holos

Docker compose for KVM. Define multi-VM stacks in one YAML file. No libvirt, no XML, no distributed control plane. Website and docs: https://zeroecco.github.io/holos/ The primitive is a VM, not a container. Every workload instance gets its own kernel boundary, qcow2 overlay, cloud-init seed, and...

CVE-2025-32463_PoC

CVE-2025-32463 NVD CVE-2025-32463 In most cases, GCC is not installed by default on target servers. This proof of concept provides a precompiled version to ensure it can be executed immediately on affected systems. Usage 1. Compile the woot1337.c file: gcc -shared -fPIC -Wl,-init,woot -o...

CVE-2026-82043

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

EUVD-2026-91798

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

CVE-2026-82043 UTMStack < 11.2.16 Account Enumeration via Password Reset Endpoint

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

CVE-2023-25355-25356

Exploit and credits The exploit was found by [email protected] and is presented both in two amazing pieces: full disclosure article DEFCON31 slides A repo to automate even more this vulnerability has been published by Alex Linov: https://github.com/AlexLinov/sipXcom-RCE Objective The...

witchcraft

🎉 Your OPSEC companion. Run witchcraft help or witchcraft manual for the complete manual 🎉 What it does? WITCHCRAFT Are much more than a simple alias, it's a init system that can works with busybox, a shell and automation's and automation's engine for hacking, osint, forensics, etc. NAME witchcra...

f_hid-4.14-backports

fhid backports for Linux 4.14.190 SM-A525F Three fixes to drivers/usb/gadget/function/fhid.c, carried by hand to a 4.14.190 Android vendor kernel and verified on the device they run on. 4.14 is end-of-life. No stable backport exists for any of these, and none is coming. That is the whole reason...

CVE-2026-33725

CVE-2026-33725 一个针对 CVE-2026-33725 的概念验证漏洞利用程序，该漏洞是 Metabase 中 EE 序列化导入时通过 H2 JDBC INIT 注入导致的远程代码执行和任意文件读取漏洞。 受影响版本 Metabase Enterprise ≥ v1.47 且 v1.54.22 Metabase Enterprise ≥ v1.54.0 且 v1.54.22 Metabase Enterprise ≥ v1.55.0 且 v1.55.22 Metabase Enterprise ≥ v1.56.0 且 v1.56.22 Metabase Enterprise...

AlmaLinux 9.2 [TuxCare] Security Update: cloud-init (ALMALINUX9.2:CLSA-2025:1760025490)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760025490 advisory. - Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed password...

Rocky Linux 8 [CIQ] Security Update: cloud-init (crlsa-2025_11324)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202511324 advisory. cloud-init: Cloud init permissions flaw CVE-2024-6174 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Ness...

Rocky Linux 8.8 [CIQ] Security Update: cloud-init (ciqsa-2026_0383)

The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260383 advisory. This advisory aggregates security fixes for the cloud-init SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6174. Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: cloud-init (crlsa-2021_3081)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20213081 advisory. cloud-init: randomly generated passwords logged in clear-text to world-readable file CVE-2021-3429 Tenable has extracted the preceding description block directly fr...

Rocky Linux 9.4 [CIQ] Security Update: cloud-init (ciqsa-2026_0522)

The Rocky Linux 9.4 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260522 advisory. This advisory aggregates security fixes for the cloud-init SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2024-6174. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: cloud-init (ALMALINUX9.2:CLSA-2026:1782809708)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782809708 advisory. - Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could...

Rocky Linux 9.2 [CIQ] Security Update: cloud-init (ciqsa-2026_0401)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260401 advisory. This advisory aggregates security fixes for the cloud-init SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-6174. Tenable has extracted the preceding description...

Rocky Linux 8.6 [CIQ] Security Update: cloud-init (ciqsa-2026_0018)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260018 advisory. This advisory aggregates security fixes for the cloud-init SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-6174. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: opensc (ALMALINUX9.2:CLSA-2025:1765382050)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765382050 advisory. - A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the syste...

CLEANSTART-2024-OZ46983 When instructing cloud-init to set a random password for a new user account, versions before 21

Security vulnerability affects the cloud-init package. When instructing cloud-init to set a random password for a new user account, versions before 21...

AlmaLinux 9.2 [TuxCare] Security Update: cloud-init Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1760018787)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760018787 advisory. - cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666...