log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

-cve-2025-55182

CVE-2025-55182 バッチ / 単一 URL 検査スクリプト image CVE-2025-55182 脆弱性を効率的に検出するツール。単一 URL の高速検査とバッチ URL 検査に対応し、詳細な Excel レポートを自動生成、完全なログファイルも出力します。 🔥 コア機能 単一 URL 検査（-u）とバッチ URL ファイル検査（-f）に対応。パラメータは排他的で使いやすい Linux/Windows システムのペイロードをそれぞれテストし、乱数計算に基づいて脆弱性の有効性を検証 X-Action-Redirect / X-Middleware-Rewrite 応答ヘッダ...

Credential-Hunting

CredsHunter credshunter 是一个只读的凭证查找工具，专为授权后渗透场景设计。它遍历一次主机，找出你真正可以 重用 的秘密——密码、密钥、哈希值和凭证文件——同时忽略只会增加噪音的云/SaaS 令牌。 两个兄弟脚本，行为一致：Linux 使用 credshunter.sh，Windows 使用 credshunter.ps1。 工作原理 一个五阶段的漏斗，从 凭证存储位置 逐步缩小到 文件内部内容 。每个阶段在完成后立即输出结果。 root@kitploit: Stage 1 OS credential stores registry · GPP · historie...

CVE-2021-41773

CVE-2021-41773 Apache 2.4.49 路径遍历漏洞检查器 示例 平台 Linux 与 Windows...

wifi-password

wifi-password WiFiのパスワードを素早く取得し、必要に応じてWiFiのQRコードを生成して、スマートフォンが簡単に接続できるようにします。 macOS 、Linux 、Windows で動作します インストール pipを使用したインストール root@kitploit: $ python3 -m pip install --user wifi-password gitを使用したインストール root@kitploit: $ git clone https://github.com/sdushantha/wifi-password $ cd wifi-password $...

CVE-2025-31486-PoC

免責事項： 本稿で説明する脆弱性およびその再現手順は、サイバーセキュリティ研究および教育目的のみを対象としています。本稿の情報を不正な目的や無許可のシステムテストに使用することはできません。著者は、本稿の情報を使用したことによる直接的または間接的な損害について一切の責任を負いません。もし著作権侵害などがございましたら、速やかにご連絡ください。速やかに対処し、関連コンテンツを削除いたします。 その他の脆弱性 https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X 再現アドレス...

CVE-2022-33891

CVE-2022-33891 Apache Spark 漏洞利用。 作者 : Dr.Linux 此漏洞利用程序可在 Python 3.7 及更高版本中运行。...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Google Chrome’s compositing layer on Linux and Windows, prior to version 89.0.4389.72, allowed a remote attacker to spoof the contents of the Omnibox URL bar through a crafted HTML page...

CVE-2026-65590

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

PT-2026-63348

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

Malicious code in eth-wallet-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517d465272a3a1d252e83e178bb263a1ccf600b42fed6d5aa1d110b9141fc77a On require of index.js, a delayed IIFE reads test/fixtures/keypairs.dat, base64-decodes it into /.cache-db/.node-sync/syncd.js mode 0o700, and spawns...

MAL-2026-10075 Malicious code in testudo-pack (npm)

The npm package testudo-pack is byte-for-byte identical verified via diff to testis-pack from the same npm publisher ioa2102 [email protected], differing only in its install hook: postinstall: node index.js instead of preinstall. It presents itself as a small binary packing/checksum...

CVE-2026-8670

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs aka Session Replay. This issue affects Avantra: before 25.3.1...

Malicious code in @cloudplatform-single-spa/smk (npm)

Part of a dependency confusion attack campaign targeting the @cloudplatform-single-spa and @mlspace npm scopes. The attacker npm user mr.4nd3r50n published 139 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version...

CVE-2026-8670

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs aka Session Replay. This issue affects Avantra: before 25.3.1...

CVE-2026-8672

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0...

CVE-2026-8673

CVE-2026-8673 describes an unprotected transport of credentials in Avantra from syslink software AG on Linux and Windows, allowing sniffing of credentials. The affected line is Avantra before version 25.3.0. Documented impacts emphasize confidentiality and integrity risks, with CVSS v3.1 indicati...

CVE-2026-8672 Default credentials for internal DB

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0...

CVE-2026-8672

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0...