10221 matches found
patoolkit
.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...
setup-wordpress-with-security-best-practice
Setup WordPress With Security Best Practice This document is written with the aim of being suitable for web applications developed using WordPress that do not interact with users. It is primarily intended for corporate brand pages, various static views, recruitment pages, and similar sites. For...
git-all-secrets
git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...
PT-2026-137197
Name of the Vulnerable Software and Affected Versions VitaFit Android application versions prior to 2.8.1.0 Description An insecure TLS/SSL certificate validation issue exists due to a custom X509TrustManager that trusts all certificates and a hostname verifier that accepts any hostname. This...
PT-2026-137140
SumatraPDF is a multi-format reader for Windows. In version 3.6.1 and earlier, HttpGet in src/base/Http win.cpp unconditionally passes INTERNET FLAG IGNORE CERT CN INVALID to WinINet, disabling hostname matching for HTTPS update metadata and crash-symbol requests while retaining certificate-chain...
endsfuzzer
endsfuzzer endsfuzzer is a simple tool used to fuzz a list of domains for specific endpoints. It will check all the domains in a list for a single endpoint, then moves on to the next endpoint to check for. Features Fast. Makes use of go routines. Gentler to servers. Fuzzes all hosts for one...
bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records
A flaw was found in BIND 9. A remote attacker can exploit this vulnerability by querying a BIND resolver for the root of a specially crafted, cached tree of SVCB/HTTPS AliasMode records. This action causes the resolver to spend a disproportionate amount of CPU time constructing the response,...
Important: Red Hat Security Advisory: bind9.18 security, bug fix, and enhancement update
An update for bind9.18 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing
A flaw was found in the BIND resolver. A remote attacker could exploit a vulnerability in the processing of SVCB/HTTPS AliasMode records that reference numerous ServiceMode records. This could lead to the resolver failing to properly release internal resources, causing resource exhaustion. Repeat...
mitmengine
MITMEngine DEPRECATION NOTICE: This software is no longer maintained. The goal of this project is to allow for accurate detection of HTTPS interception and robust TLS fingerprinting. This project is based off of The Security Impact of HTTPS Interception, and started as a port to Go of their...
bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing
A flaw was found in the BIND resolver. A remote attacker could exploit a vulnerability in the processing of SVCB/HTTPS AliasMode records that reference numerous ServiceMode records. This could lead to the resolver failing to properly release internal resources, causing resource exhaustion. Repeat...
bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records
A flaw was found in BIND 9. A remote attacker can exploit this vulnerability by querying a BIND resolver for the root of a specially crafted, cached tree of SVCB/HTTPS AliasMode records. This action causes the resolver to spend a disproportionate amount of CPU time constructing the response,...
RLSA-2026:85930 Important: python-urllib3 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
python-urllib3 security update
An update is available for python-urllib3. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
noseyparker
Nosey Parker is now Replaced by Titus. Nosey Parker is Officially Retired See our announcement post https://www.praetorian.com/blog/titus-open-source-secret-scanner/. The Titus Repo can be found at https://github.com/praetorian-inc/titus Overview Nosey Parker is a CLI tool that finds secrets and...
Important: Red Hat Security Advisory: python-urllib3 security update
An update for python-urllib3 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override
A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security TLS settings inadvertently overwrite the proxy's TLS configuration, which can disabl...
Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM contains components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Network Threat Analytics App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-97687 DESCRIPTION: urllib...
Vulnerability fixed in LXD by Canonical
Canonical has patched a vulnerability in LXD. The vulnerability CVE-2026-112816 stems from improper validation of certificate chains within Canonical’s LXD HTTPS API. It affects LXD versions prior to 4.0.15, 5.0.11, 5.21.9, and 6.10.1 within their respective release branches. As a result,...
