sploitego

Sploitego - Maltego 的（本地）搭档 1.0 - 简介 Sploitego 是一个本地渗透测试转换包，它使用 Canari Framework 在 Maltego 中执行本地转换。该框架最初在 DEFCON 20 上推出，此后逐渐受到欢迎。 2.0 - 安装 Sploitego 2.1 - 支持的平台 Sploitego 目前已在 Mac OS X 和 Linux 上测试过。 2.2 - 依赖要求 Sploitego 仅支持 Python 2.6 版本。安装脚本会自动下载并安装大部分先决模块，但有些模块仍然需要手动安装。以下模块需要手动安装： Scapy 2.1.0...

linuxprivchecker

Linuxprivchecker.py Linux権限昇格チェックスクリプト 元の作者: Mike Czumak Tv3rn1x -- @SecuritySift 現在のメンテナー: Michael Contino @Sleventyeleven このスクリプトは、Linux マシン上でローカルに実行し、基本的なシステム情報を列挙し、ワールド書き込み可能ファイル、設定ミス、平文パスワード、該当するエクスプロイトなどの一般的な権限昇格ベクトルを検索することを目的としています。 Linuxprivchecker...

PT-2026-86736

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

ship-safe

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

CVE-2026-81302

PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on the affected product...

Astra Linux – Vulnerability in TIF format

A flaw has been discovered in LibTIFF 4.7.0. This flaw affects the functions TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 in the file tools/tiffcmp.c of the tiffcmp component. Performing certain manipulations can lead to a memory leak. The attack is limited to local execution. This...

SGLang is Vulnerable to DoS via the data_hash Function

A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function datahash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the process. An attacker can execute arbitrary code with high confidentiality, integrity, and availability impact by triggering an out-of-bounds write through crafted input during local execution with required us...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the process. An attacker can execute arbitrary code with high confidentiality, integrity, and availability impact by triggering an out-of-bounds write through crafted input during local execution with required us...

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally...

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally...

PT-2026-70728

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An untrusted pointer dereference allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A pointer dereference...

CVE-2026-19366

A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insertcredsrangeconfig. Executing a manipulation of the argument configPath/outputPath can lead to path traversal. The attack is restricte...

EUVD-2026-54948

A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insertcredsrangeconfig. Executing a manipulation of the argument configPath/outputPath can lead to path traversal. The attack is restricte...

CVE-2026-19366 NocteDefensor LudusMCP insert_creds_range_config insertCredsRangeConfig.ts path traversal

A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insertcredsrangeconfig. Executing a manipulation of the argument configPath/outputPath can lead to path traversal. The attack is restricte...

CVE-2026-19366

A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insertcredsrangeconfig. Executing a manipulation of the argument configPath/outputPath can lead to path traversal. The attack is restricte...

CVE-2026-19337

A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component readwebpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This...