilding parent fatscanlogstart leaves the matching directory entry's buffer head in sinfo.bh for the caller to release, just like fatscan. fatrebuildparent uses the directory entry to rebuild the...

CVE-2026-90318

CVE-2026-90318 affects the Linux kernel FAT filesystem. The vulnerability is a resource leak in fat_rebuild_parent(), which is used to rebuild the parent inode in the nostale_ro NFS export path . After a successful scan via fat_scan_logstart(), the matching directory entry's buffer head (sinfo.bh...

CVE-2026-72530-TrueConf-Sandbox-Escape-

CVE-2026-72530: TrueConf Server Sandbox Escape - Mitigation & Detection PoC 📌 General Description This repository contains an educational demonstration of mitigation and detection for CVE-2026-72530 , a critical Code Injection and Sandbox Escape vulnerability in TrueConf Server. Vulnerability...

CVE-2026-89961

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: fix wrong addrpfn tracking in compound vmemmap population vmemmappopulatecompoundpages uses addrpfn to determine the PFN offset within a compound page and to decide whether the current vmemmap slot should be populated...

CVE-2026-89961

CVE-2026-89961 affects the Linux kernel 's powerpc/mm subsystem, specifically the vmemmap_populate_compound_pages() function. The root cause is a mismatch in how addr_pfn is advanced relative to the loop's addr variable in vmemmap address space. Because each PAGE_SIZE step in addr spans PAGE_SIZE...

Linux Distros Unpatched Vulnerability : CVE-2026-89961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/mm: fix wrong addrpfn tracking in compound vmemmap population vmemmappopulatecompoundpages uses addrpfn to determine the PFN offset within a compound pa...

CVE-2026-50024 GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git server

GitHacker is a tool that restores Git repositories from exposed .git directories. In 1.1.7 and earlier, addheadfiletasks parses an attacker-controlled ref path from .git/HEAD and joins unvalidated path segments onto tempdst/.git/logs/, allowing a malicious server to make GitHacker read an arbitra...

CVE-2026-50024

GitHacker (a tool that restores Git repositories from exposed .git directories) is vulnerable to path traversal in versions 1.1.7 and earlier . The function add_head_file_tasks parses an attacker-controlled ref path from .git/HEAD and joins unvalidated segments onto temp_dst/.git/logs/, while add...