mquery

mquery: Blazingly fast Yara queries for malware analysts Ever had trouble searching for malware samples? Mquery is an analyst-friendly web GUI to look through your digital warehouse. It can be used to search through terabytes of malware in a blink of an eye: Under the hood we use our UrsaDB, to...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

RastLeak

RastLeak Tool to automatic leak information using Hacking with engine searches Google and Bing. How to install root@kitploit: git clone https://github.com/n4xh4ck5/RastLeak.git Install dependencies with pip: root@kitploit: pip install -r requirements.txt To install wget: root@kitploit: sudo pip...

CVE-2026-100654

vLLM before 0.29.0 accepts user-controlled stoptokenids on the OpenAI-compatible POST /v1/completions and POST /v1/chat/completions endpoints but validates only that the values are integers, not that each token id is within the model vocabulary/logits range. When mintokens 0, the stop token ids a...

CVE-2026-100652

vLLM versions 0.22.0 through 0.23.0 fail to validate stoptokenids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor. Attackers can submit requests with mintokens greater than zero and out-of-vocabulary stoptokenids to...

CVE-2026-100652

A flaw was found in vLLM. A remote attacker can trigger a Denial of Service DoS by sending requests containing stop token identifiers that exceed the supported vocabulary limits. Because the application's service frontends fail to properly validate these identifiers before internal processing, th...

CVE-2026-100654 vLLM before 0.29.0 Denial of Service via out-of-range stop_token_ids

vLLM before 0.29.0 accepts user-controlled stoptokenids on the OpenAI-compatible POST /v1/completions and POST /v1/chat/completions endpoints but validates only that the values are integers, not that each token id is within the model vocabulary/logits range. When mintokens 0, the stop token ids a...

EUVD-2026-87748

vLLM before 0.29.0 accepts user-controlled stoptokenids on the OpenAI-compatible POST /v1/completions and POST /v1/chat/completions endpoints but validates only that the values are integers, not that each token id is within the model vocabulary/logits range. When mintokens 0, the stop token ids a...

EUVD-2026-87746

vLLM versions 0.22.0 through 0.23.0 fail to validate stoptokenids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor. Attackers can submit requests with mintokens greater than zero and out-of-vocabulary stoptokenids to...

CVE-2026-100652 vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids

vLLM versions 0.22.0 through 0.23.0 fail to validate stoptokenids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor. Attackers can submit requests with mintokens greater than zero and out-of-vocabulary stoptokenids to...

ache

ACHE Focused Crawler ACHE is a focused web crawler. It collects web pages that satisfy some specific criteria, e.g., pages that belong to a given domain or that contain a user-specified pattern. ACHE differs from generic crawlers in sense that it uses page classifiers to distinguish between...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

subparse

subparse Subparse는 Josh Strochein, Aaron Baker, Odin Bernstein이 개발한 모듈형 프레임워크입니다. 이 프레임워크는 악성코드 파일을 파싱하고 인덱싱하며, 파싱 과정에서 발견된 정보를 검색 가능한 웹 뷰어로 제공하도록 설계되었습니다. 프레임워크는 모듈형으로, 핵심 파싱 엔진, 파싱 모듈, 그리고 악성코드 인덱스에 추가 정보를 제공하는 다양한 강화 모듈enricher로 구성됩니다. 프레임워크의 주요 입력 값은 악성코드 파일의 디렉터리이며, 핵심 파싱 엔진 또는 사용자가 지정한 파싱 엔...

sysmon-modular

sysmon-modular | A Sysmon configuration repository for everybody to customise Sysmon Modular is a configuration repository for Microsoft Sysinternals Sysmon. Small XML modules make it easier to select, review and maintain the telemetry that is useful to your organisation. The sysmon-modular Go to...

CVE-2026-98149

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and cgroup storage map updates without BPFFCPU or BPFFALLCPUS use a value buffer whose per-CPU slots are packed in possible-CPU order. The buffer is siz...

cve-2020-0618

CVE-2020-0618 ハニーポット CVE-2020-0618 SQL Reporting Services RCE の悪用試行を検出して記録します SSRS と同様のコンテンツとヘッダーを提供し、検索エンジン（Google、Shodan など）でのインデックス登録の可能性を高めます 以下の素晴らしい研究に基づいています: MDSec および x1sec インストール コードを入手 Go 環境が準備されていることを確認してください。 root@kitploit: git clone https://github.com/wortell/cve-2020-0618 証明書の生成...

CVE-2020-27368

CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 ディレクトリインデックス脆弱性 Description TOTOLINK-A702R-V1.0.0-B20161227.1023 のログインポータルのログインポータルにおけるディレクトリインデックスにより、攻撃者は GET パラメータを介して /icons/ ディレクトリにアクセスできます。 Additional Information Web サーバーのディレクトリリスト表示を無効にする修正策。 VulnerabilityType ディレクトリインデックス Vendor of...

DEBIAN-CVE-2026-93799

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to index fwidtomacid without bounds checking. Validate staid before array...

CVE-2026-93799

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to index fwidtomacid without bounds checking. Validate staid before array...