dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

[SECURITY] [DLA 4766-1] cyrus-imapd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4766-1 [email protected] https://www.debian.org/lts/security/ Xavier Guimard September 01, 2026 https://wiki.debian.org/LTS -...

hardentools

Hardentools Hardentools is designed to disable a number of "features" exposed by Microsoft Windows 10 and 11 and some widely used applications Microsoft Office, LibreOffice and Adobe PDF Reader, for now. These features, commonly thought for enterprise customers, are generally useless to regular...

CVE-2026-79682

Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58567

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2022-26134-Exploit-Detection

Confluence RCE CVE-2022-26134 エクスプロイト検出 前提条件 1. ClamAV このリポジトリをクローンするか、ConfluenceサーバーにYaraルールをダウンロードします この脆弱性を最初に公開した volexity/threat-intel が提供する Yara ルールを使用しています。 Git クローン root@kitploit: git clone https://github.com/th3b3ginn3r/CVE-2022-26134-Exploit-Detection.git Raw ファイルのダウンロード...

poc-cribl-rce

免责声明 本文档仅供信息/教育目的使用。 编写本文档旨在演示该工具中的一个安全缺陷，以便供应商验证修复方案。 信息 已在 Cribl v1.5.0 上测试 - 未对早期版本进行测试，但可能同样存在漏洞。 有效的 JWT 令牌可以从一个 Cribl 实例传输并注入到另一个 Cribl 实例的会话中，从而使用户获得未经授权的访问权限。 此外，用于生成 JWT/会话的加密密钥可用于为任意用户名创建有效会话，并延长其有效期。 结合 Cribl 中运行脚本的能力，远程攻击者可以在 Cribl 实例上运行恶意代码，从而获得进一步的控制权。 下面是一个此类示例：利用脚本页面和长期有效的 JWT...

CVE-2022-1388

F5-CVE-2022-1388-Exploit CVE 2022-1388 的利用和检查脚本 使用方法 root@kitploit: / | | | || | / | |/ / \ / | | || || | | / /| | | || | ' / /'| |/' |' / /'' / /'| | / / \ V / \ V / | | | | | || ||| / / | /| | / / / / ||| | \ \ / \ / \ | /\ / /| | ./ /\ |/ /./ /./ / | |./ /| || || || | / / / / / //...

log4shell-mitigation-tester

Probador de mitigación Log4Shell Esta es una aplicación de ejemplo que utiliza Log4j 2.14.1. código fuente: App.java El propósito de esto es poder probar diferentes enfoques de mitigación. Los enfoques de mitigación también se mencionan en la respuesta de Microsoft a CVE-2021-44228 Apache Log4j 2...

CVE-2026-58567

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58567

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58567

Dell PowerStore is affected by an OS Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, changed scope...

EUVD-2026-69302

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

grapheneX

grapheneX コンピューティングにおいて、ハードニングとは通常、システムの脆弱性表面を減らすことでセキュリティを強化するプロセスを指します。システムがより多くの機能を実行するほど脆弱性表面は大きくなります。原則として、単一機能のシステムは多目的なシステムよりも安全です。攻撃経路を減らす方法としては、デフォルトパスワードの変更、不要なソフトウェアの削除、不要なユーザー名やログインの削除、不要なサービスの無効化や削除などが含まれます。 grapheneX...

netzob

=========================================================== Netzob : Protocol Reverse Engineering, Modeling and Fuzzing .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 See complete documentation here:...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for August 2026.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 26.0.0-IF002 and 24.0.1-IF009. These vulnerabilities have been also addressed in 24.0.0-IF008 and 25.0.0-IF006 Vulnerability Details CVEID:CVE-2026-11806 DESCRIPTION: IBM WebSphere Application Server - Liberty...

the-book-of-secret-knowledge

"지식은 강력하니, 사용할 때 조심하세요! " 영감을 주는 목록, 매뉴얼, 치트시트, 블로그, 해킹 기법, 원라이너, CLI/웹 도구 등이 담겨 있습니다. 📔 무엇인가요? 이 저장소는 제가 업무에서 매일 사용하는 다양한 자료와 도구를 모아 놓은 것입니다. 하나의 문서에 많은 유용한 정보가 담겨 있습니다. 제가 자주 참고하는 소중한 지식의 원천입니다. 🚻 누구를 위한 것인가요? 사실 모든 사람을 위한 것입니다. 여기에서 각자 취향에 맞는 내용을 찾을 수 있습니다. 하지만 정확히 말하자면, 시스템 및 네트워크 관리자, DevOps...

DavRelayUp

DavRelayUp A quick and dirty port of KrbRelayUp with modifications to allow for NTLM relay from webdav to LDAP in order to streamline the abuse of the following attack primitive: 0. Optional New machine account creation New-MachineAccount 1. Force start the WebClient service 2. Start webdav relay...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

demiguise

Demiguise - HTA encryption tool Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Warren, richard dot warren at nccgroup dot trust http://www.github.com/nccgroup/demiguise Released under AGPL, see LICENSE for more information What does it do? The aim of th...