log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

-cve-2025-55182

CVE-2025-55182 배치 / 단일 URL 탐지 스크립트 이미지 효율적인 CVE-2025-55182 취약점 탐지 도구로, 단일 URL 신속 탐지 및 배치 URL 탐지를 지원하며, 상세한 Excel 탐지 보고서를 자동 생성하고 전체 로그 파일을 출력합니다. 🔥 핵심 기능 단일 URL 탐지-u 및 배치 URL 파일 탐지-f 지원, 매개변수 상호 배타적이며 사용하기 쉬움 Linux/Windows 시스템 Payload 개별 테스트, 난수 계산 기반 취약점 유효성 검증...

Credential-Hunting

CredsHunter credshunter — это программа для поиска учётных данных, доступная только для чтения, предназначенная для авторизованного пост-эксплуатационного использования. Она однократно обходит хост и выявляет секреты, которые можно повторно использовать — пароли, ключи, хэши и файлы с учётными...

CVE-2021-41773

CVE-2021-41773 Инструмент проверки уязвимости обхода пути в Apache 2.4.49 Пример Платформа Linux и Windows...

wifi-password

wifi-password Быстро получите пароль от Wi-Fi и, если нужно, сгенерируйте QR-код вашей сети Wi-Fi, чтобы телефоны могли легко подключаться. Работает на macOS и Linux , Windows Установка Установка с помощью pip root@kitploit: $ python3 -m pip install --user wifi-password Установка с помощью git...

CVE-2025-31486-PoC

免責事項： 本稿で説明する脆弱性およびその再現手順は、サイバーセキュリティ研究および教育目的のみを対象としています。本稿の情報を不正な目的や無許可のシステムテストに使用することはできません。著者は、本稿の情報を使用したことによる直接的または間接的な損害について一切の責任を負いません。もし著作権侵害などがございましたら、速やかにご連絡ください。速やかに対処し、関連コンテンツを削除いたします。 その他の脆弱性 https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X 再現アドレス...

CVE-2022-33891

CVE-2022-33891 Apache Spark 취약점 익스플로잇 . 제작자 : Dr.Linux 이 익스플로잇은 Python 3.7 및 이후 버전의 Python에서 실행됩니다...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Google Chrome’s compositing layer on Linux and Windows, prior to version 89.0.4389.72, allowed a remote attacker to spoof the contents of the Omnibox URL bar through a crafted HTML page...

CVE-2026-65590

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

PT-2026-63348

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

Malicious code in eth-wallet-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517d465272a3a1d252e83e178bb263a1ccf600b42fed6d5aa1d110b9141fc77a On require of index.js, a delayed IIFE reads test/fixtures/keypairs.dat, base64-decodes it into /.cache-db/.node-sync/syncd.js mode 0o700, and spawns...

MAL-2026-10075 Malicious code in testudo-pack (npm)

The npm package testudo-pack is byte-for-byte identical verified via diff to testis-pack from the same npm publisher ioa2102 [email protected], differing only in its install hook: postinstall: node index.js instead of preinstall. It presents itself as a small binary packing/checksum...

CVE-2026-8670

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs aka Session Replay. This issue affects Avantra: before 25.3.1...

Malicious code in @cloudplatform-single-spa/smk (npm)

Part of a dependency confusion attack campaign targeting the @cloudplatform-single-spa and @mlspace npm scopes. The attacker npm user mr.4nd3r50n published 139 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version...

CVE-2026-8670

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs aka Session Replay. This issue affects Avantra: before 25.3.1...

CVE-2026-8672

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0...

CVE-2026-8673

CVE-2026-8673 describes an unprotected transport of credentials in Avantra from syslink software AG on Linux and Windows, allowing sniffing of credentials. The affected line is Avantra before version 25.3.0. Documented impacts emphasize confidentiality and integrity risks, with CVSS v3.1 indicati...

CVE-2026-8672 Default credentials for internal DB

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0...

CVE-2026-8672

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0...