pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage root@kitploit: git clone...

CVE-2026-69217

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/1.1 parser accepts differing duplicate Content-Length headers and uses the last value instead of rejecting the message. When an Ember server is behind a keep-alive intermediary that selects a different...

CVE-2026-69217

Http4s (a Scala HTTP service interface) is vulnerable to CL.CL request smuggling due to its Ember HTTP/1.1 parser accepting differing duplicate Content-Length headers and using the last value instead of rejecting the message. Affected versions are prior to 0.23.35 and 1.0.0-M47 . When an Ember se...

CVE-2026-69204 Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/1.1 does not reject messages containing both Transfer-Encoding and Content-Length, so an intermediary and Ember can select different body framing rules. When ember-server is behind a keep-alive intermediary...

CVE-2026-75604 vulnerabilities

Vulnerabilities for packages: keep-fips, zitadel, peerdb-ui, keep...

GHSA-2XP9-VWFH-VXW4 vulnerabilities

Vulnerabilities for packages: keep-fips, zitadel, peerdb-ui, keep...

GHSA-P293-QW3H-JR36 vulnerabilities

Vulnerabilities for packages: keep-fips, zitadel, peerdb-ui, keep...

GoldenEye

本项目已不再维护 GoldenEye GoldenEye 是一款仅用于安全测试目的的 Python 3 应用程序！ GoldenEye 是一款 HTTP DoS 测试工具。 利用的攻击向量：HTTP Keep Alive + NoCache 使用方法 root@kitploit: USAGE: ./goldeneye.py OPTIONS OPTIONS: Flag Description Default -u, --useragents 要使用的用户代理文件 默认: 随机生成 -w, --workers 并发工作线程数 默认: 50 -s, --sockets 并发套接字数 默认: 3...

CVE-2026-78325

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...

CVE-2026-78325

CVE-2026-78325 is a cross-site scripting (XSS) vulnerability in the Evernote and Google Keep note importers of Standard Notes for Android through version 3.201.24 . An attacker can craft a malicious .enex or Google Keep HTML file that, when imported by a victim, executes arbitrary JavaScript in t...

CVE-2026-78325 XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...

CVE-2026-78325 XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...

GHSA-FPH4-WMHF-6FWF vulnerabilities

Vulnerabilities for packages: nextcloud-server, vitess, keep, unleash-proxy, yaml-language-server, wazuh-dashboard-fips, opensearch-dashboards, arangodb, gitlab-rails-ce-fips, opensearch-dashboards-fips, argo-workflows, wazuh-dashboard, langfuse, unleash, prism, kibana, keep-fips,...

GHSA-5CC2-282F-JJQ2 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, mlrun, keep-fips, mlrun-fips, airflow, keep, datadog-agent...

CVE-2026-15925 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, mlrun, keep-fips, mlrun-fips, airflow, keep, datadog-agent...

CVE-2026-75133

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

CVE-2026-75133

The Keep Backup Daily WordPress plugin (versions before 2.1.4 ) contains a sensitive information exposure vulnerability in the kbd_cron_process parameter. The parameter is publicly accessible without authentication, allowing an unauthenticated attacker over the network to trigger a full MySQL dat...

EUVD-2026-68608

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

CVE-2026-75133 Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

Astra Linux – Vulnerability in Puma

Puma is an HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted; it did not prevent new connections from being blocked by greedy persistent-connections that saturated all threads ...