dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

CVE-2023-43494

CVE-2023-43494 Jenkins 2.50 hasta 2.423 ambos inclusive, LTS 2.60.1 hasta 2.414.1 ambos inclusive Lectura de archivos Referencias: https://www.jenkins.io/security/advisory/2023-09-20/SECURITY-3261 http://www.openwall.com/lists/oss-security/2023/09/20/5...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

CVE-2022-34962

OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 漏洞说明： OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 被发现通过 Group Timeline 模块存在一个存储型跨站脚本 XSS 漏洞。 攻击向量： 攻击者必须在 Group Timeline 上发布内容，并在位置输入中插入XSS载荷以利用存储型XSS。提交后，XSS载荷将立即执行。 受影响： http://ipaddress:port/ossn/group/number POST...

CVE-2022-34963

OpenTeknik LLC OSSN RED SOCIAL DE CÓDIGO ABIERTO v6.3 LTS Explicación de la vulnerabilidad: Se descubrió que OpenTeknik LLC OSSN Red Social de Código Abierto v6.3 LTS contiene una vulnerabilidad de cross-site scripting XSS almacenado a través del módulo News Feed. Vectores de ataque: El atacante...

DirtyFrag

Escalada de privilegios local / Escape de contenedor CVE-2026-43284 / CVE-2026-43500 Modo de uso: CGOENABLED=0 go build -ldflags="-s -w" -o dirtyfrag . ./dirtyfrag Versiones afectadas: Ubuntu 24.04.4 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS 14.04 LTS RHEL 8.x,9.x,10.1 CentOS 8,9,10...

CVE-2026-17508

The Bouncy Castle for Java cryptographic library (versions before 1.86 , LTS before 2.73.13 , and FIPS before bcpkix-fips 1.0.13, 2.0.13, and 2.1.13) contains a vulnerability where password-based key derivation functions (KDFs) use unbounded cost parameters from untrusted input. Specifically, the...

EUVD-2026-91236

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

exploit-CVE-2025-39946

README Este es un exploit para CVE-2025-39946. Funcionará en la instancia kCTF lts-6.12.48 pero no es 100% fiable. Escribí una publicación en mi blog analizando esta vulnerabilidad en detalle. Mírala aquí! Adaptación para otras versiones del kernel La única modificación que el exploit debería...

CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability

Jenkins es un servidor de automatización de código abierto. Ayuda a automatizar las partes del desarrollo de software relacionadas con la compilación, las pruebas y el despliegue, facilitando la integración continua y la entrega continua. CVE-2024-23897 Vulnerabilidad de lectura arbitraria de...

Rocky Linux 8.6 [CIQ] Security Update: python39-requests Multiple Vulnerabilities (ciqsa-2026_0753)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260753 advisory. This advisory aggregates security fixes for the python-requests SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8851-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8851-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Rocky Linux 8.6 [CIQ] Security Update: osbuild-composer / osbuild-composer-core / etc (ciqsa-2026_0130)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260130 advisory. This advisory aggregates security fixes for the osbuild-composer SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-34156. Tenable has extracted the preceding...

Rocky Linux 8.6 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0903)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260903 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2022-2989, CVE-2022-2990, CVE-2022-41723...

Rocky Linux 8.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-debuginfo / nginx-debugsource / etc (ciqsa-2026_0120)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260120 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-44487. Tenable has extracted the preceding description blo...

Ubuntu 20.04 LTS : Linux kernel (BlueField) vulnerabilities (USN-8850-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8850-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Rocky Linux 8.6 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0030)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260030 advisory. This advisory aggregates security fixes for the curl SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-38546, CVE-2023-46218, CVE-2023-28322,...