octosuite

Terminal-based toolkit for GitHub data analysis. root@kitploit: $ octosuite user torvalds root@kitploit: from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Installation root@kitploit: pip install octosuite Usage T...

CVE-2023-26262

Sitecore 10.3 Уязвимость аутентифицированной загрузки файлов Автор: Thomas Stern Дата: 26/01-2023 Краткое описание Через функционал импорта языков можно загрузить произвольный файл. Этот файл может быть веб-шеллом, который позволит выполнять код на сервере. Шаги для воспроизведения Для тестирован...

airgeddon

airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...

clusterfuzzlite

ClusterFuzzLite ClusterFuzzLite is a continuous fuzzing solution that runs as part of Continuous Integration CI workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch...

CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend

Quick CMS Хранимая XSS v6.7 Автор: Sergio Описание: Уязвимость межсайтового скриптинга XSS в Quick CMS v6.7 позволяет локальному злоумышленнику выполнить произвольный код с помощью поддельного скрипта в настройках Front and back end - Pages в меню Languages. Векторы атаки: Скриптинг. Уязвимость в...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

CVE-2023-43346-Quick-CMS-Stored-XSS---Languages-Backend

Хранимая XSS в Quick CMS v6.7 Автор: Sergio Описание: Уязвимость межсайтового скриптинга XSS в Quick CMS v6.7 позволяет локальному атакующему выполнить произвольный код с помощью поддельного скрипта в разделе Бэкенд - Панель управления в меню языков. Векторы атаки: Скриптинг. Уязвимость в...

EUVD-2026-72558

knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting a malicious .knowns/config.json file. When a repository with a crafted configuration is opened, the unvalidated binar...

CVE-2026-86540

knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting a malicious .knowns/config.json file. When a repository with a crafted configuration is opened, the unvalidated binar...

PT-2026-86933

knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting a malicious .knowns/config.json file. When a repository with a crafted configuration is opened, the unvalidated binar...

cybersecurity-interview-questions

엔지니어링 인터뷰 질문 사이버 보안 분야의 엔지니어링 인터뷰 질문 세계에 오신 것을 환영합니다: 보안 및 컴퓨터 엔지니어링 인터뷰에 관한 멋진 프레임워크, 라이브러리, 학습 튜토리얼, 비디오, 웹캐스트, 기술 리소스 및 흥미로운 자료 모음입니다. 모든 기여자분들께 감사드립니다. 여러분은 정말 대단하며, 여러분 없이는 불가능했을 것입니다! 우리의 목표는 잘 알려진 리소스들을 커뮤니티 주도로 분류하여 정리한 컬렉션을 구축하는 것입니다. 목차 프로그래밍 언어/프레임워크/플랫폼 Android AngularJS Angular...

static-code-analysis-helper

Static-Code-Analysis-Helper 설명 프로젝트 폴더에 있는 여러 웹 프로그래밍 언어 및 프레임워크에서 공격 방법론을 유발할 가능성이 있는 함수를 탐지합니다. 정적 코드 분석을 수행하는 데 도움을 줍니다. 참고: 여기에 설명된 많은 함수는 취약점을 유발하지 않을 수 있습니다. 스크린샷 프로그래밍 언어 Go Python Ruby PHP JavaScript Java Rust Perl Ruby on Rails Swift Golang Scala Kotlin Julia Dart ASP.NET Core 결과와 관련된 공격...

Astra Linux – Vulnerability in Firefox, Thunderbird

During process shutdown, a document could cause a use-after-free of a languages service object, resulting in memory corruption and potentially exploitable crashes. This vulnerability affects Firefox 93, Thunderbird 91.2, and Firefox ESR 91.2...

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL. Confiant, which detailed the campaign on July 23, 2026, said it has...

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...